Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b3756827-9594-345e-adee-10c1783f9340.roa
File:                     b3756827-9594-345e-adee-10c1783f9340.roa (raw, json)
Hash identifier:          yOM2eY2PSmTBuJn7bWHn7mru4sl6xXyGHc3oiJh3iB0=
Subject key identifier:   86:68:61:2F:CB:13:FF:49:30:F8:B6:C6:98:D8:2E:CF:40:07:56:13
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AFC1C20B9B686FB97E614F4C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b3756827-9594-345e-adee-10c1783f9340.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     394957
IP address blocks:        2001:470:2b9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1c:20:b9:b6:86:fb:97:e6:14:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=4cc624ec-795b-4fb4-b864-9801d64557af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fa:cb:3d:c5:d7:c8:26:16:bd:81:c5:87:eb:
                    52:ae:00:6f:ac:51:57:ed:0b:96:02:54:26:ea:b9:
                    d4:19:4c:b9:64:bc:09:68:09:c7:25:27:e9:49:0e:
                    5f:9f:ef:05:23:d0:97:3c:69:48:90:a2:a1:a8:db:
                    5c:3b:fb:43:5c:55:f4:62:20:a7:f2:f4:25:c7:c2:
                    6a:d8:21:47:ce:da:fb:5e:25:7a:c1:52:33:85:2a:
                    2d:5d:f6:71:d4:b1:65:50:ee:c7:1c:c3:b0:14:c1:
                    d8:ce:4d:dd:25:88:a5:50:10:09:8c:ee:7f:5a:3f:
                    bf:47:37:59:a1:ed:2e:e7:69:09:15:8c:c7:fa:a7:
                    23:00:f9:f3:be:3a:b3:d2:f3:96:2f:51:33:2b:1a:
                    a3:ef:ca:0c:ba:1e:9a:be:77:e6:a6:3c:0d:98:4f:
                    c2:7d:e0:00:a4:27:ef:ca:9f:f0:c8:04:19:20:7d:
                    3c:e3:7e:eb:ff:f2:fc:d2:4d:ea:49:76:2a:2f:d4:
                    98:ef:26:36:6f:1b:e2:40:9e:12:69:9c:42:fb:2e:
                    3e:20:74:69:06:a0:31:72:2c:3c:be:f0:54:ba:bd:
                    d5:da:37:c5:5e:80:aa:06:6d:af:0d:6e:87:28:3a:
                    b8:48:7c:60:4c:aa:2f:e9:ae:ae:cb:85:8d:87:d1:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:68:61:2F:CB:13:FF:49:30:F8:B6:C6:98:D8:2E:CF:40:07:56:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b3756827-9594-345e-adee-10c1783f9340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d4:4b:9b:9f:c4:35:7d:be:ea:97:ed:ee:63:85:a4:52:89:
         78:f5:d3:3b:d3:ff:17:91:95:89:bb:db:f2:81:15:08:02:3b:
         5e:e0:37:6b:cb:80:44:f3:97:e9:4e:b0:72:66:76:71:7b:14:
         60:8d:49:a0:bb:8d:fc:93:d9:ce:9b:0b:bc:cc:79:e4:c8:8a:
         64:29:45:c6:aa:9a:cf:99:7f:1b:5e:46:65:3d:13:a5:dd:22:
         29:a0:8d:27:de:fb:57:3b:ad:d5:f9:ca:65:d2:5f:4d:ab:ec:
         01:bb:ba:8a:e0:85:10:9e:86:5d:c3:c1:d6:2e:3f:6a:d4:38:
         e4:74:7f:31:96:52:76:00:1c:97:b7:41:42:ed:ae:0c:6b:4c:
         3c:7a:c0:07:64:84:5b:17:cf:d0:a7:b0:21:51:1f:e0:71:6f:
         bf:bb:c4:5e:d7:02:22:01:4e:f5:7c:f6:0c:6f:96:3f:f1:64:
         ec:be:a7:6a:87:05:4a:de:75:98:82:a5:f8:63:65:8d:26:45:
         14:52:d6:4e:59:8a:b8:de:83:76:7e:39:d5:57:b5:b2:0b:0c:
         ba:bb:40:a0:f9:4c:34:ee:20:89:12:f1:07:dd:d4:33:e2:da:
         9c:98:ee:8e:f9:d1:ac:94:7c:e5:ad:93:19:36:16:63:95:40:
         02:a3:ee:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:28 2025 by rpki-client