Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2175c227-e031-3e47-a365-64e49007451b.roa
File:                     2175c227-e031-3e47-a365-64e49007451b.roa (raw, json)
Hash identifier:          x7VF1ayj6sXpOCR7JVjueAD5ibDqflb17WybDwbk7vk=
Subject key identifier:   D1:F8:7E:DB:19:7D:92:70:79:AB:CE:89:EF:A7:04:11:E3:8B:92:A0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7F068CF4D634721341AC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2175c227-e031-3e47-a365-64e49007451b.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     18041
IP address blocks:        2001:470:21e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:f0:68:cf:4d:63:47:21:34:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=840c3f14-a5e9-4e81-a2bc-93d696eecba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:20:d0:8d:62:21:b1:20:07:40:ae:4f:8b:
                    9f:bf:aa:e1:45:ae:e6:e0:62:e7:d9:d7:9d:1b:ae:
                    1e:71:f8:d4:2a:83:97:12:86:d1:bf:37:bf:32:1b:
                    a6:af:75:a0:57:70:71:ff:f4:0d:64:56:32:4f:ae:
                    b7:5e:16:37:29:4b:f1:57:e2:f3:d7:84:ed:89:18:
                    e1:eb:40:1f:b2:2b:44:99:bb:71:3b:76:32:82:fb:
                    71:29:58:d1:1b:65:d7:c6:4a:2f:c8:6e:24:b7:b3:
                    13:a0:dc:84:43:85:e8:d7:d8:d8:e1:63:3c:42:00:
                    49:13:55:64:63:a6:f9:cc:8c:58:b3:a0:c4:72:31:
                    44:e2:90:03:c2:ae:0c:6f:3b:41:98:cf:74:60:7d:
                    09:97:00:ad:30:27:23:0a:ee:fb:8f:44:ef:07:73:
                    b7:b9:f5:bd:11:23:f4:04:a7:fd:89:4b:86:ea:d9:
                    86:b3:33:3b:b5:68:3d:67:1e:02:14:f0:ed:e3:9d:
                    45:f1:7b:e8:f5:c0:3c:e7:08:42:b3:fc:a7:85:e4:
                    19:e9:22:35:96:05:6a:c2:6d:42:dd:b5:e4:4b:e6:
                    96:f6:28:9e:7b:53:95:8b:94:03:1f:4a:5e:d1:37:
                    6f:51:8a:28:4d:77:0b:55:01:e8:3c:03:00:e4:24:
                    d7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F8:7E:DB:19:7D:92:70:79:AB:CE:89:EF:A7:04:11:E3:8B:92:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2175c227-e031-3e47-a365-64e49007451b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e0:b5:83:68:7e:cf:0e:a9:8e:f9:60:ee:f4:9d:c4:f7:f3:
         96:d7:cf:1d:7c:cf:56:19:93:80:59:8e:8b:f5:74:a2:c9:d7:
         17:86:3f:03:9c:ce:81:b7:33:3b:12:25:38:d0:79:9e:8d:93:
         3c:3c:18:e4:c6:b3:c2:99:33:7c:ce:f8:0d:9c:77:4e:42:dc:
         8c:70:f2:2d:7a:08:08:d4:2e:58:e5:24:84:9f:dd:4a:a1:17:
         83:6e:7c:44:02:2e:76:79:1b:22:b6:65:83:41:f8:b3:6b:5f:
         78:a2:fc:04:4f:df:b4:4c:4f:7a:38:4d:fb:7b:d2:de:f5:57:
         fc:33:f1:6a:e1:0c:f9:21:8c:85:5e:6d:48:b0:16:65:bb:75:
         72:bb:09:53:0f:ae:94:91:76:31:9d:c9:ac:9c:c9:e0:e9:b0:
         67:3f:cf:36:00:87:ea:14:37:17:3d:1a:20:0e:c2:52:c0:27:
         c6:03:4d:0f:ab:66:6e:4c:a3:17:69:d4:0a:9d:dc:3b:8f:c9:
         19:94:59:e3:10:11:e7:ee:ec:c4:ac:81:e0:80:a7:54:c4:a1:
         b3:2a:0d:70:07:75:30:f7:cf:63:95:f5:2d:9a:06:81:e5:e3:
         f8:90:64:e5:9d:6b:26:53:c6:dc:b9:5d:b9:c2:ab:0d:14:5f:
         90:5a:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:57:41 2025 by rpki-client