Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7976e54e-670a-3597-9ccd-88ccc4997071.roa
File:                     7976e54e-670a-3597-9ccd-88ccc4997071.roa (raw, json)
Hash identifier:          gbcC6jC060Qh96THtizbYu2uLupj9jLVw+zqbUKuPdg=
Subject key identifier:   C8:4A:67:7F:23:70:4C:C5:E5:4D:CC:16:5B:C3:02:D8:59:B2:6D:79
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7EC399A1B23E079C7ADC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7976e54e-670a-3597-9ccd-88ccc4997071.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     198690
IP address blocks:        2001:470:17c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ec:39:9a:1b:23:e0:79:c7:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=6c100039-d431-41f8-9195-142ddb529f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:16:e2:3b:09:d3:54:73:42:a3:a7:88:5b:02:
                    c2:cb:57:3c:5b:a5:17:7a:9a:e8:f7:05:38:38:65:
                    d3:09:2f:21:de:8f:b2:03:a2:79:c7:c8:3d:76:c3:
                    5f:69:df:3e:4f:1f:9a:c6:19:2a:92:87:ff:8f:e6:
                    f8:f8:79:11:07:7b:4d:d0:28:83:30:f6:7b:d7:0b:
                    65:2d:e6:f8:d5:ee:60:ea:06:4e:6e:95:0f:2e:12:
                    f1:2e:72:77:be:ce:d1:11:2e:5c:d5:5b:3d:7d:5d:
                    69:84:b4:c9:c8:7f:75:8c:09:97:3f:9c:1c:70:7a:
                    fd:68:54:38:66:9c:75:9c:fc:c9:77:59:2c:b7:e4:
                    93:9b:ff:68:fd:39:2c:c8:28:89:d2:4d:b4:09:65:
                    e3:a7:35:f4:1a:04:0e:f3:0d:36:12:91:d0:9c:00:
                    60:88:ea:76:27:19:9a:ee:23:c3:8f:fd:82:8b:cd:
                    52:5e:f7:e1:bd:fa:36:f7:02:ba:e7:35:7c:28:8b:
                    57:cb:a6:bf:b4:8b:b9:0e:b9:04:30:c8:f8:ec:09:
                    13:78:72:47:a3:54:f2:e7:7e:ad:b4:91:df:56:2c:
                    57:d4:97:5a:a6:26:22:99:e9:f5:ab:08:c5:c0:3d:
                    0f:d7:d4:b7:bb:e8:9f:9b:bb:8c:23:9f:fb:b1:44:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4A:67:7F:23:70:4C:C5:E5:4D:CC:16:5B:C3:02:D8:59:B2:6D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7976e54e-670a-3597-9ccd-88ccc4997071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:17c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2d:96:20:54:21:a0:b2:43:88:3c:da:fc:c8:04:94:f0:1b:
         83:d5:a6:f2:fd:6f:e1:ef:ef:69:6b:89:b6:fb:c4:60:08:5a:
         0d:31:ee:2f:03:7a:8d:ed:03:fc:12:5f:ac:5c:c3:78:12:e3:
         93:d3:fd:06:72:a7:d7:57:69:6d:8b:e7:24:0a:ee:96:8f:57:
         b5:ae:2f:06:5b:2e:ed:d0:4a:29:1a:b9:ca:af:c1:c2:1c:f3:
         50:70:8f:27:ee:7e:3e:de:d9:b5:89:3d:10:3f:1b:92:b6:c7:
         80:a0:ca:03:a7:67:06:8a:ca:15:fb:e3:49:b5:c5:66:fa:85:
         08:c4:7e:31:76:b0:36:5c:6c:62:63:eb:85:47:86:75:35:bc:
         35:9e:ad:17:46:d9:8f:f7:b9:a0:30:61:bc:c9:b7:1b:06:cc:
         0a:95:a1:2b:59:03:1a:de:33:32:22:22:e9:64:03:1c:34:b5:
         6c:ad:e7:2a:35:dc:23:36:e9:38:57:bc:8e:b5:34:3e:ba:4e:
         b2:bd:a6:37:2b:37:75:94:69:86:5f:04:21:37:94:f2:fc:f0:
         69:e1:cc:1d:53:19:ef:29:50:7d:7b:b2:d8:76:68:f0:a7:59:
         78:3b:d5:a8:7d:a2:d8:3c:7c:38:19:a5:40:13:0e:d2:ed:f9:
         f6:6e:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:37:58 2025 by rpki-client