Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4947f72d-f17f-3923-a6b4-73d966ab58ed.roa
File:                     4947f72d-f17f-3923-a6b4-73d966ab58ed.roa (raw, json)
Hash identifier:          2dwU6kfBfHvAtFDpTy4X/OdL/wu0pkpNsI19h7R5ZAg=
Subject key identifier:   FC:97:AB:28:6C:B7:8F:35:9E:D4:2E:E1:F4:A8:81:78:5F:54:6A:51
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B7005F5D44D30AD1BA5F72180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4947f72d-f17f-3923-a6b4-73d966ab58ed.roa
Signing time:             Tue 07 Oct 2025 01:30:15 +0000
ROA not before:           Tue 07 Oct 2025 01:30:15 +0000
ROA not after:            Mon 05 Jan 2026 02:30:15 +0000
asID:                     393474
IP address blocks:        2001:470:44a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:70:05:f5:d4:4d:30:ad:1b:a5:f7:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  7 01:30:15 2025 GMT
            Not After : Jan  5 02:30:15 2026 GMT
        Subject: CN=75999770-8a0b-4cb4-8662-99988fddcf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:a6:36:63:06:ed:dc:e1:96:4a:c4:02:12:
                    4b:24:4a:28:6c:68:be:e8:f4:de:5c:e9:a8:28:bd:
                    1e:b3:cb:9b:0b:5c:60:6b:56:16:4e:5e:60:1c:ce:
                    da:dd:1e:ad:81:a9:ff:1d:1e:66:b8:68:ec:ee:e2:
                    45:57:6b:34:d8:13:90:99:50:88:d2:f3:10:73:fb:
                    8c:f4:ce:44:9f:ce:3c:f8:e6:36:cf:32:1c:a1:49:
                    df:27:2b:cf:3a:f6:5b:69:9d:d8:21:7f:66:a2:82:
                    5c:ef:7c:2b:dc:be:11:41:83:b7:18:a0:2a:b4:3e:
                    7f:4d:26:f6:bb:01:0f:44:75:7e:5a:ef:08:8c:b7:
                    bd:60:29:f1:a5:b2:83:d3:3a:c9:a1:47:24:cf:4e:
                    28:c8:3f:0d:41:ae:ba:9f:5b:47:4a:c2:85:44:98:
                    1b:d3:9c:0d:3d:eb:2a:9d:fc:29:25:9e:c2:26:b3:
                    db:aa:4a:dc:9d:32:4a:29:23:27:bd:f5:78:5a:b5:
                    5b:b3:b7:d6:b9:4a:3a:3d:7f:46:f6:4b:26:ad:ef:
                    ac:60:21:e1:94:e7:c5:e2:9a:c8:4f:0b:06:69:a1:
                    28:0e:55:f6:90:5f:a6:b8:6b:01:f9:97:e7:09:f6:
                    3e:40:56:68:9c:cf:e4:cc:3f:d3:4f:66:6d:17:d3:
                    43:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:97:AB:28:6C:B7:8F:35:9E:D4:2E:E1:F4:A8:81:78:5F:54:6A:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4947f72d-f17f-3923-a6b4-73d966ab58ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:03:43:18:d1:d1:c6:87:44:e1:a9:ea:14:95:48:d8:4a:2b:
         f4:4f:7d:1f:0f:75:50:7f:d5:40:69:2c:17:bc:df:b2:ce:88:
         32:63:66:ed:43:4b:28:52:d5:29:df:4f:9d:7d:1b:ab:6f:29:
         61:1d:a4:39:cf:45:ef:a2:1e:fa:28:64:63:1a:d6:1c:3f:75:
         e7:45:a8:14:e5:13:88:60:0a:bb:3c:ee:0f:83:ec:3f:a6:a5:
         d0:d5:2c:01:9f:69:5d:c9:02:b2:0a:77:9d:b4:1d:e7:93:83:
         03:0c:b2:63:20:39:c5:8d:ca:b0:48:5a:76:98:4d:f2:c1:3f:
         e3:b4:be:5c:af:1b:5e:47:b3:b4:76:b0:ca:ff:f6:5b:0d:0c:
         3d:d4:2f:6b:6c:2e:80:29:32:35:dd:fb:94:08:d4:34:f2:e1:
         2e:1b:fd:49:38:f9:3f:bf:27:12:40:05:ea:0a:a0:ef:bb:7b:
         5c:f3:9c:ae:dc:55:89:51:a9:49:8a:6f:9a:75:8f:09:53:b5:
         04:7b:91:b6:41:26:c6:be:bb:fe:59:36:17:d3:e6:78:cf:e4:
         43:ec:83:05:ff:41:21:db:e4:68:3b:26:0f:4d:96:5f:be:3a:
         95:34:76:6f:b9:1b:97:16:f9:c2:69:2a:80:5c:5c:d1:32:b9:
         80:55:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:32 2025 by rpki-client