Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b90ed8f2-0676-3ab2-a22f-c76efe96795f.roa
File:                     b90ed8f2-0676-3ab2-a22f-c76efe96795f.roa (raw, json)
Hash identifier:          kVJXkq8cNIIDetUR0XNvJgyzoPeS/SNsg6kOmf5D1oI=
Subject key identifier:   FC:AF:31:B2:28:1E:07:70:53:CE:25:5F:FD:47:0D:E5:A9:F6:D4:66
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B8EBB76B994146E647E49DE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b90ed8f2-0676-3ab2-a22f-c76efe96795f.roa
Signing time:             Sat 18 Oct 2025 01:30:12 +0000
ROA not before:           Sat 18 Oct 2025 01:30:12 +0000
ROA not after:            Fri 16 Jan 2026 02:30:12 +0000
asID:                     12025
IP address blocks:        2001:470:4f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:bb:76:b9:94:14:6e:64:7e:49:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 18 01:30:12 2025 GMT
            Not After : Jan 16 02:30:12 2026 GMT
        Subject: CN=ceed92e2-eefb-4ed4-bea5-028dca6a295a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:44:72:04:17:82:c5:96:e5:80:22:f8:e9:
                    c5:0c:74:1a:91:a2:bc:d9:3e:d2:47:8d:2c:1a:a3:
                    48:a4:7d:40:63:b3:b2:35:20:d9:52:f3:f4:6b:1c:
                    86:79:b9:63:d3:32:a8:9b:9f:2b:03:78:ce:a7:c1:
                    c2:3b:12:05:fd:0e:28:89:17:2d:ec:66:76:9d:38:
                    8c:b3:67:78:f2:f6:36:43:93:bc:5f:84:0d:15:d3:
                    a8:4a:41:a6:37:9f:49:08:c8:15:44:61:39:78:86:
                    de:a8:fc:4d:45:b9:a5:3a:58:72:d4:79:84:e2:d3:
                    9e:9e:18:42:83:39:38:65:88:b8:0b:41:00:d4:b7:
                    85:39:6e:c7:ad:2c:9b:47:04:0e:4e:05:86:a3:90:
                    a0:45:7f:f9:47:36:30:1a:31:e7:de:dd:5b:68:cf:
                    d4:1d:ad:8a:75:4f:de:a6:00:96:36:e5:9e:a1:1a:
                    19:ef:13:05:6d:9b:66:05:07:75:3d:71:e0:08:af:
                    c4:e3:df:08:94:fb:7e:09:9a:a3:84:be:df:64:31:
                    96:0a:85:81:ec:69:e3:2b:50:83:07:57:ba:09:df:
                    2f:aa:bc:8f:33:67:12:f1:50:22:5d:2f:5e:dc:17:
                    e9:2c:d2:82:bd:c6:ba:d9:4c:4a:77:3a:a3:ec:42:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AF:31:B2:28:1E:07:70:53:CE:25:5F:FD:47:0D:E5:A9:F6:D4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b90ed8f2-0676-3ab2-a22f-c76efe96795f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:6d:32:b7:07:e8:5f:b3:0d:4a:38:6b:b2:8d:16:7b:7d:f0:
         19:bb:c4:b4:bb:8e:3d:cd:de:bc:d1:f6:90:c7:c5:c8:60:1c:
         fa:8d:ef:8f:33:27:f7:fc:a8:d1:0d:e0:3a:ea:f4:de:f4:f2:
         63:2b:e4:64:e9:22:a0:1b:5b:e1:49:5a:3b:ad:45:fb:5d:d4:
         b9:88:3f:33:5a:b1:1a:69:45:f0:cd:05:11:d7:58:a4:d1:fa:
         a5:e7:16:15:0e:98:77:f3:a1:3b:4d:f8:31:13:cc:44:8a:1e:
         25:f7:cb:7e:3e:dd:8c:df:d4:39:d9:6b:b8:90:d6:1d:f2:91:
         5b:91:bf:ce:3f:c0:9a:57:12:e3:b5:f4:25:cc:77:67:90:26:
         ac:41:e5:fb:ce:1e:24:7d:4f:1a:05:60:52:b1:47:bf:ce:f1:
         46:35:02:48:5e:80:44:48:2a:e0:7b:0a:c9:41:04:c1:9c:90:
         0b:2c:44:b4:ac:69:fd:b9:80:91:e0:4e:f1:2e:d1:91:9f:d0:
         8d:4e:b9:25:b6:9c:88:ec:55:0a:92:b7:33:19:20:7a:bc:1b:
         d7:2f:5c:91:76:e2:fb:c7:4a:ca:8e:6b:6f:0b:be:ad:4d:ed:
         07:3d:07:7f:f2:7c:6f:bb:96:c6:5a:48:8a:44:fb:b0:c9:b4:
         cf:74:76:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:28:51 2025 by rpki-client