Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f1c63bb-ef58-3907-8452-b49eeff4272f.roa
File:                     2f1c63bb-ef58-3907-8452-b49eeff4272f.roa (raw, json)
Hash identifier:          g87QpOrDilX3mb1TvOkmi68jjhodrCZrehuSEjKPBMA=
Subject key identifier:   4E:77:EC:CE:0C:53:53:3D:F7:22:AD:2D:C3:18:9F:A0:72:3B:C6:80
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7CC6206D7FCD677152F70
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f1c63bb-ef58-3907-8452-b49eeff4272f.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     398998
IP address blocks:        2001:470:258::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:cc:62:06:d7:fc:d6:77:15:2f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=cdd36aa5-7e0b-4e73-ae64-20951fb47eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:22:76:bd:b1:d8:0b:15:69:e7:a3:1f:4a:96:
                    1d:fe:6f:e9:32:1f:8c:d5:68:01:b0:f8:de:b6:08:
                    dd:ee:27:99:1f:ea:b8:a9:e4:10:88:34:d9:e3:45:
                    df:41:83:dd:d5:05:a3:ea:8d:6c:64:f9:8b:08:74:
                    eb:b6:70:25:91:9d:20:b4:ff:95:5b:c2:30:cd:e3:
                    28:3d:61:d4:7a:dd:b1:52:bd:4b:d6:57:f0:d3:34:
                    26:90:11:1f:32:f2:1b:16:13:6b:12:8f:fe:56:0d:
                    c2:54:6d:d4:fd:a0:3c:a0:e5:5f:cb:fe:c8:99:6f:
                    99:a8:52:47:ee:ab:a4:ee:c0:99:73:99:f4:78:18:
                    9c:31:91:01:81:ec:bf:34:28:7f:ec:29:87:7e:f0:
                    7e:1d:c8:63:6a:d3:25:3c:29:7c:3c:65:3a:61:31:
                    d5:55:d8:c9:0d:9c:4a:4a:a5:af:f4:7b:f6:91:24:
                    1a:b3:f1:67:e3:42:55:b4:1c:cd:8b:3a:69:11:ba:
                    1e:9d:a0:a5:db:c3:29:e4:a0:76:43:1e:ae:0f:77:
                    38:3f:29:d2:83:34:52:02:9a:37:27:d9:fd:b9:7b:
                    c2:5b:7a:aa:49:74:86:e2:09:4a:2c:65:4f:24:be:
                    03:84:4a:c9:36:a2:50:8b:bc:da:51:af:61:fc:9f:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:77:EC:CE:0C:53:53:3D:F7:22:AD:2D:C3:18:9F:A0:72:3B:C6:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f1c63bb-ef58-3907-8452-b49eeff4272f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:258::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:45:e4:ef:92:68:68:04:af:92:00:05:b7:b8:ee:79:69:c7:
         22:55:27:74:12:48:44:ea:68:59:ff:48:40:89:52:51:ec:85:
         c2:97:50:24:d9:79:3a:6d:a8:14:8a:9a:80:da:b0:cd:b9:2c:
         1b:f9:55:59:42:d6:a9:d7:a8:2c:1c:e1:6a:97:cc:7c:cc:df:
         c0:ca:72:21:fc:84:e8:a5:08:5d:d5:b0:d2:31:41:10:78:dd:
         8a:b0:89:7b:ec:45:b3:22:68:ac:be:6c:46:66:4b:7a:70:e4:
         c4:84:c2:33:00:fc:90:36:be:71:e6:88:c0:b2:6d:30:41:1b:
         20:e7:88:7a:9c:24:57:3a:3d:59:27:9b:1c:c2:3f:9b:05:31:
         d0:03:66:05:0c:b2:97:e8:57:15:a3:23:e1:a6:dc:c4:e3:de:
         ce:ff:0e:a0:dd:d4:44:f4:90:f2:d3:73:e9:1d:dd:51:77:2c:
         9a:9e:6e:92:d2:2a:2a:58:3a:af:fa:af:02:64:f4:c4:cb:ae:
         0a:8d:a7:e6:ff:35:d5:4b:6d:06:1d:b9:64:f5:c1:eb:1b:20:
         46:a3:03:f4:d8:1c:8f:b8:0f:96:10:ee:e3:c5:78:cc:3f:24:
         08:19:b0:0c:b2:a7:e0:09:2d:74:14:52:01:97:a2:17:57:c4:
         e7:47:f5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:34:08 2025 by rpki-client