Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b27a754-23fb-32d0-813d-dfdeb3d61d93.roa
File:                     7b27a754-23fb-32d0-813d-dfdeb3d61d93.roa (raw, json)
Hash identifier:          dIG+Uhm5lhjN2azWN+huiOxZSULTFNRDRPtFbsN6wLY=
Subject key identifier:   DF:02:48:5C:42:74:6B:9F:F5:D4:B3:16:F2:05:12:8A:09:1C:B3:60
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B3DB6FF09F56ECDA3DAA56A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b27a754-23fb-32d0-813d-dfdeb3d61d93.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     23028
IP address blocks:        2001:470:43f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:ff:09:f5:6e:cd:a3:da:a5:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=23248f87-08c3-4742-8563-dc51611338c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6d:66:5f:3a:08:d8:2f:f1:6c:e3:e1:93:7f:
                    54:d2:72:ef:f8:6b:27:80:68:a9:b8:f4:cf:b6:79:
                    c2:c2:b8:a0:8e:b6:e2:3e:8a:7f:c9:6f:e1:23:7c:
                    3b:3f:9b:43:6e:23:27:e3:c8:7a:e8:5c:7a:0f:83:
                    31:0a:4e:6d:fd:39:47:c3:15:bc:62:18:ea:8a:f9:
                    9f:62:9b:dd:69:d6:33:b3:b5:ec:ea:b1:21:89:60:
                    46:fb:c3:e5:1b:79:36:34:c7:b5:fe:b5:0c:a2:b8:
                    c4:bc:2b:64:37:d8:d9:ea:0f:f7:90:f5:e1:48:55:
                    e1:b6:f7:f4:05:51:50:97:d3:37:6f:8b:af:a8:e4:
                    0c:3d:33:90:a4:1f:84:6b:20:1f:fc:e2:4d:7b:80:
                    bf:96:15:a5:71:44:91:43:df:93:1e:8f:b0:03:6b:
                    9a:4c:d8:a8:c0:53:43:94:85:92:e2:9b:6a:75:88:
                    75:fa:8c:2f:f4:b7:19:52:8c:57:29:08:94:81:3a:
                    70:d7:36:e4:72:9d:07:80:5e:88:7d:1c:f5:98:a2:
                    1b:ec:68:6f:5e:af:4e:e1:c9:83:a0:f2:32:ff:15:
                    26:10:07:91:48:8a:93:0e:0a:f6:e9:8e:92:96:f8:
                    25:f7:26:5b:19:0d:e7:df:42:f4:a6:80:bd:a0:0a:
                    87:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:02:48:5C:42:74:6B:9F:F5:D4:B3:16:F2:05:12:8A:09:1C:B3:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b27a754-23fb-32d0-813d-dfdeb3d61d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:43f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:4d:30:eb:08:d0:00:9b:87:d5:fd:1b:e6:24:04:3e:ec:ec:
         cc:f4:21:c7:ad:2a:d9:68:ca:d8:b4:a5:90:cc:f2:ae:08:d8:
         cf:5e:19:e6:db:cf:5f:dc:7c:fc:cc:ae:f4:52:88:c5:ed:f3:
         a8:72:af:5d:dd:d8:d8:b3:6a:c4:ec:40:d3:06:aa:db:42:8a:
         0b:2c:5a:a2:f4:b8:12:52:ee:45:1d:a1:e1:58:66:69:48:31:
         96:46:e3:60:44:c9:81:2b:19:31:d8:17:c3:82:f4:2b:a9:f9:
         f8:cf:e0:41:98:bb:0a:a6:eb:02:fc:90:d4:d2:cc:7d:28:a2:
         b1:f0:3f:4e:9f:bb:65:f4:6c:8d:d7:4b:1d:d7:c3:b1:25:43:
         43:a3:f3:8a:81:bc:23:49:c1:72:9a:eb:32:3f:a0:0e:14:4a:
         a0:fb:50:92:fa:c9:32:5b:5d:b5:ff:3e:ea:8c:29:e8:aa:96:
         0d:59:09:52:b3:ef:cc:d5:b8:d9:da:96:18:70:c1:0f:0a:3a:
         2c:0a:b9:fb:6f:9b:b3:fc:53:24:42:bc:73:cc:c0:d8:e4:a6:
         67:b1:80:ed:5b:48:62:5c:51:ce:69:ef:05:bf:24:3a:03:34:
         b7:54:ed:1f:89:88:17:84:d3:6e:5a:7c:37:e5:8f:98:63:c9:
         49:89:49:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:53:30 2025 by rpki-client