Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93fbdc10-2de6-3b88-82d5-fe3624c69a66.roa
File:                     93fbdc10-2de6-3b88-82d5-fe3624c69a66.roa (raw, json)
Hash identifier:          dmtXUw61FGAMoXO6L++Q1cq/sk8rMzCo71X/l02rgXU=
Subject key identifier:   14:16:A6:B9:2C:DF:EC:54:67:F1:FE:14:4F:06:2A:B6:DF:99:93:15
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B8EACBCD9180184C4C632FF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93fbdc10-2de6-3b88-82d5-fe3624c69a66.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     395047
IP address blocks:        2001:470:45c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:bc:d9:18:01:84:c4:c6:32:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=cf6b46aa-dbc7-4467-83aa-8f91ebb0c845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:7d:82:b0:4f:0e:b2:66:f6:aa:49:2d:5a:
                    0c:ed:35:c4:94:f6:46:ff:23:50:20:a3:63:40:91:
                    30:bc:8e:33:42:91:51:9a:f1:3b:0f:56:64:76:92:
                    3b:ec:bf:a2:56:7b:c9:ee:5a:5e:3c:a0:69:a5:7c:
                    2b:6d:02:5f:43:09:74:07:3e:cd:9b:d8:94:bf:c2:
                    58:16:f3:17:af:41:9a:4b:73:09:01:89:70:f5:2e:
                    62:4d:39:8c:fb:c3:1a:36:ca:52:9f:18:18:cf:91:
                    64:63:03:f0:0f:78:37:df:3d:99:63:5a:61:54:59:
                    d8:c2:8e:1f:2f:0f:fc:36:11:00:53:90:28:f2:65:
                    83:9a:52:31:0d:f7:0a:59:96:38:a3:0f:5c:69:29:
                    70:93:4b:cc:8c:16:9f:38:2a:fc:fb:ef:3d:52:f1:
                    5e:34:66:b3:7d:f0:ff:51:95:4a:27:bb:3e:f3:6e:
                    02:ed:6c:ec:7c:bd:91:df:31:90:c1:0c:fe:b6:36:
                    d5:42:b5:52:71:d1:1d:f6:55:ce:bd:8a:37:1d:30:
                    df:1b:73:cd:a4:91:a3:6b:42:e8:8b:7b:cc:8b:2e:
                    26:6a:11:5b:92:4c:c6:ba:00:8d:5d:9c:c6:d4:36:
                    e3:87:0b:30:81:0f:ba:85:c2:27:46:02:3e:04:fc:
                    57:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:16:A6:B9:2C:DF:EC:54:67:F1:FE:14:4F:06:2A:B6:DF:99:93:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93fbdc10-2de6-3b88-82d5-fe3624c69a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:45c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:e1:02:9d:58:39:b3:89:80:45:4d:7b:de:be:b5:f4:e8:
         6f:0a:c7:3b:21:91:52:9a:70:76:d7:21:a7:02:5c:4a:7b:d8:
         17:8c:aa:05:0f:41:28:96:4f:0e:48:0a:5e:79:e9:b5:c8:7c:
         9b:ab:7f:11:e2:0a:99:28:47:81:62:61:c9:9a:10:bd:d2:d1:
         47:2b:22:44:46:99:f4:87:e4:04:0b:51:27:86:10:8c:ad:b4:
         dd:9f:a3:27:eb:f5:f7:80:09:ef:1e:f6:44:8a:49:2a:78:59:
         e4:7a:7a:85:27:51:ae:78:43:bc:57:74:ac:ae:04:6c:21:5e:
         15:69:0f:0d:96:40:80:03:04:08:b0:ce:d7:c2:14:cb:21:aa:
         18:1a:37:5f:40:fa:1a:91:df:a9:ee:ba:d3:52:97:71:f3:1c:
         12:82:38:b7:90:36:74:a6:a2:f6:9a:fb:a7:fe:87:57:ae:95:
         59:08:ee:8f:93:34:4f:db:39:35:b2:0f:77:c9:84:48:e7:6e:
         a6:96:31:6d:b9:1e:b1:31:57:f9:71:a4:a5:2b:a6:d5:d6:b7:
         e1:e2:b9:1f:ba:9e:10:9c:a6:f7:43:a9:06:11:9b:88:e7:55:
         d0:bc:0f:91:5e:4c:1a:68:7d:42:bb:11:f6:13:36:93:58:3a:
         fa:a9:cb:1a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuOrLzZGAGExMYy/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
Y2Y2YjQ2YWEtZGJjNy00NDY3LTgzYWEtOGY5MWViYjBjODQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWZ9grBPDrJm9qpJLVoM7TXElPZG/yNQIKNj
QJEwvI4zQpFRmvE7D1ZkdpI77L+iVnvJ7lpePKBppXwrbQJfQwl0Bz7Nm9iUv8JY
FvMXr0GaS3MJAYlw9S5iTTmM+8MaNspSnxgYz5FkYwPwD3g33z2ZY1phVFnYwo4f
Lw/8NhEAU5Ao8mWDmlIxDfcKWZY4ow9caSlwk0vMjBafOCr8++89UvFeNGazffD/
UZVKJ7s+824C7WzsfL2R3zGQwQz+tjbVQrVScdEd9lXOvYo3HTDfG3PNpJGja0Lo
i3vMiy4mahFbkkzGugCNXZzG1DbjhwswgQ+6hcInRgI+BPxXfQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBQWprks3+xUZ/H+FE8GKrbfmZMVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTNmYmRjMTAtMmRlNi0z
Yjg4LTgyZDUtZmUzNjI0YzY5YTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAImj4QKdWDmziYBFTXvevrX06G8KxzshkVKacHbXIacCXEp72BeM
qgUPQSiWTw5ICl556bXIfJurfxHiCpkoR4FiYcmaEL3S0UcrIkRGmfSH5AQLUSeG
EIyttN2foyfr9feACe8e9kSKSSp4WeR6eoUnUa54Q7xXdKyuBGwhXhVpDw2WQIAD
BAiwztfCFMshqhgaN19A+hqR36nuutNSl3HzHBKCOLeQNnSmovaa+6f+h1eulVkI
7o+TNE/bOTWyD3fJhEjnbqaWMW25HrExV/lxpKUrptXWt+HiuR+6nhCcpvdDqQYR
m4jnVdC8D5FeTBpofUK7EfYTNpNYOvqpyxo=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:29 2025 by rpki-client