Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f087e0b3-f080-3ad9-b194-50b7c61dbafe.roa
File:                     f087e0b3-f080-3ad9-b194-50b7c61dbafe.roa (raw, json)
Hash identifier:          QQrSGe0OMeeKnta9hJngN/raTNaru3CYU7UyE7/sG+0=
Subject key identifier:   D5:8C:6B:0F:3E:1C:A2:2B:85:C2:77:25:BB:F3:B2:09:54:C8:03:9E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7ED82B2B0EF4597C24100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f087e0b3-f080-3ad9-b194-50b7c61dbafe.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     54133
IP address blocks:        2001:470:1d1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ed:82:b2:b0:ef:45:97:c2:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=8e83b670-0824-431d-a4a1-df46e08a6960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:df:a4:73:f4:c2:2e:39:79:55:49:20:05:e8:
                    a2:24:4c:b0:ac:43:c1:27:d2:4f:a5:92:20:d2:d8:
                    59:16:23:8b:b4:85:00:97:4f:59:5f:ce:61:ac:92:
                    72:ac:2f:f5:41:fe:01:6e:01:24:3a:ef:7e:12:a8:
                    d2:21:3a:97:52:88:c2:d0:cf:56:d3:17:fb:07:3d:
                    54:1e:43:67:e6:39:33:2f:25:30:09:79:b1:de:2c:
                    18:fd:ee:3e:7a:01:bf:48:db:4a:61:5a:aa:db:fe:
                    f7:0a:8f:92:0d:ae:5c:10:c9:41:77:d9:7b:6d:1e:
                    ad:92:0d:d8:53:7a:d4:44:a0:ab:21:43:50:9b:4a:
                    d7:4f:0b:34:34:54:dd:b2:dc:35:3b:41:7b:af:6d:
                    3d:b7:71:88:1c:8a:4d:5c:08:dd:f1:67:96:98:04:
                    e9:40:b5:9f:96:90:8e:cf:55:11:38:cc:12:38:22:
                    00:1a:5f:16:1f:e3:45:4e:45:ad:09:bb:10:8b:74:
                    bf:ad:99:d6:8d:76:52:00:bd:30:1e:3e:4d:dd:17:
                    ed:f5:b6:63:f3:68:ed:45:54:cf:1e:08:f5:15:cb:
                    dc:8c:6b:54:73:0c:29:46:61:1e:c7:c8:c9:65:eb:
                    e2:d1:61:3d:ab:19:c5:18:86:1c:b3:6d:ad:87:60:
                    85:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8C:6B:0F:3E:1C:A2:2B:85:C2:77:25:BB:F3:B2:09:54:C8:03:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f087e0b3-f080-3ad9-b194-50b7c61dbafe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1d1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:54:ed:aa:de:18:b0:13:ec:26:0a:84:41:eb:ef:c9:77:e1:
         f8:99:7b:9d:10:71:db:b9:df:fc:62:57:62:2c:75:97:41:2e:
         4a:10:c4:aa:fd:70:e4:bb:e4:ac:30:87:67:ac:e3:cf:51:b9:
         14:97:9c:44:44:3b:c7:ae:4f:dc:6c:60:57:f1:c9:e9:a2:cb:
         5b:1c:76:79:53:cc:1f:d2:b5:9c:d3:85:a0:f0:a8:54:e9:97:
         5e:8e:90:39:38:89:bf:ea:55:b1:6b:4a:52:ea:64:f6:51:0f:
         60:8c:fc:b9:77:65:b9:db:8d:fd:16:7f:90:e8:cd:13:91:e1:
         e5:38:18:5d:b7:61:a8:dd:38:99:65:7d:fe:4d:79:9e:24:b6:
         ee:d4:ef:2b:e8:f4:53:6a:2f:7b:36:67:45:e4:f1:a4:19:c4:
         07:7d:ec:40:e8:c2:b8:f2:64:25:cd:fb:a1:09:24:c8:23:7c:
         74:f7:02:af:2f:6f:c0:57:ac:4f:d6:26:50:85:0d:14:41:d0:
         2f:8c:3a:d8:da:a6:19:9e:33:db:b2:89:76:0c:f4:d1:6a:6a:
         81:e9:14:8c:42:33:a2:e7:17:b1:9e:80:3b:0b:29:05:70:ed:
         88:3e:4f:14:7f:fa:86:8a:72:af:57:5b:11:a9:92:2d:05:08:
         00:7e:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 03:25:13 2025 by rpki-client