Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa
File:                     2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa (raw, json)
Hash identifier:          PBgaQZPec8HpS/VgAP9E/QHZjEU0XC4OCbdh7NA1oxo=
Subject key identifier:   AE:B7:04:41:0F:4E:19:CF:76:2A:31:F9:CC:C5:2B:84:64:3B:59:15
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584BB45D3C0E4ECA63A14940F540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     134677
IP address blocks:        2001:470:e3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:3c:0e:4e:ca:63:a1:49:40:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=92ad4d6d-773a-43e8-b8d8-187c599fa495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4a:02:6a:d0:9c:30:b5:da:4e:cf:2e:cc:4f:
                    21:9e:ed:35:30:46:47:33:6e:5a:35:af:49:16:db:
                    ae:57:26:57:e0:7d:b5:10:c2:80:00:2a:b8:e5:41:
                    b8:1e:f0:7a:40:47:87:f1:29:b8:63:7a:e3:08:ea:
                    4b:51:e3:4f:86:26:6c:5f:03:87:8d:fb:ff:1b:e5:
                    81:b0:24:9c:72:24:4c:e3:d6:15:7c:09:6c:6a:0c:
                    44:5f:a6:42:a0:38:04:d5:64:db:e6:ae:15:88:18:
                    66:78:0d:91:eb:3a:11:c7:02:c9:dd:1a:ef:a4:c0:
                    62:12:fc:e1:eb:c5:db:ab:12:66:ae:18:2d:98:13:
                    23:a1:20:25:8c:d7:f4:95:0f:38:9b:17:45:5e:ef:
                    6a:84:54:43:1d:a5:14:ad:8e:f8:b1:b8:ce:74:aa:
                    3e:4c:73:c7:3e:cc:ea:1a:5c:dc:bb:ee:68:e6:6b:
                    bc:c4:83:37:19:86:58:08:f7:92:e4:ff:d1:4e:99:
                    c1:6d:73:9b:6d:1a:96:3a:9b:75:0d:30:89:f9:21:
                    db:ec:dd:a4:69:71:bc:1e:49:b8:a3:40:df:bb:5d:
                    e1:50:9f:49:76:fd:79:b1:86:0d:f1:56:5d:03:ac:
                    b7:9f:ff:c5:18:92:2d:70:58:e7:88:c0:2c:42:b1:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B7:04:41:0F:4E:19:CF:76:2A:31:F9:CC:C5:2B:84:64:3B:59:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:5d:e5:e0:48:b9:0d:13:ff:68:dc:b3:05:cc:b8:38:22:
         8b:02:84:1c:25:fa:cb:a5:97:6f:cf:fc:2a:1c:12:82:67:58:
         23:e5:23:0c:68:50:49:37:3c:d7:96:fe:f0:39:39:b9:3b:f4:
         85:9e:bd:0d:99:6d:d2:f3:42:a2:a9:6b:42:dd:62:0a:46:35:
         e0:bb:52:f3:86:b3:cf:98:72:fd:26:69:5c:ad:f5:49:40:e3:
         d6:00:c5:6f:4c:8a:38:7e:e4:7e:d7:04:89:bf:3b:e5:30:f9:
         47:33:9b:be:f3:35:b8:bf:e5:e4:68:e3:58:79:92:f6:bd:dd:
         0d:a2:d3:45:c4:01:f6:33:76:ac:a4:f0:30:dd:a5:a6:04:0d:
         0c:bb:bb:2d:0c:02:ac:f6:07:f9:71:22:86:01:b8:93:1f:d2:
         40:9b:39:60:d5:7b:42:78:b8:44:a0:9b:35:34:0a:27:13:46:
         d2:fe:b9:12:68:9b:e7:17:39:2a:44:2c:f8:aa:85:dc:c6:6d:
         99:87:4e:a8:71:a3:f9:1e:54:0b:30:ce:4a:7a:cb:9a:7e:b6:
         0a:d6:26:fa:bc:23:40:c2:ae:21:2b:90:66:f9:42:a9:7c:db:
         93:06:b8:37:48:da:fc:e4:a3:4f:7d:0a:dd:98:c2:4f:12:b3:
         cd:2c:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:03:51 2025 by rpki-client