Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80a1e4fb-b8d0-3074-acab-fe50af0503db.roa
File:                     80a1e4fb-b8d0-3074-acab-fe50af0503db.roa (raw, json)
Hash identifier:          f8cradP2vRbr3PHzlSniC66SVk9z45fRjFVvVL6/QRg=
Subject key identifier:   83:59:98:A7:49:DC:30:A3:FB:80:99:5A:D8:77:FE:67:F6:9F:8E:99
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7F8BCE672375E21C5AF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80a1e4fb-b8d0-3074-acab-fe50af0503db.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     12847
IP address blocks:        2001:470:208::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:f8:bc:e6:72:37:5e:21:c5:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=42ffb0bd-05e1-4801-b341-893b27a1275b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0d:37:d2:ce:5a:7a:cd:7f:b7:0c:17:96:30:
                    30:f3:0a:05:9b:7b:a8:2a:1a:51:53:f9:ab:4d:2b:
                    88:f8:2e:53:f7:a1:f0:d1:ff:d9:80:98:ae:4e:1f:
                    20:f7:fe:01:ff:9c:bd:28:74:5c:26:d2:28:74:c3:
                    12:f5:f8:dd:46:a9:89:c8:91:70:55:a5:43:e9:97:
                    c5:f9:1d:da:a2:0a:c5:a8:3a:e2:d6:8e:95:d3:d1:
                    34:d9:57:0b:c1:2d:ed:90:84:7e:0d:1f:41:cc:0b:
                    a3:2c:6c:6d:e1:c6:ab:60:30:3e:69:f9:53:5f:dd:
                    49:46:3c:90:0c:38:ca:75:e4:53:ff:77:00:7f:f9:
                    77:d6:44:54:94:43:7b:ae:ee:a4:1e:28:5c:a9:be:
                    85:6b:fd:de:ef:c0:bf:66:0a:21:3c:f0:9d:1e:37:
                    83:47:e8:55:78:5c:82:c9:2c:4f:9d:a1:d0:ea:80:
                    50:dc:72:8b:55:56:c8:8a:f0:86:9e:dd:8b:0f:77:
                    99:18:3d:84:61:43:80:98:14:52:24:e0:b5:c6:ea:
                    5f:18:e7:39:32:21:f9:8f:a1:63:11:7b:41:e6:ef:
                    f9:80:6d:ce:70:72:df:e6:fa:c9:8e:e2:b2:93:2e:
                    f4:e4:ea:d5:6c:30:73:66:ee:88:51:34:c8:f5:7a:
                    db:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:59:98:A7:49:DC:30:A3:FB:80:99:5A:D8:77:FE:67:F6:9F:8E:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80a1e4fb-b8d0-3074-acab-fe50af0503db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:208::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:1e:66:01:d7:62:1d:08:32:0a:36:0f:4e:4b:12:77:d1:ac:
         4b:6e:f8:84:17:db:3a:a6:94:b5:24:e1:de:b0:0d:3a:d5:d8:
         ac:a0:8d:f1:96:70:b0:1c:9c:f1:64:43:fa:77:de:b5:67:3c:
         60:c3:8c:91:a7:07:db:78:71:8d:02:91:3b:f1:94:bc:cb:27:
         e0:fd:ac:78:f8:c3:d0:96:03:97:cb:42:bc:b2:f8:fb:3c:03:
         a9:93:b9:69:43:9a:f0:c7:ed:de:b0:47:8c:9c:9b:66:fc:dc:
         40:17:34:8a:2b:f4:f9:42:6c:4b:ce:cf:d4:6f:09:47:2e:3a:
         62:11:ef:1e:61:aa:b5:c7:b7:d0:3d:33:81:e9:d9:7b:a4:56:
         7e:a7:a6:6e:83:b2:69:e4:99:3f:94:af:35:99:bf:81:91:aa:
         50:b9:de:cc:43:da:2d:5f:8d:f6:f5:73:c7:37:4f:83:35:c8:
         18:f2:68:da:a5:26:18:36:d1:ef:c9:f1:62:06:ff:b6:0b:c4:
         9e:84:6c:a0:c3:f8:d8:63:0f:25:3b:35:37:9e:47:17:fb:3a:
         97:ef:4a:8e:5e:86:06:85:08:ff:1b:07:c8:2f:42:e0:84:a9:
         f9:02:99:f4:fc:64:e2:0d:dc:67:89:1c:9c:7e:0e:35:f5:d0:
         f8:45:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:03:01 2025 by rpki-client