Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff9c09fb-87f3-3690-8f51-2c5fb8684343.roa
File:                     ff9c09fb-87f3-3690-8f51-2c5fb8684343.roa (raw, json)
Hash identifier:          32qfamXHekKtxp7mKRzJHzg8hERdXdVZ+MwpoMll/FM=
Subject key identifier:   D1:56:51:EE:55:FC:7D:6B:9F:A6:75:79:D1:EB:1E:1F:98:96:6B:D3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F81483BFC31651E94C5A36254
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff9c09fb-87f3-3690-8f51-2c5fb8684343.roa
Signing time:             Thu 15 Oct 2026 01:00:12 +0000
ROA not before:           Thu 15 Oct 2026 01:00:12 +0000
ROA not after:            Wed 13 Jan 2027 02:00:12 +0000
asID:                     51500
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:81:48:3b:fc:31:65:1e:94:c5:a3:62:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 15 01:00:12 2026 GMT
            Not After : Jan 13 02:00:12 2027 GMT
        Subject: CN=4011e1cb-d006-4d64-aaab-3d512573c06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:4f:f7:96:e0:7b:4e:4a:26:0e:55:b4:6e:
                    06:9b:f0:19:fc:10:77:12:2a:48:2f:0a:cb:ca:d8:
                    9e:71:14:d5:9c:c6:b5:7a:00:01:93:b6:27:b5:fb:
                    08:7c:a2:06:4c:0a:c3:d4:91:5c:35:82:3d:e4:88:
                    09:2e:b1:f7:52:24:62:7d:42:93:9a:f4:ef:0a:b5:
                    7b:89:b4:80:b5:53:d9:29:a5:61:7b:b8:e9:1c:86:
                    a5:9b:02:e9:80:cd:e3:2c:a9:f1:0c:2f:7c:9e:2c:
                    40:ae:fa:c7:1d:53:db:43:70:bf:48:8e:5f:b7:ab:
                    71:38:b0:f1:fb:7d:e7:7b:6d:f4:0d:2c:1c:ed:a2:
                    0c:36:c6:cf:78:54:b6:a8:25:a0:6d:a7:57:c0:40:
                    75:2c:d1:39:ae:fb:6f:b7:c5:f3:d0:16:03:54:b7:
                    fc:52:af:07:c1:1e:8c:28:99:d2:3e:a0:51:dd:ce:
                    0e:4e:f3:67:20:97:84:82:31:fe:49:8c:6e:41:a1:
                    a0:74:6b:6d:d4:98:92:b2:98:5e:03:af:5c:64:b6:
                    8b:bd:53:fa:ea:b3:46:73:14:41:a2:a4:f5:2c:fd:
                    b1:c4:47:f6:95:2c:df:5c:18:a2:71:af:e2:d5:d2:
                    91:0c:9e:ca:bb:e8:86:a5:1f:63:86:03:5c:4d:91:
                    87:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:56:51:EE:55:FC:7D:6B:9F:A6:75:79:D1:EB:1E:1F:98:96:6B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff9c09fb-87f3-3690-8f51-2c5fb8684343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:5a:88:4d:8e:20:d5:40:17:21:da:2d:2e:a3:48:30:ba:cf:
         9f:64:c8:45:79:84:c7:fd:b8:f5:2a:fb:57:0b:09:d7:db:04:
         4b:68:ac:9e:cf:79:80:03:23:d9:a1:ae:74:50:46:df:29:0f:
         cb:dd:67:a5:5e:1a:04:0c:8b:29:6c:49:6f:0c:9e:db:15:8e:
         b3:c1:ca:b9:9a:7c:51:fe:62:d4:40:4f:fb:69:18:cd:19:1d:
         4b:e9:06:89:bc:c4:81:f8:37:b0:2d:49:c2:a3:b4:e1:19:d7:
         40:f2:37:af:05:13:a9:14:74:0f:fc:e9:88:ba:1c:10:3c:f4:
         80:8a:ef:8e:8f:25:30:75:43:69:6e:e7:95:c9:53:0f:29:4c:
         a3:1d:d4:f3:19:bb:a1:88:fc:29:25:00:7e:02:39:70:41:07:
         e0:ef:2c:35:a0:04:4a:1f:d9:73:03:4a:55:25:35:dd:a1:8a:
         a5:7b:cd:64:a3:84:11:cf:1c:33:47:d3:92:33:eb:cf:3e:ac:
         d6:24:b1:df:b3:93:c3:2f:0e:f0:bf:48:c7:75:69:fe:b3:7e:
         ec:8b:8f:b6:20:ef:53:78:2b:b0:65:a9:58:10:9e:d3:01:8b:
         c5:72:9d:e8:16:6b:3d:06:3f:d5:72:ae:0f:c6:d2:c0:7d:1a:
         b1:9d:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:26:00 2026 by rpki-client