Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/283bc6b0-53b6-3dc0-858f-d8588337b8fb.roa
File:                     283bc6b0-53b6-3dc0-858f-d8588337b8fb.roa (raw, json)
Hash identifier:          2Wy1QI8KpNt7Jdm7rHEKkU8Jt9PTN+KHc/s/Kvy0c3o=
Subject key identifier:   AD:4D:1F:CB:51:C1:EB:07:A0:47:94:90:07:A2:79:82:7C:C3:57:E3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7C02A2625B56CEB6C6E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/283bc6b0-53b6-3dc0-858f-d8588337b8fb.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     19256
IP address blocks:        2001:470:b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:c0:2a:26:25:b5:6c:eb:6c:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=fba106bf-49e5-4730-8bc9-9c633393d61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:15:9e:d7:62:1b:6f:ca:7e:3f:ab:6e:c7:ce:
                    24:24:32:b4:91:9d:02:b7:53:df:77:eb:02:0d:b1:
                    be:db:17:55:6e:31:46:5c:26:6d:57:96:57:da:26:
                    a4:8e:e7:12:24:43:16:e9:00:cf:ef:b7:c2:bc:0e:
                    a5:82:d5:7e:8f:e4:e1:f4:d0:cf:7b:b5:35:97:a2:
                    8c:de:81:95:f2:0d:0b:8a:f4:3b:20:5b:33:92:04:
                    36:fe:ea:a7:42:a2:17:43:a0:78:18:73:5b:d8:60:
                    7a:db:58:fb:4d:5e:84:df:33:0a:be:59:ac:2f:fa:
                    a2:00:84:79:e2:5e:62:86:f6:f0:34:74:f9:3c:3f:
                    70:51:f8:a6:14:72:fe:7c:c7:23:6a:cf:c9:7d:79:
                    bc:fd:ce:83:15:8d:30:f9:97:bb:e9:92:6f:42:4e:
                    fe:12:e0:89:5d:26:1d:9c:ca:f7:f3:aa:cb:84:0c:
                    8c:7d:55:90:cc:86:d9:c9:86:72:33:95:a1:b2:a2:
                    d8:c9:f0:25:7b:3f:cc:9e:e3:a5:0e:22:54:bc:ea:
                    31:76:6d:0f:b8:00:0a:92:2f:93:fb:db:50:82:01:
                    a4:64:38:59:17:f4:09:9f:2d:a5:e6:f5:f8:39:2e:
                    9f:81:58:10:2c:6b:79:37:b4:20:23:9b:7f:52:4a:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4D:1F:CB:51:C1:EB:07:A0:47:94:90:07:A2:79:82:7C:C3:57:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/283bc6b0-53b6-3dc0-858f-d8588337b8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:4f:88:2e:89:05:4f:2c:fa:b2:6c:64:07:10:a0:54:2d:
         5d:53:20:e3:fa:82:6d:9e:cf:a3:66:a5:08:01:4f:d6:f6:28:
         8a:b6:17:ff:9e:46:c9:9c:a3:cb:5b:81:ad:28:52:50:2e:8b:
         ea:1f:ea:54:dc:03:20:fa:21:09:77:83:f0:d6:63:27:28:8a:
         65:62:2c:29:fe:13:49:a7:d5:5a:e8:d6:96:c5:3d:00:23:06:
         8d:35:ad:14:43:a7:f2:41:cb:3d:cb:76:51:4b:4f:72:9f:c7:
         94:a5:fb:06:d3:28:57:8b:2f:70:6a:14:a6:24:70:92:03:be:
         d0:12:33:f9:74:6f:a7:44:ae:67:80:88:4a:ff:b6:69:79:05:
         7f:6a:14:ba:49:ca:b0:82:b7:16:ba:d0:27:70:6c:7a:61:a2:
         54:b3:cf:31:78:31:f7:b6:b9:25:0c:19:f7:aa:d7:80:4b:6b:
         2c:08:20:b6:99:2c:02:a6:4e:ae:3b:69:e4:2b:97:17:60:e6:
         09:03:74:2f:87:0c:41:74:1b:ac:7f:91:04:f5:a8:a0:ab:5b:
         d3:6f:73:45:75:00:42:80:38:3e:94:01:d0:ff:83:44:4a:63:
         c2:6f:79:0a:61:be:ef:47:4f:d7:f9:10:09:da:d3:55:92:ea:
         76:bc:f9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:55:30 2025 by rpki-client