Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa
File:                     b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa (raw, json)
Hash identifier:          HlPEDQoWK5nfvBG0TyMN9N0mdKLW7rYkMR6+D+DycQ0=
Subject key identifier:   A2:54:06:EF:C0:0E:5C:A4:75:BB:45:29:CF:B6:78:24:CE:74:B2:4D
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584B7DECB0265837DE0026C357A0
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     13807
IP address blocks:        2607:fdf0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:b0:26:58:37:de:00:26:c3:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=2d12f5a2-9c32-48b8-9936-e2498cac7ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:57:d7:08:f1:f8:94:86:9b:65:e4:d8:4a:
                    07:eb:66:f8:2b:1e:d4:6f:fc:f7:26:f1:3b:ae:ad:
                    db:d5:8b:b0:8c:a1:5c:ad:85:c2:23:8a:26:2c:a3:
                    54:e3:09:d6:38:36:da:bd:9d:57:31:1d:0c:0e:28:
                    da:31:44:d4:ad:1c:9a:8e:1c:fa:61:7a:da:20:19:
                    d4:c0:69:b0:ce:ec:b0:f9:29:67:4e:e2:b5:6a:4d:
                    60:8d:2b:5b:86:8a:4b:c3:e5:52:16:1c:92:7f:78:
                    92:e4:45:d0:93:70:32:79:5b:c8:4f:27:13:08:28:
                    4d:a3:c2:fb:21:52:0f:3e:11:12:50:e7:98:ba:9e:
                    5b:2c:a0:02:5b:d0:1f:f8:83:b1:ef:54:2f:ae:cc:
                    c6:7f:51:fc:f8:62:26:8d:7d:37:02:9a:ad:da:a2:
                    dc:9b:fa:76:c7:21:b7:30:9d:27:88:cd:1d:51:67:
                    03:81:e2:3b:04:ed:42:84:55:1f:44:71:49:f6:50:
                    8a:59:ef:c2:35:28:cd:fe:8d:5b:28:9b:a3:90:33:
                    6d:0e:8e:3b:ac:5b:54:21:a0:fc:e0:7e:0d:76:18:
                    43:2d:93:82:a5:91:86:aa:c3:36:73:d8:7c:43:32:
                    4c:5b:78:9e:02:68:32:a0:e5:8f:a9:ed:81:6f:69:
                    d1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:54:06:EF:C0:0E:5C:A4:75:BB:45:29:CF:B6:78:24:CE:74:B2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/b51e01cc-9e17-31c0-9311-af8e1e0e2baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fdf0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:08:a8:c8:15:01:33:96:7c:e1:ac:fe:8d:8b:7c:18:1f:
         cd:f1:01:ab:7b:43:1a:96:50:e2:8f:b5:69:53:2b:ec:c6:b2:
         ec:c5:2d:bb:ad:62:71:0f:b2:19:86:bc:5c:21:9c:cc:8b:5e:
         dd:43:95:f6:75:83:c9:fe:55:a3:2d:55:69:91:73:ce:fc:bb:
         89:95:d2:dd:01:87:2b:ad:0d:14:0b:7d:88:10:3c:0b:ff:09:
         84:be:b0:4f:40:ec:d0:66:9b:9c:98:31:e4:20:85:ee:60:a4:
         8b:c1:b5:37:53:b2:16:4d:f2:9d:61:5b:67:b7:8d:ea:cd:60:
         43:5f:f6:d3:cd:65:9d:4d:32:77:82:a8:d3:1d:28:46:2a:cd:
         79:f5:35:05:34:24:3e:21:bf:59:a0:6a:fe:fb:23:f2:ac:45:
         41:0d:a2:04:b9:53:fd:d3:52:d0:26:e9:04:04:eb:df:c9:74:
         a8:53:f0:9d:cd:e9:da:81:68:de:45:1d:ac:d3:d1:de:1f:88:
         a1:84:e0:b6:6c:88:54:dd:7a:b0:fc:25:60:f0:9a:cf:74:f6:
         2f:c7:86:a6:b3:30:90:13:2a:a2:f7:f6:d4:94:91:4b:05:81:
         dc:39:f4:a1:84:92:d6:40:7e:13:39:a2:d2:83:d5:e4:b1:5a:
         fb:3a:38:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 13:52:26 2025 by rpki-client