Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b34fd6b6-ee6d-3ce8-9fcc-26cc13cebdd1.roa
File:                     b34fd6b6-ee6d-3ce8-9fcc-26cc13cebdd1.roa (raw, json)
Hash identifier:          xGnY64woFT1wqHsbEsrsnD3twUlyFO7k7muu9ePtrAY=
Subject key identifier:   AD:F6:23:8C:1B:FA:EC:55:57:11:AE:17:E5:BF:D8:86:24:C0:10:C3
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B9E07AB90A6A5D888DEDE6180
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b34fd6b6-ee6d-3ce8-9fcc-26cc13cebdd1.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     20130
IP address blocks:        2001:468:1202::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:ab:90:a6:a5:d8:88:de:de:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=daf9f3f6-7a18-4adc-a7a0-ec1e368eccb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:83:ab:c4:a5:84:eb:46:a3:92:58:e3:68:e0:
                    28:b4:69:f0:7e:d0:ee:0f:02:df:72:f0:e5:fa:46:
                    e0:17:2d:b2:4c:c6:6c:e3:11:a4:8a:e8:ad:90:b2:
                    67:f8:42:80:68:8b:23:5f:00:1d:d1:87:8f:63:11:
                    7a:05:35:91:e2:98:a7:d4:78:81:18:37:96:f9:70:
                    42:c1:d6:a7:60:80:72:4a:b6:3f:40:21:85:47:7d:
                    b9:bc:a4:45:58:b1:73:a4:11:5a:72:a0:c5:30:0f:
                    f4:c5:1f:ac:88:72:df:c5:97:74:f1:bc:8e:6d:39:
                    55:d7:3f:58:a7:b2:0d:76:c0:bd:9e:74:fd:42:e5:
                    57:a9:a5:fc:64:88:42:43:40:f6:1a:8c:51:f6:3f:
                    94:47:98:bc:ed:92:d7:cb:58:33:6a:97:30:70:d2:
                    ce:91:49:ab:2d:6a:c8:c9:1e:d4:b5:6e:3e:a7:6a:
                    4a:fb:fd:2d:41:9a:18:76:4b:dd:0d:62:b1:00:d5:
                    b7:3e:15:4e:af:47:9f:5b:26:78:a6:18:fb:22:25:
                    b5:8b:7b:aa:48:3e:e9:2e:7d:ac:cc:f5:73:11:b1:
                    0c:9d:68:1b:4d:63:55:19:b0:4c:7f:62:08:b5:18:
                    4f:ca:b3:af:84:02:85:87:a5:db:5d:cc:ac:98:07:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F6:23:8C:1B:FA:EC:55:57:11:AE:17:E5:BF:D8:86:24:C0:10:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b34fd6b6-ee6d-3ce8-9fcc-26cc13cebdd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:1202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:3c:d6:00:45:aa:d7:db:dc:d6:91:96:68:7b:95:f8:28:aa:
         7e:3e:6b:51:ca:23:2c:10:14:6a:6a:fd:e2:a4:d6:f4:5a:d2:
         e9:33:d8:01:6f:5c:ee:b6:49:ad:94:0c:72:7f:9b:41:8b:9b:
         01:89:38:08:8f:54:59:a6:cd:89:e2:1a:92:d6:71:a8:0c:4b:
         67:de:b9:14:f2:64:c5:69:fa:2f:e7:72:85:49:1a:51:b7:3d:
         1e:be:92:20:b7:d6:60:86:a2:db:d5:2c:1b:ae:a2:71:af:b5:
         d1:59:56:43:96:b0:ca:ef:41:7d:d4:e3:15:cc:68:f7:01:47:
         d6:e2:15:5b:74:43:3f:d4:a3:41:1a:a6:12:36:d8:29:d8:15:
         b9:c9:d0:5e:b5:7f:6e:cc:2a:53:cd:eb:05:42:c0:a8:d1:05:
         67:b9:af:18:ec:36:15:31:02:b4:2c:fd:16:22:bd:d7:d5:8b:
         9c:08:42:2b:0c:86:15:c5:e8:d4:11:c5:e4:7b:9f:a4:e9:7b:
         49:f8:d9:5a:f3:1c:15:88:bc:24:b9:89:a9:bb:eb:e9:d4:0f:
         01:61:8f:84:83:ec:16:d0:32:05:e2:cf:d9:a6:a6:d6:49:68:
         cf:2e:5a:4b:e5:06:d1:f4:1b:26:fd:15:63:9b:6c:fd:f6:23:
         be:ab:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:35:47 2025 by rpki-client