Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
File:                     5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa (raw, json)
Hash identifier:          r0OKlyxDzcmTanuW/CkPKhWjiP+lZ7nAGrY/J4qSxDk=
Subject key identifier:   1D:31:88:8F:71:98:C7:F1:E2:88:0E:62:5E:01:05:7A:A6:6F:C3:D9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7F38CC0BE8CACECF7B180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     45960
IP address blocks:        2001:470:243::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:f3:8c:c0:be:8c:ac:ec:f7:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=ebf646b3-3612-4799-8cba-0dc3cea535f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:e0:d3:32:b4:f7:bd:78:7a:4e:23:8f:d9:
                    85:21:12:dd:60:2f:ed:50:95:fb:9e:fb:c4:e2:52:
                    8f:f4:9a:23:87:8a:d9:57:34:48:4d:e1:40:67:1e:
                    23:4c:6f:0f:b4:be:12:a7:30:08:5b:97:a7:69:66:
                    77:e2:f1:f3:81:6e:23:da:72:ad:a5:fe:7e:de:74:
                    25:b4:37:70:61:d0:29:e5:f3:55:38:6f:a7:f6:6d:
                    24:ef:6c:e4:7c:cb:82:5e:e9:d1:d3:7d:27:b8:a4:
                    92:f8:ef:17:df:61:6d:74:53:70:0d:a8:ec:da:72:
                    d7:3c:b4:09:b5:a3:a5:e5:f4:72:18:97:18:17:f1:
                    ea:58:f0:5d:d5:03:c6:a6:d1:15:de:ca:6f:59:99:
                    bb:ac:c0:35:f0:8e:c5:f5:aa:b2:47:e6:cc:2a:7a:
                    15:43:f3:c5:09:83:77:1f:60:c5:6b:ba:56:2f:06:
                    e8:1d:e8:2c:f7:e8:2b:f4:46:0b:0f:0d:93:95:a4:
                    58:6c:54:58:41:fb:aa:bc:e3:ac:97:48:d1:08:09:
                    69:6d:5e:97:69:95:4b:50:dd:6b:a3:48:77:fc:b4:
                    b8:8d:dc:91:00:4c:89:8e:f1:6c:8c:ab:59:35:58:
                    b6:3f:60:a3:1e:57:3e:ec:bb:e0:de:56:5f:6f:69:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:31:88:8F:71:98:C7:F1:E2:88:0E:62:5E:01:05:7A:A6:6F:C3:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:243::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:56:55:bb:9c:c8:bf:08:e8:d7:c4:1e:dc:69:2b:ce:c5:ea:
         b6:48:f6:84:32:9b:9e:7f:86:0d:3e:80:06:d6:41:06:e7:ae:
         81:7e:dd:8f:28:d8:31:d6:95:de:c4:f4:3b:83:67:a5:9c:78:
         75:73:22:41:b2:e0:97:a3:e7:e2:aa:e6:35:9d:aa:54:a7:4e:
         bc:e7:7c:21:31:7b:77:64:46:aa:9a:6b:60:7b:47:5b:f6:30:
         10:58:ee:c6:0e:e0:d7:6e:a9:35:68:a4:20:ea:d1:8a:95:24:
         46:5d:53:ee:02:5b:81:f3:c4:07:3b:36:ec:2a:d3:a7:23:4f:
         a4:91:bf:f8:33:16:c2:70:1d:e1:24:8b:87:c3:54:83:7b:16:
         c8:79:96:13:7a:83:0e:e1:13:d4:f3:77:21:c0:78:50:23:a4:
         9a:d0:33:a3:43:6d:ca:05:fb:ba:9a:35:0f:00:53:9a:16:3d:
         2d:d5:27:9c:bc:9e:eb:aa:48:7f:1f:7a:ab:9e:72:7a:22:ee:
         7a:8e:d5:43:f8:8d:34:59:85:3d:fd:f8:d1:90:bf:4a:cb:10:
         f9:62:34:94:4a:f0:d4:0b:e6:62:aa:21:cb:bf:b1:7c:84:a2:
         c4:d0:9c:30:a3:f0:b6:17:d4:60:a5:f9:75:5e:66:9d:84:ed:
         2e:ab:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:56:24 2025 by rpki-client