Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
File:                     c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa (raw, json)
Hash identifier:          BsUX36iB7g/G1udK5LmauR5YKcwRgkxnlffZRBCM3Hc=
Subject key identifier:   4F:D9:D4:CC:D6:92:D3:D7:41:45:62:28:97:62:F5:7C:08:31:ED:A4
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584B8EACC91A41AB841BDA2B0800
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     7065
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:c9:1a:41:ab:84:1b:da:2b:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=fec61604-fb98-45a3-abbc-cacf051106ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:ed:4e:db:16:7b:6b:f2:99:e4:d3:8d:05:
                    51:ca:8c:ea:85:8c:a0:38:2b:58:ca:eb:8f:2c:dc:
                    20:79:50:f5:59:5b:09:5c:8b:9a:67:9a:28:1a:ed:
                    67:d5:c0:f5:6a:fe:90:f8:97:cf:42:40:53:f6:73:
                    e8:2e:79:8a:4a:39:f4:ab:35:b5:c3:b0:e6:03:d6:
                    0b:43:94:20:89:4c:33:cf:2d:f0:92:49:69:27:38:
                    10:16:e6:d8:47:df:e9:31:bf:22:98:4e:8f:0f:7c:
                    59:a7:b1:0a:c7:44:ab:3a:2d:02:6b:0a:18:d4:85:
                    37:cc:78:48:95:a8:40:8e:9a:01:b7:87:c0:ed:3c:
                    f9:88:7f:ab:f5:92:d8:01:05:31:c8:89:15:26:3c:
                    9d:cd:5d:09:05:52:87:dd:a9:2c:17:f6:5a:59:0c:
                    4d:7d:47:84:91:f1:04:6b:22:6e:6c:c6:13:38:80:
                    ba:85:88:35:21:d6:a0:b7:05:87:50:e8:a3:bf:8c:
                    7d:7e:a4:0b:fd:07:bc:8c:41:00:12:c4:5b:ed:a7:
                    50:b1:4c:b6:11:14:f6:89:dc:6e:8d:c1:0b:e3:23:
                    de:23:fc:92:c6:b4:df:c8:29:a1:e0:9b:77:cc:fd:
                    2d:0e:64:f7:98:22:89:46:3f:da:ba:ce:d3:a9:ac:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D9:D4:CC:D6:92:D3:D7:41:45:62:28:97:62:F5:7C:08:31:ED:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:7e:11:f4:cf:43:c3:bd:0e:39:4f:83:33:cc:f1:0e:7c:
         f9:2b:78:a9:02:1a:a2:d2:ee:5d:da:b9:fe:2d:24:4d:60:25:
         01:8f:32:85:6d:9e:f3:c8:c6:31:0a:ca:ff:d9:55:85:b1:a2:
         a2:4b:89:c9:cc:83:c4:d6:4b:88:6f:dd:df:55:e5:e2:07:0a:
         2b:f0:65:0f:67:de:2c:3a:72:ae:07:22:e3:2c:b0:5a:36:b0:
         96:a4:e6:eb:81:f9:60:10:cf:3d:9d:5b:da:f9:52:17:ed:b5:
         a3:2c:f1:c4:be:c5:c0:73:30:fd:13:1d:17:a0:60:ce:3a:19:
         27:e1:87:b7:7e:d0:56:c1:57:00:f8:cf:35:bf:1d:8d:f8:83:
         87:ec:c9:ce:6a:e8:b9:47:d4:40:a0:cf:9f:b5:af:5e:10:36:
         36:d1:6c:6a:01:54:3d:32:17:c7:9f:88:dc:82:39:a3:bc:2b:
         28:6d:ff:77:34:ab:1c:fe:61:d0:25:ef:2a:70:61:96:4c:8e:
         6d:de:73:e4:2a:28:67:43:07:17:4e:ed:27:60:47:2d:98:ce:
         4d:d2:5d:60:71:75:1e:0f:9b:fe:98:c4:32:e0:84:da:8c:64:
         c0:db:5e:63:5a:33:12:a4:03:02:26:ea:e7:9f:04:7e:23:08:
         7d:9f:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:38:15 2025 by rpki-client