Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a7946cf-6bff-3bc0-97f0-bebb00e75e9b.roa
File:                     4a7946cf-6bff-3bc0-97f0-bebb00e75e9b.roa (raw, json)
Hash identifier:          LSKrZErARoldizRXe7jh6TxmgMafQhfhM/0Fir5cQCU=
Subject key identifier:   B0:09:3E:03:46:5D:50:EE:48:81:25:EC:48:D5:E4:6A:79:B1:30:C5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7BCAB21F7260CE2789900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a7946cf-6bff-3bc0-97f0-bebb00e75e9b.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     4531
IP address blocks:        2001:470:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:bc:ab:21:f7:26:0c:e2:78:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=52680cce-a3ae-4b5e-9fd0-096dd0e897dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:37:3a:1b:5f:87:be:cc:78:af:4c:bd:03:0a:
                    36:b0:1d:b9:82:92:c1:a1:17:cc:48:ef:5e:43:55:
                    96:13:c1:bf:a6:ac:2a:61:5c:76:1a:15:5f:3c:d5:
                    c0:c2:80:74:63:1f:d2:17:ce:ef:7d:25:8f:9a:49:
                    f2:ad:bd:4b:36:67:51:31:ff:63:d1:4b:eb:83:e2:
                    e5:a0:e5:58:f1:39:fd:f7:ce:3d:13:ee:e0:74:9a:
                    4e:23:fb:dd:f2:5b:64:01:fe:33:df:45:f2:92:c3:
                    3e:bb:8c:71:00:61:d8:09:94:0e:fb:26:82:7c:70:
                    9f:c8:aa:20:27:93:a4:0e:da:67:ea:0b:4a:19:24:
                    78:6c:46:c1:9a:2f:1a:5c:f4:24:a9:d5:83:78:21:
                    3a:54:57:e2:6d:2d:85:ef:78:cd:bd:3e:ed:43:a0:
                    64:7f:af:6b:42:92:fe:c6:09:20:9c:0c:cd:0f:a8:
                    bf:69:75:35:19:db:96:d4:5a:7d:a0:fb:49:5c:ee:
                    3a:98:5d:a6:f2:72:10:61:87:dc:d2:f1:4a:94:28:
                    39:98:5a:8b:db:31:ed:89:dc:ec:7d:bd:82:06:8b:
                    26:1c:ff:79:1a:d3:01:04:c2:b7:b6:b4:c4:d9:aa:
                    72:68:3f:c0:74:21:a6:b4:09:57:51:5f:e3:b2:f8:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:09:3E:03:46:5D:50:EE:48:81:25:EC:48:D5:E4:6A:79:B1:30:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a7946cf-6bff-3bc0-97f0-bebb00e75e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:07:ea:8d:3e:c5:08:71:af:d3:da:dc:b5:2d:6d:f7:de:c1:
         3e:9e:33:2b:43:e8:ef:be:26:e0:df:f6:f4:cb:a0:ff:60:ad:
         82:68:6a:b0:5c:6d:24:ff:36:50:4a:a7:9d:f5:76:fe:f8:8d:
         8a:7d:55:7b:ff:ee:c5:82:a6:c8:3a:17:bf:29:ee:18:87:f1:
         b6:9e:4c:1d:06:78:5f:2a:c7:5a:39:b1:c2:dd:67:cb:9e:4c:
         e3:67:12:69:1d:79:2f:35:73:f6:c5:d2:e3:3d:f3:ec:80:5f:
         45:9b:57:99:f7:63:d4:09:f8:c1:da:ed:27:95:d9:bb:44:01:
         9f:aa:5e:52:bf:4e:a6:78:a3:ff:50:0d:60:bb:b4:fc:48:60:
         13:b3:77:be:0d:48:2d:a6:af:61:77:58:f4:0e:96:c3:8b:9a:
         9f:d5:23:57:de:dc:2d:28:9e:ed:b1:0b:f7:1e:7a:2d:1b:10:
         18:10:0f:05:43:36:84:2a:f8:4e:ff:f4:6e:11:ca:7a:c7:9d:
         98:40:21:69:e4:a7:3f:20:41:17:3c:38:a9:64:1d:7c:a5:f9:
         e0:ca:90:87:0e:ee:95:80:cf:bb:6f:76:64:4b:5c:3b:10:86:
         40:45:7f:25:b3:e2:1f:ed:77:67:d2:71:78:41:92:61:19:b4:
         18:ed:40:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:56:35 2025 by rpki-client