Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f646078-f64e-34c4-be00-f9f192326788.roa
File:                     8f646078-f64e-34c4-be00-f9f192326788.roa (raw, json)
Hash identifier:          h43hh1BOvtMAHeeRMXFC/ApHeieiOaJ8OdOs5Q1fOsY=
Subject key identifier:   B5:70:DE:13:78:5F:D1:3C:54:47:31:DE:B6:4D:91:A9:BA:1C:67:70
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B80B77F08CF8091B6B6058580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f646078-f64e-34c4-be00-f9f192326788.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     139831
IP address blocks:        2001:470:380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:7f:08:cf:80:91:b6:b6:05:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=2d3cf3dc-8b98-4fc0-8c24-b5e1c59afe95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:ec:0a:69:0c:25:51:b7:05:ae:48:86:83:
                    23:e9:0c:70:c9:b5:8e:8e:70:a7:a2:cd:c9:20:ff:
                    77:c5:f8:e1:e9:4c:be:74:19:5a:dc:88:c6:11:fd:
                    2e:d5:99:5f:12:7c:7e:0a:b3:5f:bb:53:5e:bf:59:
                    53:fe:4f:98:0a:7e:a2:0a:ac:0a:f9:40:d9:b0:0f:
                    20:42:eb:74:49:01:98:5d:bb:28:cd:eb:ca:e0:b8:
                    8b:bf:b6:e7:f3:0b:e3:2b:ca:26:f7:56:47:71:f0:
                    ef:47:3b:53:6c:d7:05:ce:d2:ce:e2:57:11:a5:71:
                    84:5f:23:98:f2:4f:1c:f9:47:83:bc:4f:92:35:b5:
                    d3:f6:07:25:76:46:ee:65:ea:71:88:a5:4d:f9:c3:
                    8a:b8:8e:86:a9:77:13:41:f3:12:73:e1:48:ae:dd:
                    c5:67:df:1b:62:2f:83:d0:14:97:0d:07:12:c2:88:
                    45:7a:97:1b:3c:e6:70:35:04:ef:41:f6:f2:67:14:
                    79:1d:df:06:fd:f6:1e:46:8f:5f:a3:90:b8:1d:60:
                    49:d7:62:b1:7b:8f:e3:7a:46:a8:ea:35:f9:84:a0:
                    ec:0b:90:d7:f4:58:5a:5f:86:0a:26:f9:5f:45:bc:
                    d1:2b:46:8a:d4:23:aa:85:ef:64:ad:20:59:db:55:
                    3f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:70:DE:13:78:5F:D1:3C:54:47:31:DE:B6:4D:91:A9:BA:1C:67:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f646078-f64e-34c4-be00-f9f192326788.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:380::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4b:6b:13:ae:e0:91:f1:d8:34:f4:30:52:08:14:b2:49:79:
         0d:7f:44:67:3a:21:bd:36:85:5d:ec:f9:e1:1d:25:5f:a9:eb:
         a8:26:1d:ef:9c:55:fd:27:66:89:1c:64:0c:43:0f:7d:39:76:
         eb:2d:56:3e:24:30:04:e1:3e:16:2b:2a:98:99:e2:79:8d:e6:
         fe:a2:1a:52:70:15:38:79:02:45:a0:66:c8:86:6b:62:f1:e5:
         f3:18:e6:f0:d7:e9:dd:92:5d:11:41:92:89:ce:a2:49:89:70:
         f4:3c:be:56:05:42:cb:86:c5:3c:a6:d7:0c:eb:61:01:d3:70:
         c8:53:96:98:00:32:c3:87:be:d1:92:7c:6a:4f:0d:48:69:58:
         6b:74:8b:10:b9:a5:8c:d0:e1:11:30:2f:31:be:58:22:ac:ee:
         9d:dc:42:31:b8:98:28:3c:3c:23:77:42:43:c0:1c:44:83:64:
         d8:84:e9:e0:2c:a6:71:8d:be:99:d3:27:85:be:72:70:61:88:
         c8:c5:48:78:ad:9e:5e:fd:58:b6:40:3b:22:f3:20:fe:69:8d:
         b6:04:70:ed:07:4c:01:13:ad:1f:83:53:86:18:6f:1c:8e:ec:
         71:02:ed:0e:9a:d1:24:a1:89:e7:98:a5:92:5f:ae:f2:89:3c:
         dd:8e:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:44 2025 by rpki-client