Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/950420fc-10b0-3aed-8db8-f3ebf002cb06.roa
File:                     950420fc-10b0-3aed-8db8-f3ebf002cb06.roa (raw, json)
Hash identifier:          mT+snt0K67UNLC4hGacjtjkjzo+MjkidrJ1BvJCBe3w=
Subject key identifier:   47:04:10:F2:6F:D2:50:D2:DF:DE:E1:25:F5:F8:9E:0D:E7:8F:3E:AC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B5C6CB654B3EEAAEE0548BAC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/950420fc-10b0-3aed-8db8-f3ebf002cb06.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     210644
IP address blocks:        2001:470:276::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:b6:54:b3:ee:aa:ee:05:48:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=44a80b78-234a-43ce-b618-bee86e6266ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:d1:70:64:ee:7c:3b:a6:92:23:86:3c:3f:
                    1d:a3:48:a8:26:fc:09:ad:7b:d7:ec:be:bc:aa:e2:
                    b9:93:71:41:93:4a:18:5b:83:d6:ef:aa:fc:09:8c:
                    f4:e5:49:ec:b3:d1:b3:51:ff:57:54:bb:2b:c7:b5:
                    a2:f0:f2:de:f4:ca:76:b5:65:fb:49:d1:48:28:d8:
                    3a:75:28:c8:11:c2:c4:6c:eb:75:ae:96:98:42:8e:
                    65:aa:5b:54:0f:6b:96:bd:95:f7:3c:0b:37:98:b5:
                    5b:ca:ac:03:86:8b:30:a0:f6:ed:1d:1e:5a:b0:05:
                    c1:89:3e:eb:80:62:ad:5e:62:fa:e1:2f:95:e6:55:
                    a1:27:3e:a4:06:59:fe:3d:90:75:04:88:fc:d0:9f:
                    ec:69:98:44:f3:44:0b:5c:88:27:85:6a:41:2f:17:
                    d2:3b:19:ac:41:92:6e:ac:ad:1c:47:aa:78:80:de:
                    92:30:25:99:80:e2:84:d3:2a:3d:42:ca:3d:9f:62:
                    8f:0a:9f:8d:5f:0c:ed:6a:46:96:8f:16:66:cb:48:
                    f3:56:b4:13:72:78:37:48:2d:e7:53:1e:62:cf:46:
                    14:08:dd:7e:c8:9f:68:8d:cb:b8:3b:21:ff:7a:c8:
                    70:16:95:d3:81:00:e0:85:e7:38:6d:7f:e9:c6:eb:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:10:F2:6F:D2:50:D2:DF:DE:E1:25:F5:F8:9E:0D:E7:8F:3E:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/950420fc-10b0-3aed-8db8-f3ebf002cb06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:276::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c6:f2:50:42:15:76:8e:7f:33:4d:37:f5:91:ab:8d:79:f9:
         72:60:7c:37:6a:3f:4f:54:d9:cb:ee:ac:63:5d:28:b5:76:6e:
         dd:30:f0:f2:15:2a:14:a6:3a:5b:03:7d:6c:a4:7f:fa:c3:40:
         4d:f5:6f:05:56:57:0d:83:27:8a:80:b6:99:d8:17:b6:81:a6:
         fd:3f:bd:b7:84:1a:55:38:e5:c9:01:df:cc:d6:dc:49:29:e4:
         ab:86:5f:c8:b5:3d:42:65:8b:ae:a5:0f:eb:b3:f5:c0:94:e4:
         d5:8a:e9:b0:d4:d4:c9:71:17:98:c5:55:98:0b:12:1c:5f:2f:
         bb:98:8a:79:7e:74:c8:69:a7:8e:e3:1e:ef:ef:82:26:90:fe:
         d0:54:cc:e3:91:18:77:02:93:f8:5a:e9:b6:95:de:a8:dd:c5:
         ff:a2:91:a1:68:95:ba:d5:92:a4:28:c5:83:48:22:0f:cb:55:
         07:50:c8:14:bf:35:5f:9d:a9:fc:84:73:f6:1a:ce:f7:37:0c:
         e3:ac:25:37:f1:0a:a8:77:68:88:d5:8b:82:1a:d6:38:69:a4:
         32:17:c7:01:79:4a:c9:a4:d9:cd:2c:8c:81:f8:5e:a8:a6:67:
         be:45:96:0b:70:54:32:eb:20:fa:dc:e5:ab:e4:ff:7a:39:4b:
         22:4a:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:26:32 2025 by rpki-client