Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/461dceed-c8eb-3e81-8666-d00b28808fb4.roa
File:                     461dceed-c8eb-3e81-8666-d00b28808fb4.roa (raw, json)
Hash identifier:          H0d5QsaVgho6LrQkjy4wNQw/qy7LronqaItCBFPxc8I=
Subject key identifier:   8D:C9:61:F7:83:35:0F:9D:C9:A5:44:72:7D:1B:B7:44:A3:C4:3F:B5
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F4328584B5F37231A009C855194EF9900
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/461dceed-c8eb-3e81-8666-d00b28808fb4.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     4186
IP address blocks:        2620:10f:b000::/48 maxlen: 48
                          2620:10f:b070::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:23:1a:00:9c:85:51:94:ef:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=57f0219b-a7a9-4871-81a3-502b19dfc7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:56:df:10:30:a4:33:7f:10:2f:92:6f:94:
                    f9:e2:67:f7:53:b7:ab:05:01:83:52:a8:02:10:29:
                    21:75:11:dd:37:50:aa:6a:93:09:04:d2:84:53:01:
                    88:e3:89:40:74:7b:39:39:41:c8:c9:f9:ed:49:1e:
                    11:57:c8:61:0c:ee:87:07:6b:73:7b:e2:85:34:57:
                    86:07:bd:68:7b:6a:2e:77:32:00:b1:f8:e5:d9:8a:
                    32:ee:b6:ed:37:f3:d2:c7:65:a4:2e:f3:c2:6c:c0:
                    3b:20:75:1f:3b:d9:e7:28:e7:ec:1b:d1:a4:06:f7:
                    4b:49:8c:d7:67:a5:0f:c4:cb:66:a5:03:03:cd:9d:
                    6c:74:07:ba:59:0a:91:5c:b3:b0:64:f3:a7:b3:86:
                    98:9c:59:b9:9a:ce:39:99:fe:7a:2b:78:8e:df:58:
                    26:4b:be:58:39:29:93:87:58:a7:aa:db:6a:75:15:
                    50:5e:86:13:1d:75:70:02:67:50:f0:54:78:0a:7e:
                    96:a8:f7:fb:7b:41:ed:47:a1:41:2e:fc:8f:49:43:
                    d4:d2:3e:82:9d:fd:04:07:62:b8:cc:21:79:e4:1f:
                    fd:35:4d:17:52:93:f6:fe:44:52:df:9e:c7:cd:50:
                    17:ed:fb:b2:98:a3:1d:e6:2c:f4:17:18:1f:3a:6f:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C9:61:F7:83:35:0F:9D:C9:A5:44:72:7D:1B:B7:44:A3:C4:3F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/461dceed-c8eb-3e81-8666-d00b28808fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:b000::/48
                  2620:10f:b070::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ed:29:32:ac:04:58:3a:31:7a:d5:94:93:f7:2c:bc:17:0b:
         f5:96:90:ad:80:b5:64:8f:67:b9:d2:9b:a1:75:f1:24:81:5e:
         8c:95:5e:bc:46:56:ec:86:fe:41:3b:bf:13:c1:19:3e:b1:52:
         51:48:a1:b1:3a:7d:41:fb:a3:27:59:52:7c:98:c4:27:71:ce:
         6f:08:9f:c4:d8:27:ff:96:31:ea:ca:e1:69:8f:da:80:29:bb:
         a1:22:8c:16:bc:04:2e:ad:6e:f9:fa:a6:84:6c:cc:9c:88:d3:
         e2:8f:b9:f9:6a:d8:bc:cc:5a:ec:f8:e5:dc:4f:53:ca:46:0a:
         b0:bc:09:d0:67:f4:03:01:0c:7f:7d:f4:8d:00:aa:2b:aa:20:
         c4:63:52:b3:e1:a7:a2:3b:10:b1:08:72:4a:12:f4:cd:26:a7:
         e5:af:95:f7:54:17:6f:f4:e3:1c:6d:2e:d7:cf:00:2a:aa:12:
         40:87:07:79:bb:3f:7c:ff:6e:e8:f8:61:fa:dc:0e:da:c7:c5:
         28:32:bc:91:94:31:70:ad:9a:bd:41:d8:6c:7a:05:fc:84:e4:
         cf:33:31:23:ff:07:92:e4:ca:8a:63:64:93:ac:1d:00:03:26:
         73:ec:54:b3:c0:f2:f6:1c:81:d8:36:f3:cd:83:17:26:0a:5e:
         c4:a3:af:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:49:39 2025 by rpki-client