Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81ad15ac-333e-35a0-9b57-86516da5bd92.roa
File:                     81ad15ac-333e-35a0-9b57-86516da5bd92.roa (raw, json)
Hash identifier:          QXN4slrh3gtp34kG3beCsgKOI/U+6i8NX8nf/gyoKmA=
Subject key identifier:   18:FF:EE:6C:B4:0F:A6:C7:BE:C7:DA:09:0E:9A:26:54:4C:A2:EF:52
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7D0ADFBB051F850AD5D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81ad15ac-333e-35a0-9b57-86516da5bd92.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     24893
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:d0:ad:fb:b0:51:f8:50:ad:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=47f4147b-990d-45c5-83e4-de9b23cb57f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:49:60:44:67:d2:b2:eb:cf:39:4d:dc:51:
                    07:6b:50:9a:06:7d:ca:9b:af:94:84:45:5f:f4:7f:
                    28:b0:3d:f6:fa:af:6e:c0:8b:d4:ed:93:7b:c1:a4:
                    c2:4d:7a:d8:69:53:5c:1b:b9:44:0d:8f:9d:3c:bf:
                    2f:99:ef:74:d7:8d:ce:19:e7:95:fd:d7:12:8c:55:
                    94:d4:7f:e2:ea:44:cb:5c:c8:fa:4d:bd:40:92:32:
                    f3:36:bf:5a:c6:57:f7:56:5b:25:a7:be:59:f5:fe:
                    13:98:c3:72:a7:be:57:93:f6:be:e5:93:d1:00:f5:
                    ec:46:f6:21:07:ef:05:83:c2:83:51:e4:2c:84:a8:
                    de:56:d6:19:4b:7a:d2:c4:06:76:3b:af:29:e9:a0:
                    1d:40:e7:21:b5:4e:89:82:94:37:81:81:21:3d:de:
                    1f:fe:b0:06:21:67:02:c0:70:31:af:25:22:b7:41:
                    51:5b:52:be:40:ec:b5:9f:87:ca:aa:1e:2b:6b:33:
                    c1:f4:a6:ec:a0:42:2f:75:20:af:0f:c5:08:91:6b:
                    bd:3f:a5:48:2f:ca:04:e0:de:8a:f8:10:d9:5d:f0:
                    51:47:b5:0f:6d:76:1b:6d:f3:cb:2d:ba:e6:e5:2c:
                    64:c0:4c:cd:96:71:3d:5c:d8:dc:0c:47:91:9d:77:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FF:EE:6C:B4:0F:A6:C7:BE:C7:DA:09:0E:9A:26:54:4C:A2:EF:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81ad15ac-333e-35a0-9b57-86516da5bd92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a4:7d:05:93:79:ca:08:92:d9:28:fa:21:44:0d:54:e0:12:
         57:d3:91:51:97:28:b2:51:82:2c:3e:b7:76:58:56:92:fa:0c:
         a8:7d:95:7d:96:ca:f3:22:a6:f5:c5:5a:27:1f:20:8e:2c:3f:
         8f:57:bd:a7:f8:21:44:1e:dc:76:6f:5d:ca:f5:7c:cf:80:ee:
         de:ed:9a:24:6e:06:ea:74:24:9c:37:ca:3d:d3:c4:d3:86:46:
         31:92:c7:b8:05:23:1e:4a:88:fb:c9:19:6f:8e:c6:ee:9d:82:
         15:2b:8a:ca:c4:5e:53:0f:4d:2c:4c:c4:70:56:c0:36:79:ac:
         cc:02:7b:a2:2a:ce:3a:6b:28:ce:d9:46:fb:cc:5c:fb:fa:b7:
         d6:41:e1:e6:d0:5e:61:ae:6f:41:1a:f7:eb:93:34:21:4b:9a:
         09:6e:b1:b4:c7:d8:2b:06:2a:dc:17:19:0e:3b:66:89:53:a6:
         97:d7:f5:91:2f:fc:28:64:c2:ae:5d:3d:26:2e:35:ef:2f:f6:
         67:7c:03:50:e3:0e:13:4d:77:69:f8:6b:f7:da:e6:e2:82:3e:
         30:72:7a:2c:82:fa:ed:ef:5e:c1:a4:d6:d5:8c:d4:32:33:7d:
         31:69:57:af:9a:cc:8f:99:c1:10:dd:50:a0:b1:a7:f3:9c:1a:
         0d:fa:e8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:57:34 2025 by rpki-client