Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6791408a-1db3-3b07-bda4-28a5b1fd839c.roa
File:                     6791408a-1db3-3b07-bda4-28a5b1fd839c.roa (raw, json)
Hash identifier:          Guv8XYMQFOXFLdijZ3eLzyRY4MyS9tD4HMTeZFT7q68=
Subject key identifier:   EB:B3:40:4B:0A:D5:50:3A:15:69:CA:D6:FF:76:3C:22:ED:DC:95:76
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584BB3065899144F6F835FA77140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6791408a-1db3-3b07-bda4-28a5b1fd839c.roa
Signing time:             Fri 31 Oct 2025 01:30:11 +0000
ROA not before:           Fri 31 Oct 2025 01:30:11 +0000
ROA not after:            Thu 29 Jan 2026 02:30:11 +0000
asID:                     401725
IP address blocks:        2001:470:2f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b3:06:58:99:14:4f:6f:83:5f:a7:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 31 01:30:11 2025 GMT
            Not After : Jan 29 02:30:11 2026 GMT
        Subject: CN=968d7df6-5a6f-4435-b1ea-2ee7151cf98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:2f:4a:9d:c3:96:c7:2c:ae:fa:a3:90:6f:
                    b3:7e:89:11:41:74:52:df:11:dd:5d:ac:37:0a:81:
                    63:ff:99:82:e4:7b:7a:02:e8:7f:e8:ea:fc:9d:66:
                    5a:b6:f9:ea:6d:f1:8e:9e:be:3c:18:8d:eb:2b:e3:
                    5e:f2:c2:d8:6e:ef:42:b1:34:28:f0:57:41:08:fd:
                    b9:bc:36:79:51:93:dd:0d:27:83:df:77:19:cf:80:
                    cf:85:02:61:e6:92:35:17:96:e5:ba:c2:e6:2f:86:
                    54:57:1c:0b:d2:b0:57:30:a4:42:50:3c:aa:4f:79:
                    a4:56:63:41:96:6e:c6:47:53:cd:55:03:b9:03:9d:
                    24:f3:46:ff:2b:b3:ae:75:97:73:f8:ea:31:7d:67:
                    b0:d8:cd:67:fd:1e:6e:81:85:76:16:77:fd:eb:d0:
                    f7:79:06:f8:a2:09:25:7b:18:43:28:2b:fa:96:2c:
                    87:13:79:ee:32:f0:81:b5:c8:2d:c8:63:05:91:ae:
                    c8:dc:b6:7a:84:27:c6:58:20:3d:6f:7b:d8:e6:cf:
                    57:e8:58:e0:2f:8b:87:48:54:06:f4:e1:65:a5:e4:
                    31:f2:5c:09:d9:8f:96:e6:58:fc:f0:fa:5a:03:ee:
                    87:a0:fe:0d:31:0c:d0:58:3c:47:76:4c:ed:2d:5f:
                    62:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B3:40:4B:0A:D5:50:3A:15:69:CA:D6:FF:76:3C:22:ED:DC:95:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6791408a-1db3-3b07-bda4-28a5b1fd839c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d6:a8:0e:e0:85:e9:f8:93:33:3a:1e:d6:07:5c:23:5e:23:
         15:62:52:26:d9:bf:3b:f4:12:d0:28:23:fe:67:55:c5:f2:23:
         28:4d:6b:d9:05:de:e1:83:ac:43:1e:49:bc:b3:bb:2c:20:45:
         a8:5a:b0:be:49:7b:09:ba:52:b9:d3:8d:70:f3:bf:55:d8:84:
         68:c6:a4:7f:f0:53:30:cc:b7:ed:0e:5d:9c:3d:0e:21:ee:6c:
         2d:05:49:65:16:c2:3e:86:40:0b:79:55:a4:93:61:86:f6:80:
         95:c3:1e:3b:f4:97:66:5c:8f:ad:bc:4b:8b:9c:c7:9f:f7:ad:
         07:f3:ac:83:fd:c7:ed:fc:9c:cf:a8:da:7d:3a:73:bd:f9:e7:
         0d:d8:63:b8:fb:2a:2a:62:36:d1:63:f6:0a:9a:b1:3f:5e:e3:
         14:25:e6:f8:b0:11:d2:78:4d:a2:f7:6c:59:28:81:c4:5c:97:
         43:91:b7:73:b8:49:aa:e1:01:35:f0:cc:d3:e7:b4:c5:fd:63:
         c2:41:2a:e2:4e:41:2c:9e:b1:94:21:ab:7d:49:5e:c5:fb:91:
         48:35:d2:e9:bb:2f:b4:43:78:1b:e9:55:80:13:bf:37:a0:90:
         3e:17:55:9e:f2:9c:e8:1f:8f:0a:21:a7:d5:6c:2b:fc:3f:a3:
         44:1b:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 03:58:22 2025 by rpki-client