Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12093c83-8ca7-3387-b6b0-7c29f4832573.roa
File:                     12093c83-8ca7-3387-b6b0-7c29f4832573.roa (raw, json)
Hash identifier:          FjYyKHzhZFuOnpPZ5QGxAubefDyjWXIbhh1dUKAfUgY=
Subject key identifier:   E5:43:C5:64:DC:58:BA:C0:93:39:9F:A3:78:20:B6:C0:FF:FB:26:9E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7C73C35510E0EA10A7E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12093c83-8ca7-3387-b6b0-7c29f4832573.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     131646
IP address blocks:        2001:470:1a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:c7:3c:35:51:0e:0e:a1:0a:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=54885056-7296-4636-b50b-4421e5b737b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:78:fe:15:30:8a:f1:1b:4b:cf:e7:3d:95:
                    27:62:3f:ec:1b:5d:57:f0:3e:fa:51:d6:c3:2b:0d:
                    48:48:91:cb:17:c2:a4:40:9d:dc:e8:eb:cb:47:fe:
                    e1:1b:82:9f:27:9d:9f:b7:bd:f8:a7:70:be:fc:0f:
                    52:2d:4c:19:84:6d:13:9f:d9:19:90:4f:36:99:46:
                    08:3d:6b:ba:fa:3c:4c:d5:c7:a2:fd:c1:7b:6f:d6:
                    d0:07:48:87:45:9a:ba:5b:fe:c6:8b:4d:6f:bb:e2:
                    6c:62:08:e9:43:11:07:87:dd:74:90:b3:e8:eb:c1:
                    a2:0c:71:bd:6d:d4:f4:c3:b3:1b:30:2c:b7:85:08:
                    aa:bd:f6:fd:20:62:d6:40:02:34:1f:5f:84:37:03:
                    46:61:98:43:5d:dc:3b:99:28:66:10:5b:d5:93:1b:
                    02:7e:b8:f0:75:4b:14:90:d8:19:17:8a:0c:0f:30:
                    bc:42:be:b6:80:5f:53:91:a5:b6:39:37:ee:0e:4c:
                    e3:26:2e:7c:65:36:c4:86:b8:cb:6c:99:25:15:e3:
                    56:10:93:5f:e3:ce:e8:39:ee:36:3e:fc:86:88:82:
                    8d:45:5a:5b:2e:29:c0:1a:54:ff:28:9f:2c:50:dc:
                    4d:65:2a:fc:b2:0a:4c:5d:69:1e:42:3b:28:fb:aa:
                    7a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:43:C5:64:DC:58:BA:C0:93:39:9F:A3:78:20:B6:C0:FF:FB:26:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12093c83-8ca7-3387-b6b0-7c29f4832573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0f:21:fb:6e:59:f7:33:d4:0f:7a:7f:af:e0:8f:58:a4:5a:
         46:ea:05:20:2b:56:d7:78:a6:61:f8:43:0c:77:3a:d5:70:df:
         6e:f5:5d:d3:70:fd:0e:62:a1:29:c5:15:8a:5c:bd:f3:0f:1e:
         c5:4a:78:35:65:a6:bf:fb:5f:0b:e3:1e:02:3d:6e:fd:b9:4e:
         35:5b:6c:43:c2:10:23:82:93:8a:26:ea:cb:d3:7b:c0:79:14:
         fc:4c:7a:fa:14:1c:fb:5d:82:19:1d:a8:66:2e:6e:91:fe:45:
         90:4f:c5:63:76:68:89:c2:36:df:89:11:e5:67:95:ec:8a:56:
         fd:78:76:55:28:c9:e3:63:a0:f7:cf:f1:3e:6f:9a:10:12:db:
         8a:7a:8c:56:d4:c7:c7:dd:d8:65:59:53:94:8a:b6:58:4e:ca:
         c0:0f:1e:71:3f:5f:2a:31:21:89:c7:7b:5c:8b:c4:d3:95:c9:
         95:c7:0a:23:79:3c:57:85:cc:93:2c:90:a6:8c:7a:7f:a0:32:
         a9:ba:84:68:8d:65:0f:b5:b6:77:78:10:7b:d5:5e:6c:2e:e5:
         c8:2b:65:8f:22:7a:30:3d:b6:a0:17:9e:94:05:dd:77:48:0a:
         fb:f2:77:f1:76:ef:ce:90:49:99:d1:3f:98:21:28:48:24:84:
         56:8d:bc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:57:35 2025 by rpki-client