Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1d39469-f558-312f-bf72-91fb39f600c9.roa
File:                     a1d39469-f558-312f-bf72-91fb39f600c9.roa (raw, json)
Hash identifier:          IddnPq5RE27ruIDn15V0IbRkmqZ50l6WKZnsN3QdXhM=
Subject key identifier:   FE:F4:13:60:5B:5F:37:55:D3:3C:E9:2A:E9:CB:AE:6D:20:41:30:D4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F6F2314D5F1A8B959ECC91EBC
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1d39469-f558-312f-bf72-91fb39f600c9.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     211826
IP address blocks:        2001:470:159::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:14:d5:f1:a8:b9:59:ec:c9:1e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=a77daa47-c89b-442a-8337-343dbc71af33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5d:45:81:a9:55:b5:55:6e:be:b9:a5:3a:e5:
                    e0:a6:30:cf:69:aa:3d:d1:8b:03:8e:4a:c5:a6:df:
                    10:5c:48:1a:2d:54:8e:ca:8e:31:42:89:92:72:ae:
                    2d:98:90:a2:32:30:d4:9d:2f:7a:5d:b6:ad:62:98:
                    91:15:af:61:3b:5c:48:f9:4d:3e:a7:ce:a8:e2:51:
                    61:27:f5:72:fc:ff:12:5a:ab:5d:45:cd:71:0f:8d:
                    5d:a0:8e:3d:b6:f7:d9:9d:94:b3:a2:3b:ff:5d:54:
                    9a:10:f9:6a:5f:6c:2e:9f:88:33:50:a4:81:06:72:
                    53:2e:17:5d:69:91:29:db:45:a0:0a:a1:09:b0:25:
                    79:c0:22:ee:af:e4:08:b9:8c:3c:83:a7:f7:91:aa:
                    18:ab:29:4a:28:e7:29:84:c3:e7:61:1a:b4:57:e4:
                    d7:49:df:24:3f:79:2f:15:ad:ed:31:85:be:d7:d4:
                    b3:bb:83:3d:55:17:a2:b4:cb:f4:a2:36:d7:67:79:
                    23:fe:60:ba:f7:17:a9:e1:85:8b:85:7f:ce:50:0c:
                    78:f9:af:71:f9:09:22:7a:f9:58:12:c6:e3:94:d0:
                    68:4b:2f:1d:8d:4a:e0:9f:28:23:9e:a7:f0:b4:7b:
                    98:56:56:15:66:61:ea:eb:be:7c:a6:bc:dd:31:ff:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F4:13:60:5B:5F:37:55:D3:3C:E9:2A:E9:CB:AE:6D:20:41:30:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1d39469-f558-312f-bf72-91fb39f600c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:159::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d9:c6:75:60:e0:6d:57:a8:57:39:cc:68:fd:75:42:cf:5b:
         05:db:e2:90:b7:c4:6c:25:5f:3a:c0:b4:c4:cb:12:27:38:72:
         52:6d:54:4d:f5:06:5b:74:72:66:98:4f:7c:15:7d:7a:cd:c0:
         34:4b:24:5f:39:4b:74:e9:42:0e:fc:b9:ac:79:74:1a:22:b6:
         dc:38:14:32:2a:fc:06:e3:72:cd:a4:15:a3:c1:de:fa:4d:b4:
         81:f3:98:50:de:4d:f4:74:a0:df:8a:08:67:d6:54:c2:21:6e:
         96:8b:f6:1e:82:2b:0f:5a:84:d4:6f:81:e3:e9:c4:d2:30:62:
         ed:00:04:60:e5:a9:fa:6a:4f:36:55:4b:f6:56:a6:ff:15:6e:
         dd:39:4a:b4:29:ae:aa:e8:6f:80:b6:82:bf:e5:ac:fe:df:5c:
         83:d1:cf:3a:9a:99:36:c7:47:8f:af:07:41:03:55:58:c8:80:
         a4:18:f4:f1:69:b1:e6:9e:ca:53:e2:9a:31:5a:a0:39:81:d4:
         af:34:50:10:2f:a0:c5:fb:cc:93:a8:d5:4a:af:a6:52:a6:c3:
         30:a8:7f:b7:ec:17:56:2c:32:c2:e8:3b:7a:bf:44:1b:83:b1:
         76:69:fe:ec:ab:96:66:98:38:27:50:ff:35:09:12:65:4a:4b:
         59:37:b2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:48:05 2026 by rpki-client