Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/788f177a-7a45-3ae2-8b8c-760246812e66.roa
File:                     788f177a-7a45-3ae2-8b8c-760246812e66.roa (raw, json)
Hash identifier:          +f1gtE6tmEqeg+2gFelXxqCFebEZei0rTicqCIGxAvE=
Subject key identifier:   84:6D:6D:B8:DF:81:74:29:E1:6F:E2:6B:1C:26:3B:98:20:CF:F8:FB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B67A5E8EEC43AFAC6D0D0F440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/788f177a-7a45-3ae2-8b8c-760246812e66.roa
Signing time:             Sat 04 Oct 2025 01:30:15 +0000
ROA not before:           Sat 04 Oct 2025 01:30:15 +0000
ROA not after:            Fri 02 Jan 2026 02:30:15 +0000
asID:                     57455
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:a5:e8:ee:c4:3a:fa:c6:d0:d0:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  4 01:30:15 2025 GMT
            Not After : Jan  2 02:30:15 2026 GMT
        Subject: CN=7485397a-7af8-4c55-ab62-c38503326bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e4:fc:5d:58:ec:71:9b:77:31:b3:a6:72:ae:
                    1b:a4:04:f3:e8:85:78:69:17:1c:8b:2a:81:58:84:
                    c0:a5:35:cb:28:01:cf:50:fa:eb:b9:fb:7b:37:84:
                    23:09:d0:56:35:04:8c:b2:4c:ab:50:1c:9a:81:dc:
                    22:1b:23:f1:25:d2:44:fe:d8:1e:70:fd:de:52:ce:
                    bb:d5:5f:8c:26:f3:1f:0b:59:e2:48:fa:f9:7e:68:
                    3d:64:f9:a8:0f:7b:b5:cb:28:7a:1f:84:eb:f6:ee:
                    da:2f:c4:42:a7:9b:a8:86:cb:36:c0:bb:30:61:f5:
                    fd:62:0e:79:51:a5:34:f8:f9:fc:2a:61:cb:76:35:
                    a4:73:23:1f:91:c7:d8:09:05:38:8f:48:4f:ea:bf:
                    23:fc:d7:e1:40:34:7f:c1:d1:0d:01:b6:08:5a:42:
                    05:06:00:26:89:7e:d6:88:84:42:ae:6b:fa:ef:4a:
                    56:d9:d7:4f:3e:14:dc:00:40:42:5c:9c:94:96:c4:
                    9e:6b:5f:e5:ac:94:92:86:a6:c5:21:18:7a:f3:6f:
                    e0:51:58:ad:7c:06:9f:af:0d:7a:03:64:32:81:44:
                    6b:d6:d5:ef:06:25:c7:b7:90:15:0a:a8:df:33:dd:
                    5d:e0:30:34:da:bc:ec:9f:60:e0:d3:3d:a1:bb:63:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6D:6D:B8:DF:81:74:29:E1:6F:E2:6B:1C:26:3B:98:20:CF:F8:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/788f177a-7a45-3ae2-8b8c-760246812e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:47:e1:63:df:97:d0:9c:cc:25:c4:49:5a:04:ca:8c:43:c7:
         bb:a1:06:7b:68:fa:ea:e6:a7:01:c9:68:ad:72:96:97:23:d2:
         32:4f:17:24:13:f3:6e:85:c0:64:31:bc:05:31:c8:5c:d3:e2:
         73:27:0c:aa:f5:db:c1:54:41:f8:27:93:bf:fd:76:45:fc:25:
         8f:a1:3c:17:b5:d6:2a:55:a0:51:c1:b2:1d:0f:a6:c4:cd:17:
         45:84:8c:5e:94:a0:2f:94:b3:36:23:f3:59:f9:9e:39:2e:91:
         55:52:db:2b:4b:fc:c3:21:70:97:1b:f8:5d:09:40:97:22:0b:
         5c:c3:0e:57:13:2d:5a:cc:06:ee:a1:ad:29:da:51:a8:0a:9f:
         f0:38:d8:24:bf:78:92:1d:7d:e2:4d:2e:22:7a:a6:f4:13:72:
         2b:b1:ef:8c:a2:82:56:a5:bd:f1:95:e4:77:e6:f7:2b:7b:35:
         89:77:50:c8:69:22:66:bc:ce:03:c6:2e:88:02:e1:e5:33:c7:
         3c:ae:69:58:8f:a9:32:06:47:bf:2a:cb:db:4a:d3:8b:23:65:
         2a:b0:6a:a0:be:a7:84:54:8b:ce:20:9f:82:e3:93:c0:f7:ed:
         2a:2d:40:c6:2b:73:70:86:db:ae:6c:8a:53:8b:89:0b:43:f6:
         c9:80:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:08 2025 by rpki-client