Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa
File:                     8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa (raw, json)
Hash identifier:          1rwz8UtSOuT/Ux9Qb3pBwrJDlE4Pfpa21v40KhjoToI=
Subject key identifier:   74:A7:99:3E:F5:7B:EC:A1:F3:3B:5F:5C:50:28:CE:C2:E0:7A:6D:4A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B0746C9EE32BD928366C16280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     14371
IP address blocks:        2001:470:345::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c9:ee:32:bd:92:83:66:c1:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=f6de58d4-c077-480a-8f75-b01da8c47c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:16:2c:f8:01:34:46:20:6c:c1:47:6d:57:13:
                    0d:e0:da:69:49:86:68:42:82:f6:13:d1:e9:d3:9b:
                    ad:dc:fa:8a:e8:ba:07:47:f0:cb:d0:3f:b7:7a:f5:
                    19:63:63:7c:26:24:9f:b0:de:52:cd:c0:56:d1:b1:
                    c3:e8:b2:2b:aa:e3:ad:65:6a:ea:00:45:8c:7b:f8:
                    c5:0c:88:fe:28:bb:cb:55:85:9f:aa:3d:b7:93:a5:
                    66:15:f0:f7:c1:2f:4f:93:3d:5d:34:c0:23:fb:1f:
                    6a:4d:89:1a:59:6a:32:8e:7c:f9:b3:0d:57:55:4c:
                    7d:dc:37:b0:7d:58:cc:ec:fe:df:9e:bd:2c:9d:67:
                    d8:77:ec:18:af:2d:34:eb:ef:6b:93:72:77:9f:ec:
                    7f:88:22:be:f9:10:69:94:8e:c1:38:52:3b:76:d5:
                    1e:bb:7d:ec:16:a6:0a:d7:48:b6:72:d6:39:7f:5d:
                    f0:1b:30:96:f2:c0:dc:c7:48:5d:f5:17:00:ba:d4:
                    5f:7f:2a:63:4d:eb:0a:26:a7:8a:c1:e3:61:8c:03:
                    8e:f7:b8:ac:73:87:46:3b:84:0b:67:d0:78:b6:29:
                    0a:e9:fa:d7:e6:94:4c:9c:4c:c8:d1:2a:fd:39:ff:
                    07:0a:f1:dd:32:23:29:70:f3:f8:c5:2e:7a:15:73:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A7:99:3E:F5:7B:EC:A1:F3:3B:5F:5C:50:28:CE:C2:E0:7A:6D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e6b500b-d1d9-33eb-9afe-32f2bf6a2ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:345::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:73:02:ed:6b:5f:8b:f2:18:6b:1c:7c:5b:b1:d5:ed:f7:59:
         37:0e:25:bd:a5:d6:c9:f0:9d:37:d7:61:8b:89:55:30:fa:3c:
         f8:a2:16:c5:a0:7f:c6:58:9e:54:a0:95:3a:bb:3f:47:31:c2:
         21:36:ec:7c:7c:66:83:37:88:09:1f:78:8d:b5:0f:71:38:ba:
         28:e3:ea:a2:a5:2b:39:4c:bc:db:6f:3c:18:6d:2d:33:d0:0c:
         f1:4c:1f:2c:a1:df:a1:32:25:7f:e1:c9:c0:77:b0:1a:5c:53:
         47:bc:de:ce:ca:15:25:92:fd:e3:5b:28:12:9b:61:19:69:8b:
         5f:ac:33:8e:31:01:de:0d:17:e7:58:a3:6f:c3:2d:78:0a:09:
         a7:6c:f9:d0:42:62:da:27:4a:08:8a:64:6f:fc:3f:ad:9e:4f:
         3f:0b:81:5c:56:d7:86:6b:4a:23:6e:41:1c:91:89:f3:f0:88:
         ec:23:31:ca:5b:e5:28:5f:b3:2c:10:32:7b:fc:24:3a:ce:79:
         33:1b:06:86:b3:18:c4:50:91:a1:bc:a7:8e:c0:e5:05:88:fd:
         b0:e4:08:8e:fe:3e:da:33:63:ac:aa:26:c3:b2:fb:fa:56:30:
         bf:f1:31:63:82:3e:5d:a5:d3:dd:92:6a:6b:3e:e8:a1:80:6f:
         33:1a:84:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:55:11 2025 by rpki-client