Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13bd5ae6-06b1-30fa-abbd-adb4647ed2a8.roa
File:                     13bd5ae6-06b1-30fa-abbd-adb4647ed2a8.roa (raw, json)
Hash identifier:          jr80Di6XoLHAo1akhO1c7MJswrs1rPOcNnef8M2Nxac=
Subject key identifier:   69:42:DD:B5:91:3D:93:58:DE:D1:46:E0:4A:0A:80:E3:27:6A:C0:BE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B785746BD70E188925D12FC40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13bd5ae6-06b1-30fa-abbd-adb4647ed2a8.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     197071
IP address blocks:        2001:470:3d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:46:bd:70:e1:88:92:5d:12:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=1a958207-0701-4a5e-9d26-4c748c0e7f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:02:4b:cc:9c:ec:33:5f:e2:28:4d:e5:2b:40:
                    ec:7f:ce:d6:1c:aa:c1:46:d4:7f:6c:02:3c:66:27:
                    7c:44:66:2d:77:8a:58:47:6f:bb:5a:ba:1a:d5:e1:
                    58:1a:29:67:ff:c6:b1:8d:38:47:e1:de:68:e2:4f:
                    c6:87:67:df:56:0f:59:91:1d:fc:4e:7b:76:a6:f9:
                    f7:3a:fa:08:27:1c:c0:fc:1d:de:1d:0e:5c:86:2c:
                    ee:40:27:a2:b0:46:ad:ea:e6:fb:60:f2:a6:d2:8a:
                    af:85:98:3f:d7:22:37:15:0e:18:6e:49:cb:81:ff:
                    27:9b:be:67:98:c1:df:48:bd:a3:2b:a6:45:f4:3c:
                    6a:d6:05:7a:7e:6e:9c:5c:6c:5f:c8:39:72:54:d8:
                    88:84:ac:63:59:f7:58:31:c1:38:f8:fb:6b:f8:c0:
                    5a:4d:33:09:43:97:ff:e8:e0:89:3f:b6:8d:e7:fa:
                    d1:3a:5d:0a:66:d2:34:5a:fa:6c:9a:0f:21:9d:5d:
                    5b:e9:67:95:76:5c:d6:5d:75:6f:80:6d:93:8e:76:
                    9e:28:99:5a:f8:7e:68:6b:b1:23:7e:7e:30:8c:49:
                    58:b4:cd:37:ba:66:36:c4:73:c6:f7:3a:61:6b:ec:
                    6a:2b:f8:78:f1:ab:70:e8:94:a8:be:d6:82:c6:8c:
                    24:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:42:DD:B5:91:3D:93:58:DE:D1:46:E0:4A:0A:80:E3:27:6A:C0:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13bd5ae6-06b1-30fa-abbd-adb4647ed2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c4:f9:24:da:bd:9c:ff:aa:f6:69:9d:0d:78:12:be:96:e6:
         52:ca:bf:4d:05:74:8d:57:3f:12:95:05:dc:b1:6b:90:54:26:
         3a:b9:1f:08:9c:27:d4:6a:6b:ad:90:37:1f:15:6d:50:30:0c:
         17:54:96:fe:0e:d1:71:b8:12:19:b4:f0:67:06:02:61:92:6d:
         43:70:da:68:7a:0d:bc:d8:66:6c:dd:be:52:e9:79:4b:28:93:
         39:7f:f9:fa:61:9a:b7:e7:3d:c1:2c:96:36:fa:70:9f:55:99:
         b3:c4:a4:d3:80:51:1b:f9:6c:a9:4e:66:89:72:ca:c5:08:9b:
         51:f5:b6:da:4a:93:05:d2:d5:da:46:2f:9e:11:bd:90:70:4b:
         2a:1a:f1:f5:ee:8e:b4:5c:a5:f9:df:9f:ce:a9:82:7f:ab:33:
         f0:4f:8b:d5:b4:fc:a6:27:72:ae:90:f5:c0:0f:89:a4:55:67:
         46:82:db:11:bd:e4:47:1f:51:87:11:4a:2d:2c:0e:1d:75:cc:
         3b:9d:34:d8:4f:44:ff:82:c4:00:08:8f:c0:e0:01:2a:34:17:
         f5:cd:c1:49:87:44:74:b6:56:66:99:43:9b:0c:c9:b1:5f:50:
         23:45:f6:7b:ef:22:38:42:27:58:a9:07:5a:50:48:d7:fe:f8:
         77:01:e1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:55:57 2025 by rpki-client