Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/049c64d8-1d6b-3932-a50f-4d809d8e55fa.roa
File:                     049c64d8-1d6b-3932-a50f-4d809d8e55fa.roa (raw, json)
Hash identifier:          SeJwq17VtQK8sHyT5zGL5+ArpjdvGGh26mTvE23SVgk=
Subject key identifier:   DD:E1:31:A5:F3:A4:5C:D2:53:E7:D7:BE:6D:2C:07:23:B8:4C:C1:FD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7F26D6BB321A16A414BA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/049c64d8-1d6b-3932-a50f-4d809d8e55fa.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     34187
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:f2:6d:6b:b3:21:a1:6a:41:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=a26b5a27-b7b9-4ce0-9767-554b4788d528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:c0:a3:5a:c7:cc:49:55:cb:e9:19:e4:ef:
                    36:f9:65:53:ff:71:a4:91:6c:0c:f7:21:e1:3b:5d:
                    8f:05:09:79:32:84:2f:15:32:65:12:af:98:59:e0:
                    c4:da:91:00:78:79:8c:b1:1b:d4:92:c5:90:7c:db:
                    c3:be:e4:1c:c5:78:bd:2c:bb:9a:ee:07:97:2b:dd:
                    35:31:90:6a:27:a3:b2:49:3e:33:57:01:9b:6f:aa:
                    f0:7a:6b:49:52:57:18:fc:7a:0a:56:b0:0a:71:07:
                    56:ef:da:82:fb:cf:cb:5a:f0:d2:3d:4b:0a:17:03:
                    d0:43:32:5b:50:d9:7f:0e:02:fe:34:e7:57:5b:b6:
                    6a:96:e1:45:f6:c6:44:25:b4:90:86:ec:4b:1d:44:
                    d5:8c:d6:20:d0:86:7f:c0:2d:9a:e0:8b:26:af:ee:
                    81:f8:8d:c4:aa:7b:4f:7e:b9:ae:e1:2d:d0:a8:af:
                    b9:dd:22:81:e3:41:aa:08:2c:b9:95:f0:45:a9:f0:
                    51:d5:ab:d2:e5:2d:cc:fa:a5:d4:34:54:ac:0d:ef:
                    7a:a4:ca:c4:66:f0:6a:1d:37:fd:7d:17:98:34:9e:
                    cb:ed:da:fc:d3:a3:37:51:7d:16:47:f2:9e:c0:55:
                    cc:1d:3b:e6:f6:aa:55:0c:1f:06:e6:c1:7c:f9:5c:
                    72:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E1:31:A5:F3:A4:5C:D2:53:E7:D7:BE:6D:2C:07:23:B8:4C:C1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/049c64d8-1d6b-3932-a50f-4d809d8e55fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:46:b5:64:a4:26:62:df:ca:85:56:a6:50:ac:82:5f:c9:a9:
         73:f3:a6:3e:f8:84:e9:4e:82:5d:3e:de:b6:90:ed:1f:d9:49:
         b5:80:52:33:61:6a:2d:38:b5:e5:6e:ec:82:f0:cf:ab:43:97:
         ec:a3:15:d2:83:5b:c6:90:5f:56:9f:39:b0:02:39:3f:d9:14:
         0c:89:86:3b:22:f4:08:53:a2:c4:c9:a4:36:ac:ce:91:ab:f1:
         14:f3:c2:8b:77:ba:bc:3d:d7:a6:7e:71:49:e0:e3:d7:6b:b4:
         4b:10:cd:05:0c:0e:8a:43:9b:27:45:7d:aa:62:d0:95:7f:f5:
         05:7d:b6:57:53:fc:f7:d2:e0:17:a7:5d:c8:51:d9:0d:b4:c3:
         d9:84:13:6c:c3:6c:c1:97:45:5f:48:e7:d3:a0:b7:71:ad:87:
         c9:5c:7c:e3:52:c7:3b:5c:c3:6f:10:5c:19:7c:d9:c9:6d:aa:
         6b:22:31:8c:18:e5:32:30:57:a9:26:c4:c4:26:52:9d:9b:ae:
         b6:9b:2c:01:f5:41:ac:df:6e:7d:e3:c3:e7:2d:d4:c9:eb:61:
         38:c8:74:26:3b:ee:01:bd:f4:29:ba:e2:48:c1:33:57:17:1e:
         c5:d9:93:d4:9e:64:09:0e:99:d4:37:b7:47:a3:a0:f1:ce:69:
         a4:ae:8e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:56:41 2025 by rpki-client