Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084d6208-1377-37c5-ae6b-9442b96f194d.roa
File:                     084d6208-1377-37c5-ae6b-9442b96f194d.roa (raw, json)
Hash identifier:          U9hd2+kDHChhZ63vzXuBosYueL+5s7OT+qcgHAObHTM=
Subject key identifier:   AC:38:82:85:DB:7C:F3:B8:B6:DA:5A:04:59:53:C9:84:87:AC:6C:0F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7C6D7EECCD1013A9D3700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084d6208-1377-37c5-ae6b-9442b96f194d.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     29802
IP address blocks:        2001:470:19b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:c6:d7:ee:cc:d1:01:3a:9d:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=40d0a537-f65c-44c5-8e39-c44792996b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a1:e8:49:d4:53:b3:4c:c2:df:4f:a6:42:ac:
                    ef:43:a7:ea:9c:04:67:ae:2a:7d:77:1b:bf:8e:d5:
                    49:c8:e0:ca:c8:2c:3d:6e:ca:17:91:e1:4a:0b:71:
                    f9:e8:d7:cc:5a:5b:b7:27:a6:ae:e3:36:ea:ec:09:
                    dd:08:b8:0f:09:20:52:02:44:36:76:d8:e9:9b:41:
                    b3:1c:63:66:2a:85:a8:b7:76:24:94:a1:35:c7:33:
                    de:9f:90:25:73:eb:d9:dc:43:6a:06:70:86:69:35:
                    49:77:e5:09:6d:1f:79:e4:3c:f7:1b:40:a4:7c:ff:
                    36:ec:f2:30:45:9c:83:e6:e7:81:47:a0:57:fa:86:
                    fd:73:bd:e0:d5:aa:d4:c7:e9:a3:79:2b:68:f3:ed:
                    6f:b9:a4:10:ff:b0:4c:2d:4b:53:a1:26:cf:9e:dc:
                    36:6c:56:7e:df:14:75:d7:0c:f5:c5:16:f4:e6:6f:
                    cd:8b:5a:fb:48:1c:64:e7:f0:22:09:f0:6c:53:0e:
                    5c:01:92:8f:0b:5d:73:0d:96:90:e4:78:3c:a1:e0:
                    d3:f3:5e:e3:28:f7:6c:c6:d4:2b:0d:e7:82:11:f0:
                    51:93:15:6c:79:d5:74:ca:05:2d:f3:bd:8b:25:31:
                    6a:7f:67:2d:79:d7:99:56:58:7e:36:05:b0:cb:cc:
                    4c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:38:82:85:DB:7C:F3:B8:B6:DA:5A:04:59:53:C9:84:87:AC:6C:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084d6208-1377-37c5-ae6b-9442b96f194d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:19b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:4c:45:0e:dc:a6:2d:2d:a6:87:d0:87:df:bc:0e:ce:b2:49:
         a8:ee:d8:ea:a3:91:a4:05:ae:be:6e:28:c2:0e:5e:f9:f1:15:
         9a:63:a9:bb:45:a9:29:30:f9:ad:30:59:73:8e:87:14:26:0d:
         63:28:dd:d3:fa:7f:f9:c0:c5:1b:c8:ef:4d:90:c4:46:56:80:
         52:02:97:1f:a5:8b:9f:22:7e:0e:8e:0a:91:4c:8c:ee:c2:b7:
         e7:b6:6a:ae:79:7c:1b:40:3c:23:86:ef:ec:db:2b:83:fd:86:
         4f:68:9f:0a:c4:85:27:cd:bf:a3:36:cf:6f:85:33:31:e4:70:
         40:49:c8:a4:6c:ce:e0:93:80:62:eb:4f:78:8a:d0:fa:42:0b:
         c5:31:56:88:9a:45:6f:22:b8:40:54:e2:0d:6a:b5:0a:d4:23:
         d2:4b:bf:01:9d:a2:19:0b:e2:6c:7f:91:91:88:f1:ed:7e:9e:
         48:81:04:a7:b2:80:2e:6f:2c:ff:88:84:4d:01:6f:5e:ed:2b:
         15:c6:8e:0e:d6:9a:0e:6f:0e:2b:52:64:5e:48:6b:4d:91:00:
         ec:a7:73:4c:e0:f9:58:1d:33:4c:bd:c1:22:ee:2b:34:b8:7b:
         e7:80:4f:ef:10:09:c9:d3:55:c4:a9:37:59:39:34:96:fe:45:
         bd:ff:4e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 00:42:02 2025 by rpki-client