Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa
File:                     3e095c3c-157c-3a77-af99-2101d8759075.roa (raw, json)
Hash identifier:          ii9wp2fC9EfbifiiOxSv9XXqV63bBI2u3+pkXK358EA=
Subject key identifier:   C5:C9:48:39:65:38:7C:45:F9:F7:AB:00:08:59:A2:43:80:7A:0E:45
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B477C9E0135305EBEB9FF8E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     398362
IP address blocks:        2001:470:1b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:9e:01:35:30:5e:be:b9:ff:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=4391ee44-f27a-4d56-990a-27cb0361810b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:a2:cc:ba:05:71:d7:94:4f:6d:80:8f:f6:
                    2c:84:1d:c4:99:33:f2:74:70:84:08:13:40:7d:e7:
                    8e:fe:3d:d1:19:83:fa:66:27:27:41:d6:9b:c8:6f:
                    7f:37:23:60:48:2b:cb:10:1d:b1:3c:49:47:4f:5a:
                    a5:d2:dd:22:b8:56:21:c9:fc:bd:1c:5c:1a:e5:19:
                    2a:f5:1b:26:a4:20:86:4a:25:5b:1a:af:4e:95:90:
                    13:46:b1:6b:d4:77:b1:5c:32:19:0c:6d:cc:7e:a6:
                    9d:db:88:7b:a6:ae:61:32:ed:01:73:10:fe:e1:20:
                    39:0f:3e:c6:2c:92:9e:18:ac:49:6e:ff:6d:e3:10:
                    b7:fb:7d:6d:8a:71:16:e0:62:3c:15:39:1d:9d:8a:
                    ec:71:e8:3d:ab:fd:1a:f9:85:06:1e:23:a9:bd:c0:
                    6e:9a:b1:3b:30:c3:27:78:b9:45:d6:47:23:d3:e0:
                    3a:99:62:70:ad:23:47:70:74:e7:d6:f3:8c:9c:8c:
                    ab:bc:66:37:dc:a0:70:f8:92:5e:fb:3b:3d:b6:bf:
                    28:c6:6b:9c:e8:4c:51:45:09:70:2f:21:85:b5:cb:
                    48:2c:78:c1:e7:af:5b:7e:95:12:f7:36:60:6c:d4:
                    50:9a:eb:6a:71:c5:3e:c9:e3:fe:75:87:f9:21:6a:
                    ce:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C9:48:39:65:38:7C:45:F9:F7:AB:00:08:59:A2:43:80:7A:0E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:43:3f:5b:d1:7b:8f:1e:f0:bc:7c:ba:17:ac:75:16:82:d0:
         b6:47:07:06:b3:f2:e4:00:79:25:e8:e4:6f:79:22:fe:7b:8e:
         99:ff:f5:05:23:7b:ec:89:39:7a:f6:58:f9:96:d6:43:4e:9a:
         8d:f4:8c:f1:e8:05:fe:db:38:23:50:b2:74:34:fa:96:4c:db:
         0b:26:69:7e:d8:94:d7:0a:92:33:31:61:20:3a:6c:f4:09:f2:
         a0:4f:60:7a:45:9e:77:11:48:a0:f1:fe:d8:d6:f0:19:d7:13:
         60:c0:07:6a:94:34:a3:b3:90:c8:60:e2:d5:e9:4d:86:80:7b:
         34:ec:ca:9b:db:04:93:85:a8:ac:cf:dd:35:ad:97:d8:d9:5c:
         91:ed:0f:96:52:23:b3:91:81:df:b0:3c:05:72:72:8f:c5:ec:
         04:ee:e4:8b:1b:77:ef:e3:49:31:bb:9e:19:31:71:ee:b7:12:
         c0:1a:3b:c4:cf:45:6b:d2:bb:d5:aa:c4:2d:c6:69:34:09:53:
         61:bd:70:40:bd:f6:c6:b4:6e:e1:34:bc:40:1e:35:5d:9b:b5:
         bd:41:78:bb:b4:1e:87:06:05:36:0c:5f:f1:b5:ad:fb:02:b0:
         00:e7:59:6c:1a:4d:40:7f:25:5f:03:a8:02:30:14:99:32:c0:
         67:7f:36:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:30:47 2025 by rpki-client