Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c032223a-8f2c-3baf-b0a7-561890bbb8aa.roa
File:                     c032223a-8f2c-3baf-b0a7-561890bbb8aa.roa (raw, json)
Hash identifier:          iPxH3AHlk3BTYxfxIRSbJ+kLEK1WiIz3rdPHA/quT9c=
Subject key identifier:   3F:B7:F6:6C:A4:1A:C7:20:59:29:1A:04:E4:1C:AE:5F:73:D8:F5:02
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B7DECC301BFF60E03615C5DC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c032223a-8f2c-3baf-b0a7-561890bbb8aa.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     55201
IP address blocks:        2001:470:3d4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c3:01:bf:f6:0e:03:61:5c:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=0fc93e51-6694-49b7-b90a-4ab812183535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:19:77:20:06:6e:c6:ad:ba:df:61:47:d7:
                    fc:fd:b5:17:a9:4f:43:26:64:5a:d8:3a:a2:a9:79:
                    91:da:d3:86:38:06:26:a1:e7:29:d3:8e:75:57:d1:
                    6d:44:61:3c:cc:ba:ae:93:5c:e6:38:fe:6a:8f:03:
                    c7:0f:bf:e7:94:3d:88:35:61:6e:2a:15:6f:02:ba:
                    69:b0:92:03:c5:a8:bf:15:62:b0:ea:7d:38:e2:65:
                    e7:f2:e9:18:ae:05:e0:d8:fc:bd:c8:cb:e7:85:8a:
                    6d:fa:b2:0e:da:51:66:c8:30:95:6b:01:31:36:8a:
                    b5:22:8c:43:b3:e1:0e:fc:60:41:6f:31:50:7c:0e:
                    f1:e8:11:8f:b6:f7:bd:06:91:81:af:90:a3:22:e7:
                    38:71:89:c8:c5:a9:af:24:05:fd:4b:60:d6:c0:33:
                    7d:c6:79:1b:6b:b0:b9:b3:fb:35:1a:5e:95:3e:62:
                    36:54:61:43:60:22:cc:3c:84:cb:94:83:db:9d:d2:
                    56:de:1c:26:95:4e:79:32:bb:7c:d8:a2:f3:50:f6:
                    38:69:48:cf:72:74:86:fc:d5:2d:59:e9:ec:4a:03:
                    2f:f8:1d:f1:81:12:ca:dc:36:b0:aa:ae:b5:a1:c9:
                    90:8e:d8:67:ea:98:38:f5:22:3d:37:79:f1:64:41:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B7:F6:6C:A4:1A:C7:20:59:29:1A:04:E4:1C:AE:5F:73:D8:F5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c032223a-8f2c-3baf-b0a7-561890bbb8aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3d4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:78:f4:1e:72:56:3b:ef:8a:67:bc:cb:aa:c1:05:44:bf:21:
         74:d5:08:b9:7f:1c:e1:a0:87:59:3f:2c:69:86:63:a6:00:e1:
         5d:e9:42:20:05:b5:0b:ea:cb:26:08:22:d1:f8:34:3c:82:d1:
         3d:66:9c:e8:3d:b7:3f:cd:e7:0e:96:47:fb:20:69:ff:c4:5a:
         c7:65:93:c6:77:67:a7:18:1e:aa:03:89:2a:2d:d9:25:17:ff:
         ab:d4:2d:9f:3e:35:14:66:5d:3b:40:35:6c:5c:76:77:82:7c:
         04:e9:76:95:27:74:b9:7f:72:95:9a:40:89:63:c1:50:0b:ce:
         5b:39:16:7e:5c:11:f8:c5:82:9a:56:13:1b:ed:58:26:bf:4b:
         1d:fa:db:cb:d8:0c:92:1d:7d:01:ea:df:26:c4:a7:2a:05:9b:
         88:35:f9:8a:8d:e2:54:13:f7:6d:92:b3:24:61:37:44:8d:74:
         02:f1:42:92:f6:f7:5b:01:29:32:39:04:9d:e6:ea:78:b3:cb:
         8f:9a:2f:1b:ed:ab:fe:61:48:d1:fe:66:46:d8:fd:59:03:48:
         8c:1a:9e:c4:c9:43:26:95:b5:fd:ec:22:4c:71:45:80:77:d6:
         70:9b:50:56:e8:5b:fa:54:77:0c:df:fa:98:86:f7:94:c2:14:
         2c:25:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:32:51 2025 by rpki-client