Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71a05446-573b-3a24-99a0-495678d400f9.roa
File:                     71a05446-573b-3a24-99a0-495678d400f9.roa (raw, json)
Hash identifier:          01ZCfNlP6oSUrC014udEhskRfKNF0fNN7K+ByNkneiY=
Subject key identifier:   2D:E2:75:10:40:D9:11:FE:05:35:8C:9A:33:01:D5:FC:28:C0:53:AA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B6EA098121BE904D753F0D700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71a05446-573b-3a24-99a0-495678d400f9.roa
Signing time:             Mon 06 Oct 2025 13:30:12 +0000
ROA not before:           Mon 06 Oct 2025 13:30:12 +0000
ROA not after:            Sun 04 Jan 2026 14:30:12 +0000
asID:                     14277
IP address blocks:        2001:470:4e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:a0:98:12:1b:e9:04:d7:53:f0:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  6 13:30:12 2025 GMT
            Not After : Jan  4 14:30:12 2026 GMT
        Subject: CN=389d9f6f-5f26-40f9-a43e-aa4f936d5c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:f5:b4:a5:74:7d:95:52:98:92:7e:05:18:
                    84:63:6c:43:c9:71:a2:e8:b0:6f:93:f6:a3:61:56:
                    12:fc:af:f0:07:04:e6:ff:a9:89:9a:1e:46:67:54:
                    31:75:3e:d6:e5:09:cb:fa:e0:f3:df:63:9d:70:98:
                    11:bc:7b:13:5f:b4:ef:74:a7:21:17:b0:b5:b5:76:
                    f4:27:47:bc:7d:13:ac:9b:0b:78:5e:d6:e0:a1:e4:
                    4e:f0:c5:a2:8e:51:7c:18:5c:38:8b:ff:7d:2b:14:
                    0a:d3:f6:a1:a7:3f:c3:47:b0:1a:46:4d:ef:6d:5e:
                    c2:ce:ed:72:00:f7:79:21:51:c0:a2:43:b8:51:b0:
                    48:3f:89:a1:dd:53:9a:93:e8:d4:c0:64:d7:92:77:
                    79:3f:9a:38:2b:74:60:dc:41:1a:da:84:64:7d:5a:
                    be:d7:6a:15:ca:3f:77:bb:7e:a4:08:53:eb:91:cc:
                    26:f2:39:b4:4f:28:2f:1b:a2:0f:ce:93:ad:1d:41:
                    4f:a6:d8:77:a2:1b:da:4a:51:41:f4:d5:b8:60:47:
                    98:c6:5c:ed:48:d1:06:8c:ec:09:f6:f9:df:7e:fd:
                    5a:c3:df:5c:86:38:97:54:b1:a9:b3:08:00:9e:ab:
                    2b:22:e4:36:d0:08:e6:67:c0:4e:c3:93:dc:99:17:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E2:75:10:40:D9:11:FE:05:35:8C:9A:33:01:D5:FC:28:C0:53:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71a05446-573b-3a24-99a0-495678d400f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c7:f2:21:53:99:95:bd:a3:97:b0:d2:50:f7:d5:b4:3f:12:
         a7:0d:9b:ef:a1:51:71:fd:a6:b4:c0:0b:74:eb:1f:1a:dc:37:
         22:bf:db:4b:f3:37:02:05:09:e8:17:0f:d9:05:bb:73:74:d5:
         ed:ba:73:dc:21:90:eb:5b:47:b5:7c:79:d6:af:e2:72:d4:61:
         74:07:e9:17:7a:c2:73:47:04:43:9a:da:94:bf:e8:65:2f:21:
         bc:f1:10:14:e4:a3:97:c8:cb:0b:89:31:e0:67:95:82:a8:1d:
         7b:b7:d1:6f:81:86:01:23:30:4a:30:06:96:c7:98:67:cb:f2:
         2e:06:5d:9d:50:82:c8:a0:51:83:5d:36:e0:f7:5a:37:6d:49:
         c4:2c:a3:5d:8d:02:a2:51:87:ae:1d:8a:fa:82:27:31:d8:da:
         f5:85:55:e4:02:19:49:87:c3:2e:2b:b7:91:bf:33:57:18:69:
         15:98:33:d4:f8:2d:9f:3f:86:f1:bc:9e:e3:58:7e:8e:6c:b2:
         b1:1f:5a:e0:d9:39:e1:5a:e3:86:b4:23:7d:f3:81:32:82:16:
         8d:23:b9:60:13:4e:69:b7:97:e4:57:3f:51:e4:26:ac:02:26:
         38:01:3f:5a:f5:54:ae:fa:d2:3d:41:96:60:0b:59:44:08:59:
         ea:23:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:21:43 2025 by rpki-client