Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c62f25b9-279a-390b-b0cc-63e29bf3b245.roa
File:                     c62f25b9-279a-390b-b0cc-63e29bf3b245.roa (raw, json)
Hash identifier:          FbC314B5rQqF73zYDdYDoOPxAvBzFxS90ymXm7OnS5k=
Subject key identifier:   4B:21:EA:CE:5A:19:83:4D:78:0E:71:10:C8:C4:19:77:4F:20:7C:F1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B4BAC5438DCF1AB5440E64340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c62f25b9-279a-390b-b0cc-63e29bf3b245.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     150770
IP address blocks:        2001:470:e9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:54:38:dc:f1:ab:54:40:e6:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=f99c569b-3022-4cfe-b9e8-a4bc1cbbbe89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:6a:7d:9e:06:36:af:8f:6c:2c:6d:d9:cd:
                    57:a5:a7:c5:c3:e6:77:9b:ee:9c:a5:2d:fa:14:38:
                    a0:14:34:0b:fb:1c:00:d3:8f:96:5e:7b:7c:e4:a4:
                    bd:a5:c9:3f:15:2f:43:24:f9:5f:ea:81:88:33:c5:
                    72:81:1c:00:2d:1e:6b:75:7c:cd:10:d9:4b:d4:22:
                    e7:3c:2c:c8:76:72:37:b9:80:85:50:72:67:19:a5:
                    a9:20:f8:c7:ff:fc:65:da:cc:24:72:ff:1d:7f:62:
                    3b:63:16:d5:79:4f:95:c2:00:5b:c9:6d:de:d9:50:
                    7a:da:f4:68:8a:4b:9d:9d:9a:4f:58:6d:44:9a:a6:
                    56:60:a5:b8:c6:db:ed:24:c1:60:0c:05:0c:18:8a:
                    37:6a:9d:4a:cc:27:a5:44:3b:b0:4e:ad:77:84:58:
                    6d:f0:ac:28:24:0d:6b:3c:e9:4b:01:9a:59:a7:30:
                    4a:70:0b:87:f9:73:55:1c:5b:02:31:b9:ad:0b:7f:
                    d9:91:b7:e2:42:01:3e:66:0f:46:fd:53:c3:38:75:
                    2f:b8:1d:ef:07:8f:63:6b:e9:d7:0a:39:1a:df:56:
                    bf:73:81:b8:91:ea:f1:6a:89:0f:28:67:ce:df:72:
                    13:1b:7b:d6:ab:d0:85:6a:e2:68:99:ad:02:a8:7d:
                    b1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:21:EA:CE:5A:19:83:4D:78:0E:71:10:C8:C4:19:77:4F:20:7C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c62f25b9-279a-390b-b0cc-63e29bf3b245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:f6:67:47:66:6e:41:e2:df:72:b8:c0:d0:87:a7:89:a7:46:
         5b:8d:70:e6:e3:97:d7:7b:b1:44:4f:e9:b6:b4:d8:27:ee:b0:
         28:75:f7:5a:da:26:4b:4c:55:6a:63:46:35:71:39:d7:36:97:
         e1:8a:d6:45:fb:30:9e:c9:5a:c1:7d:ba:5d:25:6a:47:4b:54:
         cb:40:9a:35:8a:7f:31:f3:e4:9f:91:ef:73:64:9c:1f:05:cf:
         1b:26:82:f2:10:e6:3c:c7:2b:b2:81:99:78:67:f1:fd:cc:66:
         ba:62:12:07:da:91:de:f5:b7:9f:c7:d0:df:6a:86:9f:ef:fe:
         2c:78:1b:c2:f9:57:76:38:da:1f:2e:9e:f1:ca:2d:83:2b:2b:
         aa:39:c5:74:1f:a5:4f:6e:1c:21:ba:91:46:29:ae:e8:7b:74:
         6b:bb:eb:ac:e3:7b:a5:06:89:8d:7a:6d:37:18:d3:5b:e9:fe:
         43:9a:07:b0:9b:a1:e2:01:2a:ce:e9:76:ab:b0:ef:44:89:43:
         74:08:3b:1f:00:d9:1f:33:d9:17:44:aa:49:b8:c9:71:97:d7:
         c6:71:a4:d5:dc:ae:8b:86:9f:46:09:db:31:e6:ee:b8:7f:c8:
         18:01:d7:86:5d:ed:d5:88:b5:6e:20:e3:cd:2c:a2:40:72:64:
         43:24:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:31:54 2025 by rpki-client