Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89881edc-6665-37f2-8fc6-05fd053db019.roa
File:                     89881edc-6665-37f2-8fc6-05fd053db019.roa (raw, json)
Hash identifier:          SAkHiuqxkW/KnP0a0o1puD/xdKdK/47jLQ6SgrZG8Dw=
Subject key identifier:   0A:EF:92:90:26:35:92:B1:C6:22:FD:CE:DF:53:0D:90:83:56:9A:FC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7CBFE4904FD4EBCB1D820
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89881edc-6665-37f2-8fc6-05fd053db019.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     135380
IP address blocks:        2001:470:242::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:cb:fe:49:04:fd:4e:bc:b1:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=e8e012e6-5531-4641-a127-172a1bb44e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:63:b1:74:80:dd:fc:73:66:3f:7c:08:65:
                    3f:94:d4:90:23:5a:e6:3a:09:5e:4f:1e:8f:c1:75:
                    cb:b0:cb:53:27:86:70:9b:6a:88:f7:00:e2:11:fa:
                    0f:2d:37:50:6b:94:b6:6e:a1:bd:e1:2f:c0:22:24:
                    0d:c9:cb:a3:8b:01:80:9e:65:0d:79:09:58:55:d2:
                    b3:50:e9:30:ec:f8:30:00:4e:f1:2a:22:94:2c:f8:
                    6a:51:95:dc:83:b6:20:2c:9f:31:50:16:a3:9e:df:
                    f9:ef:85:f7:dd:3d:36:21:91:c0:70:47:b1:52:1f:
                    53:c5:b3:bb:ad:df:f4:97:ee:d4:bc:37:2e:be:c8:
                    63:3e:8b:df:b5:25:e2:5f:83:41:ae:d7:da:d3:88:
                    7b:a6:6e:a7:4c:fb:b1:b2:9d:5f:32:64:0f:05:9c:
                    a8:34:6f:52:ea:f7:de:02:da:2a:d6:c3:bc:7a:be:
                    9c:49:dc:3c:ff:5e:a4:06:5a:c0:36:23:c3:a2:ee:
                    cf:b1:c2:c4:bd:46:29:61:41:33:5e:ab:4d:3b:c6:
                    6f:7d:97:10:17:eb:2f:c5:ab:21:c7:2d:74:a2:33:
                    6a:6a:79:1f:46:24:30:a1:9c:f4:18:6b:ad:86:7e:
                    68:42:f0:42:be:dc:2c:53:92:54:e3:46:7c:71:6d:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EF:92:90:26:35:92:B1:C6:22:FD:CE:DF:53:0D:90:83:56:9A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89881edc-6665-37f2-8fc6-05fd053db019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:242::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:37:cc:a3:0a:c9:3a:87:b2:3c:3e:4f:19:92:2a:e2:6c:
         eb:c2:c4:bf:d3:62:71:29:f9:b1:34:69:97:90:3e:90:4b:71:
         8b:6b:a5:84:50:58:3b:31:85:78:1f:e8:a9:41:be:e1:a6:ce:
         c6:70:80:8a:ac:98:b0:51:d2:9e:55:32:d0:b7:49:12:4d:6e:
         d0:e0:69:0e:df:9d:44:10:8d:79:ff:1c:02:29:67:a9:86:d0:
         f4:5f:dc:af:58:81:30:98:46:e8:cd:f4:d3:15:d0:74:d8:c3:
         58:d9:f4:d4:c5:39:fc:17:83:1a:0b:14:7f:59:c1:83:cf:d9:
         fa:fd:3b:bc:77:54:23:83:48:1c:d5:9b:fb:a7:c0:4f:f0:3c:
         fd:73:d8:87:b9:9c:9e:1f:5a:a1:fb:76:c4:61:66:e3:9d:06:
         38:57:08:54:da:1e:3e:41:22:7b:e0:00:48:fc:49:c0:f0:63:
         28:a8:cf:36:cc:cb:1d:50:33:de:f6:4f:88:87:06:74:d0:17:
         ae:7c:18:22:20:cd:78:ea:b0:22:d0:e1:53:32:52:90:b0:86:
         c7:1a:be:a1:f6:2e:70:98:d6:35:47:b7:d3:29:e5:13:93:d6:
         74:8b:d8:f9:f8:e8:8f:13:52:ea:d6:0e:9f:01:44:77:c7:cb:
         8c:dc:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:57:34 2025 by rpki-client