Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d31a8f6f-978e-3df5-a8ea-3ddc5cfc65fb.roa
File:                     d31a8f6f-978e-3df5-a8ea-3ddc5cfc65fb.roa (raw, json)
Hash identifier:          72FJvIbWPXYElD7bHM0fyPY8I7ECC3gcyn/hsruVanc=
Subject key identifier:   A7:A5:83:32:0D:7E:57:64:23:F4:6D:B6:A7:6C:48:A5:F2:FC:15:22
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F81483E76786682F561FF7180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d31a8f6f-978e-3df5-a8ea-3ddc5cfc65fb.roa
Signing time:             Thu 15 Oct 2026 01:00:12 +0000
ROA not before:           Thu 15 Oct 2026 01:00:12 +0000
ROA not after:            Wed 13 Jan 2027 02:00:12 +0000
asID:                     34187
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:81:48:3e:76:78:66:82:f5:61:ff:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 15 01:00:12 2026 GMT
            Not After : Jan 13 02:00:12 2027 GMT
        Subject: CN=66ae0500-4939-44ac-8dd6-d971c1efe216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:31:4c:27:d3:1b:95:ca:f4:6d:bc:bb:fb:27:
                    68:ef:bf:f6:46:01:8e:50:56:e2:ef:11:07:5b:f2:
                    fc:67:cd:a0:85:f0:88:79:cf:d7:d3:f9:77:5a:d7:
                    49:a1:6c:3f:11:f8:0e:3f:7a:34:66:56:2f:a0:e3:
                    96:a4:7c:bc:00:06:07:42:da:4c:21:0e:02:5a:e1:
                    06:fb:f2:58:73:46:4f:ed:66:3a:d9:26:cd:c5:ad:
                    88:c9:6a:e4:d3:f3:ad:c5:a2:39:3b:5f:2c:11:6c:
                    c7:a7:9b:b2:ea:fd:d6:81:3a:c8:8f:e7:79:2c:60:
                    2b:4e:b4:e3:be:ab:c2:88:cd:6b:51:48:12:ed:64:
                    3f:60:19:59:55:83:05:fb:e5:47:5a:d2:5e:04:4d:
                    ae:47:04:48:98:74:a3:7d:f1:64:5a:a3:8a:01:9d:
                    cd:ab:69:6d:a7:5c:d2:80:bf:02:4b:e5:e9:3a:a4:
                    a5:57:a9:4a:e0:0a:16:56:4c:a5:95:fb:76:dc:46:
                    ae:53:8d:65:1e:8e:1e:f5:fc:26:16:da:44:f4:fb:
                    d0:56:34:e8:b3:78:e4:a2:1b:2b:34:f9:39:3d:69:
                    67:75:62:69:12:26:9d:cd:a3:08:49:bb:42:87:c8:
                    06:90:36:21:93:fa:b5:28:86:1d:5c:a1:f8:89:6c:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A5:83:32:0D:7E:57:64:23:F4:6D:B6:A7:6C:48:A5:F2:FC:15:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d31a8f6f-978e-3df5-a8ea-3ddc5cfc65fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f1:93:c9:91:c5:7d:ee:6f:6c:82:f7:82:a8:a2:af:06:93:
         8c:49:b8:95:b1:ae:62:a7:55:4f:98:a0:51:9e:21:95:7b:21:
         4b:96:70:29:9e:da:ae:94:88:f1:e2:cd:37:03:0d:6b:72:78:
         3e:e0:f2:b2:94:10:43:ed:d5:7c:49:a9:d5:40:43:10:fa:20:
         5c:11:8a:6e:65:02:16:f3:db:04:64:c7:69:f8:94:75:d5:5a:
         61:29:fe:30:ba:53:fc:84:d5:53:08:1d:5d:eb:14:79:55:02:
         70:e4:c7:65:42:f5:a1:bd:0d:31:8c:05:79:9e:b1:3a:06:e4:
         1d:ff:a3:80:12:a3:b6:75:e1:de:76:26:70:d2:11:26:69:ce:
         d4:da:f3:1e:ea:75:20:ed:2a:6f:36:e5:04:5d:f6:46:04:0c:
         5b:16:35:0e:7a:24:22:ee:fa:3c:fe:2a:67:91:bb:bc:ac:0e:
         8c:04:45:d6:8c:83:72:31:7a:f1:36:b6:28:fe:f8:b6:ee:cc:
         ae:b3:e2:fc:6b:a1:72:0e:cd:d4:49:2b:f8:06:fe:7e:26:e5:
         3e:83:63:5e:df:40:57:18:04:00:14:3c:1f:7b:d6:ae:15:6b:
         8f:2a:b3:c4:db:fb:c7:8f:b7:2a:c1:7a:b8:62:7d:2b:3e:bf:
         1e:11:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:03:35 2026 by rpki-client