Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f686ce-e76b-35f9-99ef-d169bd1f76ae.roa
File:                     c8f686ce-e76b-35f9-99ef-d169bd1f76ae.roa (raw, json)
Hash identifier:          Sz0SQV8fzaux5XfLOurwLndV1Din6vXaKHm3RCfiWVQ=
Subject key identifier:   B5:8C:E3:E1:21:CB:90:E7:55:90:D3:B4:F6:86:4D:DD:0B:3F:B7:04
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584BA2378AC0DDA6F941AC07B080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f686ce-e76b-35f9-99ef-d169bd1f76ae.roa
Signing time:             Sat 25 Oct 2025 01:00:31 +0000
ROA not before:           Sat 25 Oct 2025 01:00:31 +0000
ROA not after:            Fri 23 Jan 2026 02:00:31 +0000
asID:                     212694
IP address blocks:        2001:470:466::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a2:37:8a:c0:dd:a6:f9:41:ac:07:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 25 01:00:31 2025 GMT
            Not After : Jan 23 02:00:31 2026 GMT
        Subject: CN=793f93e6-2ec8-4e68-a1e0-a7083ff6ae31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:40:36:9f:04:bc:41:38:83:08:90:6d:ea:9c:
                    e6:b7:32:7a:53:41:27:05:6d:28:dc:e2:fb:df:a8:
                    d2:97:1f:5b:04:96:de:10:ce:b0:95:4e:59:f8:66:
                    8a:b6:ce:cb:2b:42:84:31:1b:e6:07:9a:ff:61:65:
                    de:38:49:ba:25:f9:cc:d7:18:7a:d5:a0:bb:77:ff:
                    4b:4c:35:f5:2e:e9:b0:be:df:fb:67:f4:e9:d7:44:
                    0d:22:8c:54:cb:ba:2a:a8:fd:28:77:28:b7:0a:1f:
                    4a:13:d7:36:31:c3:9a:09:7b:4e:76:df:05:98:9b:
                    8d:78:05:63:be:4b:26:fc:31:33:3d:8c:51:c3:95:
                    32:d8:49:b3:c1:d1:81:0d:46:cb:0f:9e:78:8b:a7:
                    99:92:49:28:c5:fc:39:4a:a3:d5:f9:96:99:ad:1e:
                    77:21:12:2a:08:7f:53:9b:68:f2:c6:a2:21:38:e5:
                    5a:05:40:59:36:e7:3f:d8:4f:d9:4c:5e:fc:38:c2:
                    49:23:4f:96:65:90:bc:95:93:43:c4:8c:8b:f9:a0:
                    70:b0:c3:17:d7:4f:43:9c:bf:d8:e4:75:ff:c4:c0:
                    58:ad:a0:93:bf:58:f1:76:49:a0:0a:0e:17:72:c2:
                    cc:7d:16:00:92:b5:44:c9:73:4e:da:47:2f:89:a6:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8C:E3:E1:21:CB:90:E7:55:90:D3:B4:F6:86:4D:DD:0B:3F:B7:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f686ce-e76b-35f9-99ef-d169bd1f76ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:466::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ac:71:ac:70:70:b5:85:e4:4a:d2:8a:e1:e9:a9:80:73:c1:
         78:af:f1:1d:37:6f:f9:09:33:64:c7:83:ba:d0:04:1e:7f:2f:
         69:44:02:7c:e7:23:65:c8:04:ea:89:ff:7b:46:93:3f:b6:5c:
         17:80:76:a2:82:78:d1:6c:bd:a8:c8:fc:18:69:c4:3e:5d:e0:
         4a:93:e1:ba:df:ac:23:43:da:51:11:14:0e:ff:90:87:a6:e1:
         e7:62:de:36:d1:fb:5d:0a:63:cb:c0:0e:04:09:97:31:9b:d6:
         d1:75:e2:46:49:8d:38:2c:7d:5b:fc:31:7a:fc:bb:bc:98:7c:
         14:4e:3c:48:05:7a:87:31:fb:72:cb:5c:d5:e2:ac:bd:39:d8:
         ad:ff:66:59:ea:24:d6:d6:fc:f4:bb:53:82:74:8a:2d:f0:e7:
         75:64:65:71:f3:19:f6:c2:ca:01:a3:0e:03:dd:c6:b3:26:c0:
         91:09:d0:61:5a:74:76:45:4f:44:8a:25:d2:9e:45:6b:f0:6b:
         4c:82:93:ec:2f:71:90:a2:ee:42:7f:3c:57:f7:f6:0c:ce:1c:
         85:81:93:0c:b9:ec:dc:15:4c:18:ce:b7:6b:ea:75:17:3f:93:
         72:87:fa:31:f6:7a:26:d7:a7:7e:7d:e2:37:62:6b:7e:63:13:
         1b:c2:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:56:38 2025 by rpki-client