Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9d579bd-1df8-38cf-9173-78fbe522f911.roa
File:                     f9d579bd-1df8-38cf-9173-78fbe522f911.roa (raw, json)
Hash identifier:          Dz6j180PS/9bKq+mrV8+TF6Scwmaum9fNbXSVBhyYIQ=
Subject key identifier:   DF:D9:D3:F3:E4:CE:E9:F3:73:DC:A4:DA:E0:94:E2:31:EF:55:75:39
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B901230CFC0E29B798549C940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9d579bd-1df8-38cf-9173-78fbe522f911.roa
Signing time:             Sat 18 Oct 2025 13:00:39 +0000
ROA not before:           Sat 18 Oct 2025 13:00:39 +0000
ROA not after:            Fri 16 Jan 2026 14:00:39 +0000
asID:                     399784
IP address blocks:        2001:470:4a6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:90:12:30:cf:c0:e2:9b:79:85:49:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 18 13:00:39 2025 GMT
            Not After : Jan 16 14:00:39 2026 GMT
        Subject: CN=fa2d1e16-eab5-45a3-adf3-3c1daad8ec44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:d6:07:25:3c:a5:16:8d:70:03:f2:ec:03:
                    23:a9:14:10:af:7d:e8:c5:8e:2a:9f:36:10:48:70:
                    4c:26:89:68:13:69:19:d6:d7:20:ca:63:ce:56:1a:
                    c5:0f:64:c8:fa:fb:b3:63:93:14:72:d5:26:b6:0d:
                    ff:d6:55:65:dc:f3:9c:c8:57:eb:c3:e2:9d:38:b5:
                    17:cc:dd:e7:2a:24:29:ed:0a:25:3c:c9:ff:76:70:
                    ac:42:cb:80:cf:5b:3b:69:7a:07:c5:55:58:69:83:
                    b6:0c:f6:87:bc:31:79:e6:c1:a3:7c:38:73:16:e1:
                    01:7f:45:90:cd:34:07:5b:b0:4f:14:66:59:b1:3f:
                    84:50:4b:63:ef:21:00:4b:21:c0:1a:56:1c:7b:cd:
                    40:f8:fc:ae:26:5c:9a:c1:6b:8d:fe:82:b2:0f:50:
                    11:31:7d:47:2e:11:0f:d5:cf:b1:29:16:1d:ca:3b:
                    5b:16:30:59:00:58:3c:f7:44:2e:71:9a:4e:5d:f3:
                    49:5a:4c:64:d7:14:35:16:e3:1e:a5:5a:88:0b:1b:
                    d8:89:6f:4a:9f:75:7c:aa:51:04:7a:d0:ab:56:52:
                    50:90:77:38:b1:40:bd:66:6b:8a:83:85:1c:a1:d1:
                    95:c3:4c:e5:76:2d:32:e5:af:83:3c:18:ee:dd:bc:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D9:D3:F3:E4:CE:E9:F3:73:DC:A4:DA:E0:94:E2:31:EF:55:75:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9d579bd-1df8-38cf-9173-78fbe522f911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4a6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:84:85:72:02:c3:8a:10:f9:f3:6a:f7:0d:4d:02:99:36:32:
         b8:49:36:d4:08:c2:10:63:fa:93:83:cc:86:70:9e:45:d4:8f:
         22:ad:92:b7:80:ec:1f:67:bf:ca:18:ba:a9:53:7b:71:d1:32:
         d1:8e:81:44:eb:c4:5d:72:86:33:a2:27:33:b3:c1:5f:b6:07:
         f7:a1:47:2a:8c:17:b7:5c:e8:d8:2b:9d:77:6c:ab:98:a6:d7:
         cc:01:3b:51:96:70:1f:71:a7:15:06:04:1f:ab:b9:6f:53:a2:
         f1:af:19:5f:d4:a5:d9:e9:2a:82:3d:cc:95:fe:b1:0f:19:fd:
         80:75:84:57:78:d5:b2:ea:c5:6e:1b:4d:61:0d:32:67:bc:da:
         50:a2:69:a0:31:9b:f7:cb:fc:25:72:0c:32:90:9a:bb:7a:12:
         c3:45:81:29:65:69:36:15:c8:db:f0:6e:5e:3c:67:1c:10:69:
         16:73:2e:5c:88:d0:a2:94:24:4f:5d:96:08:e7:45:df:be:2b:
         26:df:8f:d6:1d:52:67:a5:51:0a:48:bc:35:c7:c0:52:87:47:
         7e:ba:8d:86:8f:30:32:b0:d1:92:f5:74:bf:b7:3d:2a:d7:8d:
         4d:1e:9a:ad:cd:46:29:99:80:af:41:a5:51:a5:e3:dd:a2:ff:
         95:cc:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:35:20 2025 by rpki-client