Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/61c7614d-1692-3b85-837c-78efda64494b.roa
File:                     61c7614d-1692-3b85-837c-78efda64494b.roa (raw, json)
Hash identifier:          6JxWP6gtSX3o9zNcGLlUpSGVZDfhOBXXKiS/eY3Vk8w=
Subject key identifier:   87:C4:B7:AF:38:FD:1B:7E:21:95:D0:36:EB:93:3D:36:F8:D2:09:E9
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584B8EACD6613D2D91E331C56100
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/61c7614d-1692-3b85-837c-78efda64494b.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     46375
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d6:61:3d:2d:91:e3:31:c5:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=f60db4b4-0226-4d82-9886-9ad686041ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5f:69:b3:58:95:2a:3c:7c:61:92:5e:fe:d0:
                    f8:69:64:85:5d:8f:8b:60:96:72:51:42:cc:c6:34:
                    02:fe:33:d1:ef:2a:ee:37:2c:77:fa:fc:44:c3:34:
                    dc:9e:17:b7:00:05:ac:ef:5b:fc:7b:81:c5:8a:77:
                    a7:20:fb:19:6c:fe:0f:9e:74:0c:86:f7:c2:49:35:
                    5e:20:a5:e2:a1:0b:38:90:3d:33:12:b7:a2:07:89:
                    21:04:12:94:18:1d:9d:85:3f:fc:90:26:e4:75:f3:
                    8d:a0:20:28:09:08:10:16:7d:0e:9d:fe:07:c2:7b:
                    cb:15:d1:6c:d9:7b:13:b1:a5:db:90:ac:37:68:74:
                    42:54:87:89:c3:1e:3d:fb:6c:26:c3:31:5d:bc:c9:
                    a1:84:89:e3:7d:a1:88:d2:58:d9:b9:f1:ee:72:72:
                    c3:e6:14:b7:58:2c:44:5a:c9:bb:a7:99:5d:6c:f2:
                    79:1d:87:0c:fe:bf:b3:c8:b4:35:b0:e6:b2:0e:e7:
                    e5:6b:e1:6c:c4:f8:b1:40:c4:02:cb:9a:1b:2c:b5:
                    2c:82:12:da:ec:87:1c:85:e7:01:29:eb:0e:1e:e3:
                    f0:ee:5d:7d:a9:2e:ea:98:98:fd:44:c5:b3:34:3f:
                    46:3a:a5:0b:ea:ae:b9:53:6e:8d:ad:42:cd:dc:f8:
                    67:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C4:B7:AF:38:FD:1B:7E:21:95:D0:36:EB:93:3D:36:F8:D2:09:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/61c7614d-1692-3b85-837c-78efda64494b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:0b:b2:a1:c7:c5:a1:74:88:76:23:bf:1f:cb:14:47:f1:7e:
         e5:31:bd:e8:aa:c7:10:f6:58:77:c0:b9:e8:b4:e1:a0:60:d6:
         50:06:d7:7a:aa:66:b8:97:19:c0:2c:3e:3c:cd:0f:dd:d8:bc:
         e8:d5:f5:ed:a2:d6:32:f6:5e:f3:48:2f:43:c3:ba:f0:88:21:
         80:bd:8d:8e:98:44:dd:7c:da:7d:a8:79:2d:1c:b1:21:ed:c5:
         2d:0a:77:09:3b:4f:f1:04:42:84:0d:4d:3f:86:67:9e:03:a1:
         c5:fa:46:be:12:2b:2d:57:06:55:23:3b:74:38:26:44:e1:1a:
         29:4e:cb:63:d4:2f:54:a1:8d:0b:bb:7d:e9:b4:a1:77:4b:04:
         0a:31:6a:d0:4c:63:15:2a:0d:11:f1:44:1c:7c:1b:0a:f3:e3:
         b7:d3:35:72:c2:b5:7e:ad:07:a0:18:42:e4:9b:02:64:07:82:
         9b:20:b6:17:33:57:3f:56:17:a9:da:1c:78:45:e6:e5:1a:95:
         0a:76:27:2b:89:b9:20:57:b9:41:f1:6a:29:e4:c5:e9:aa:e0:
         a6:99:4f:ba:79:13:4b:99:49:66:d6:1e:f0:89:d0:6d:2f:e4:
         a3:e3:32:d4:91:fd:42:6a:e1:75:e4:cf:bd:da:68:31:b8:47:
         9f:90:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:42:30 2025 by rpki-client