Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa
File:                     975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa (raw, json)
Hash identifier:          d++lOwjiVHK9dfA6WRO4MMTk/jQIJnb0ehseCpypj14=
Subject key identifier:   24:F6:E9:D8:99:00:9D:12:EF:D8:64:94:1D:DE:B8:29:92:AD:AB:10
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B2A2C4ED04933B89B1159A600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     29802
IP address blocks:        2001:470:3f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:4e:d0:49:33:b8:9b:11:59:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=342300d6-dc0e-4149-8294-93e702da0054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:67:6a:f2:8d:83:d4:90:94:47:0d:4a:1c:22:
                    9c:f8:53:5b:d7:ed:d1:3e:02:78:a1:83:3c:89:4d:
                    9d:11:d8:70:14:84:61:2d:3e:f9:ff:b0:68:ed:4f:
                    d4:9d:35:63:fd:fa:d9:f5:00:2b:1f:4c:55:c3:40:
                    f9:06:67:a6:19:43:f2:f6:2f:24:6b:bc:9b:8f:56:
                    9b:54:a5:72:1e:6a:57:74:ae:3a:48:76:ad:ab:10:
                    62:e5:3a:29:9e:3e:6f:49:15:91:55:c7:a9:fd:0f:
                    bd:fc:57:ec:c2:18:2f:d7:65:cf:4e:f9:8a:c1:61:
                    cf:a1:72:76:36:5e:40:d1:5e:ba:84:34:a8:dd:08:
                    73:ac:31:e3:4e:a2:de:5e:01:88:85:64:ec:03:ea:
                    a7:92:5d:7f:11:a1:35:c3:66:0c:ce:5a:ae:9e:f9:
                    b3:4b:3a:be:75:ad:16:15:47:e2:e8:59:0f:a6:cd:
                    81:f0:22:cc:8f:c6:f1:10:d4:f4:30:5e:67:6a:99:
                    72:f5:45:aa:9c:05:7d:db:48:4c:dc:9f:96:b1:ae:
                    1e:d5:03:32:d7:cd:f0:bc:2d:3d:42:f8:89:6e:33:
                    da:9f:4c:3c:a8:69:8b:b4:74:75:ab:88:2b:d1:6c:
                    67:c2:8e:8b:93:9d:c7:19:33:2b:ff:c7:f2:1b:ce:
                    06:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:E9:D8:99:00:9D:12:EF:D8:64:94:1D:DE:B8:29:92:AD:AB:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:f2:01:e0:fb:8a:91:39:56:96:80:d5:7c:b3:d5:73:04:
         c9:00:e1:98:05:14:37:01:7e:4c:3a:a0:1a:9f:50:e3:f7:ca:
         38:e8:21:cc:22:ae:37:c2:58:dd:cd:ca:da:78:81:eb:79:2e:
         50:2e:8c:65:a1:b4:17:4e:57:6b:55:17:74:c9:f6:1e:df:d5:
         e9:0b:c1:b9:f6:e4:46:34:d8:8a:d8:85:0a:1b:0f:1c:a6:7e:
         37:19:97:79:fc:91:7d:9f:ca:4f:33:1f:f5:60:b7:a9:0b:b1:
         a1:75:90:6c:61:21:06:03:d3:65:4c:dc:63:ae:9a:7d:6b:48:
         44:30:31:01:d4:96:2f:b4:de:7b:24:e1:54:e5:fc:c0:8a:85:
         b5:24:36:bf:27:90:a3:37:07:b2:dc:d6:c3:b3:cb:df:3b:d5:
         e0:48:9a:43:5e:d3:e2:39:77:72:a9:d2:d9:a1:b9:cf:da:30:
         02:5e:bc:11:5e:d1:aa:df:12:5e:9c:17:42:89:51:48:e5:46:
         74:65:5b:bd:cf:8e:dd:00:3c:a8:93:07:45:82:ea:06:59:66:
         a7:c9:9b:44:70:8a:96:6c:78:a8:c3:44:32:1d:84:3c:3c:ed:
         de:54:0f:5d:5b:fa:9c:00:bc:64:7e:cd:38:12:6d:20:5a:9e:
         13:dc:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:36:04 2025 by rpki-client