Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56057c5c-d49a-3841-80a4-5a48f55d2f0e.roa
File:                     56057c5c-d49a-3841-80a4-5a48f55d2f0e.roa (raw, json)
Hash identifier:          8w03Ns0g+re3BW6cUz/UutWvqCG9wWOBL36whyETCKU=
Subject key identifier:   D5:3B:74:3E:FB:46:C4:D4:88:D7:BC:AB:76:40:4B:00:B7:CB:E9:11
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7CF7CC5F7954B9BD16880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56057c5c-d49a-3841-80a4-5a48f55d2f0e.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     979
IP address blocks:        2001:470:294::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:cf:7c:c5:f7:95:4b:9b:d1:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=eed3fc15-c68c-4bcd-b18c-e0021b71c8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c4:64:86:02:f5:be:51:20:fe:76:33:c3:94:
                    bd:9d:a7:33:6b:bf:5b:0d:1c:94:fc:60:83:0b:34:
                    8c:3b:0e:e4:8b:e7:2f:26:6f:09:b9:78:f4:4f:c6:
                    30:58:64:84:43:0a:33:80:c9:08:74:4f:ef:f9:2a:
                    11:c7:45:b1:89:a3:9e:32:d1:e2:18:8c:9c:aa:9a:
                    32:74:11:43:c5:2c:97:1a:b4:40:3b:88:9b:03:c3:
                    5e:98:31:ea:4e:c0:0c:44:98:9d:0f:77:90:10:0b:
                    85:ee:d2:7b:c8:81:d0:b4:9d:43:02:96:af:a5:31:
                    b0:c8:67:a7:e6:d9:24:35:89:3b:be:76:82:f3:29:
                    a3:60:8c:a5:ea:87:e4:de:52:b7:61:de:aa:47:90:
                    59:d4:09:c1:e0:1f:33:f1:c1:97:3a:95:86:4e:5e:
                    f0:5a:8d:70:ab:71:f6:65:b8:9d:1c:22:d0:ce:f6:
                    5a:03:30:88:d8:d5:90:8e:cf:e9:fe:fe:aa:00:d9:
                    72:ac:6b:fd:66:8f:80:a1:d4:44:40:32:af:18:26:
                    aa:48:8d:5a:89:c3:19:a7:8f:42:54:f0:50:ac:1d:
                    0f:77:8f:69:67:6c:0c:87:80:cb:5b:72:0c:f8:bd:
                    96:d2:29:69:64:51:7c:f6:56:ab:0a:c3:b5:18:24:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3B:74:3E:FB:46:C4:D4:88:D7:BC:AB:76:40:4B:00:B7:CB:E9:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56057c5c-d49a-3841-80a4-5a48f55d2f0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:294::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a5:5c:26:b7:67:89:79:25:ec:0b:3e:be:43:dd:74:7d:f5:
         ec:ac:87:8b:44:b9:ab:3e:c9:8c:ea:c9:3a:fd:12:39:26:6f:
         64:23:b4:7e:30:31:19:7d:cf:ca:16:43:98:c9:64:31:51:ea:
         d0:87:31:a1:d1:e0:d6:f8:1f:b1:0d:0e:f6:e7:2c:9f:71:63:
         5b:f9:85:66:55:7c:02:20:ce:04:7a:c2:93:15:14:92:8f:55:
         47:a9:db:c9:52:99:01:78:f2:a1:27:ef:cc:27:c4:48:24:2f:
         b7:4d:ea:a3:6a:ba:d5:2b:45:71:e5:f3:10:01:09:49:39:ec:
         a9:78:1e:61:db:16:a9:98:9a:20:74:c0:40:d0:06:9e:7e:ca:
         c7:ca:ac:e7:62:3d:28:24:0c:0a:cb:52:2a:7a:45:df:44:ce:
         ba:df:36:4d:42:cd:5b:6f:b3:f6:56:a4:1d:2e:aa:93:e8:1d:
         11:d8:fa:15:53:ab:bd:e0:51:1f:fe:33:7d:0e:10:1d:fc:bc:
         7c:d0:05:49:78:1c:6c:bd:8d:53:27:58:15:c2:e9:e7:ac:46:
         bb:ce:8a:d0:de:a2:2c:71:59:6a:32:48:42:b6:eb:f5:7f:f8:
         ef:a2:e7:6b:4d:1b:6a:38:4e:87:a3:29:ca:04:55:33:e5:11:
         e1:1b:66:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 08:24:31 2025 by rpki-client