Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edafe759-3d3f-3a19-9158-e751a8767e4a.roa
File:                     edafe759-3d3f-3a19-9158-e751a8767e4a.roa (raw, json)
Hash identifier:          iRQKCoZhWWg0TydphOgiczBkIa6msG+7T/4dxK1qp9Y=
Subject key identifier:   E6:27:59:70:CA:CD:30:F7:F0:C6:11:4E:CA:23:EE:FF:A6:F0:92:62
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7E005EBC7699F06B3A1C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edafe759-3d3f-3a19-9158-e751a8767e4a.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     58715
IP address blocks:        2001:470:2b7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7e:00:5e:bc:76:99:f0:6b:3a:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=baca5c25-dd37-4cc9-8eea-e22ecd152be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:4f:a9:55:91:90:7d:99:2b:e1:57:8f:a7:
                    43:07:4c:54:52:f6:a1:d2:c5:09:69:aa:9a:07:4e:
                    81:1b:4d:02:4e:37:61:8d:7e:8e:d3:1a:df:39:9c:
                    33:d4:fd:42:7e:ac:04:5d:57:7b:44:65:2e:8b:88:
                    18:90:cd:3b:e9:42:79:de:d9:60:92:3e:20:79:3f:
                    9e:5b:ec:23:91:7c:4b:59:8f:54:f7:1e:d7:59:dc:
                    c7:27:f4:34:80:6a:b8:15:3f:8e:e8:20:bf:85:47:
                    ad:80:c0:75:f1:19:c2:e8:16:9a:8d:d2:57:45:a5:
                    2f:bc:38:c4:6b:0c:f9:f5:70:37:b3:12:38:f4:25:
                    e5:b7:31:32:d8:6d:30:bc:d8:ae:57:0b:f7:18:fb:
                    22:4c:ad:75:a6:d6:1e:6a:a2:3d:c1:6f:a6:b8:eb:
                    d3:25:74:b2:8c:92:b2:b2:29:4f:93:36:5e:e6:70:
                    c9:c9:b5:bf:3c:5f:48:e4:7e:6d:66:33:02:20:17:
                    fc:0a:5e:77:12:00:b9:df:c3:6e:7f:38:b5:f0:9e:
                    95:36:c6:93:5e:4e:52:63:4b:5d:c7:ca:dc:46:56:
                    58:38:c9:34:6a:d6:39:1a:bc:df:c5:be:83:c8:83:
                    56:ac:61:ce:1b:6d:66:86:db:49:fa:b4:42:c4:59:
                    10:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:27:59:70:CA:CD:30:F7:F0:C6:11:4E:CA:23:EE:FF:A6:F0:92:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edafe759-3d3f-3a19-9158-e751a8767e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3f:25:ea:86:5a:c7:79:cd:3d:3d:a3:d3:a7:3b:63:fc:cc:
         0d:b8:ac:01:4a:24:7b:fb:a6:90:3b:8e:0e:8f:df:ce:14:f3:
         6d:40:8b:f6:16:94:17:18:b3:7a:aa:ff:7a:54:83:8b:64:fb:
         64:15:3a:f5:8c:38:77:0e:18:b9:4c:c7:48:95:92:6c:48:4f:
         a4:25:9b:79:32:3d:77:99:61:c7:cd:8c:3a:7f:3f:88:8f:bb:
         43:c3:36:b0:7d:fc:61:e5:60:fc:41:03:59:e9:0e:12:00:c5:
         59:69:d3:94:3f:ae:ca:b3:cf:71:fb:5c:91:70:b4:6d:65:bd:
         e4:cd:6a:67:8c:91:c4:76:66:e8:7b:c3:cc:02:f0:40:fc:d2:
         9a:e1:c4:64:82:e3:1e:f2:90:6a:ad:95:66:ce:ad:e8:28:73:
         4a:79:92:81:80:f7:4c:77:83:5f:be:74:9d:da:19:fa:87:6f:
         f7:df:44:50:36:c8:5d:85:3a:28:93:8f:71:4f:73:01:13:a7:
         25:e1:f9:2c:56:ba:8c:f5:27:ed:38:a3:23:8d:5e:fd:2f:71:
         ab:04:d4:cb:0a:09:19:45:99:8a:8d:68:73:40:6f:aa:ea:6e:
         b8:6d:3f:7a:be:52:b8:2b:aa:fb:59:ff:7b:e9:7b:14:19:1a:
         bb:f5:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:50 2026 by rpki-client