Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe7a6f31-4d9d-3c84-9e27-097ab71a8380.roa
File:                     fe7a6f31-4d9d-3c84-9e27-097ab71a8380.roa (raw, json)
Hash identifier:          ZN+Tpum+ztTSHV+dysQ4SjCNPjHQn9kVNYQS/1q/1Vc=
Subject key identifier:   04:8D:0A:16:4B:68:92:92:D7:90:87:19:9A:C2:52:D6:46:D9:FA:55
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B7B30ABD0DC97A8F76022D208
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe7a6f31-4d9d-3c84-9e27-097ab71a8380.roa
Signing time:             Sat 11 Oct 2025 01:30:12 +0000
ROA not before:           Sat 11 Oct 2025 01:30:12 +0000
ROA not after:            Fri 09 Jan 2026 02:30:12 +0000
asID:                     151360
IP address blocks:        2001:470:4df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:30:ab:d0:dc:97:a8:f7:60:22:d2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 11 01:30:12 2025 GMT
            Not After : Jan  9 02:30:12 2026 GMT
        Subject: CN=8f3acdd7-4f64-4568-9722-8cef57072c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:95:48:35:bb:ad:a1:9c:3d:a9:1a:36:f8:
                    13:52:82:50:de:54:d7:42:1d:cc:92:34:83:96:23:
                    da:89:4d:09:68:a4:95:01:92:25:a9:fe:e1:5a:23:
                    19:5e:9f:20:a9:64:99:35:6d:52:6e:10:b2:e0:be:
                    de:b2:c1:a5:60:2a:13:65:43:6d:42:aa:bd:b1:60:
                    e9:88:e8:1a:a0:31:33:7e:81:a6:6c:6b:3b:6b:39:
                    54:78:0a:78:4e:90:2d:a4:a0:09:b2:62:dd:b9:f4:
                    d4:4e:25:da:dc:29:cd:62:6a:c1:99:7e:fe:7a:d7:
                    8c:cc:35:82:0c:70:25:45:ab:91:91:76:bd:7f:b9:
                    1c:e3:f0:e5:e6:03:29:ac:69:e3:31:f4:91:7e:48:
                    b6:91:67:8b:47:d9:bb:0c:ac:4c:fe:88:3b:ed:95:
                    2e:15:19:01:91:e8:cc:75:12:bd:ea:b8:5a:4c:ca:
                    ea:7c:7e:d9:7e:0e:f5:97:f4:5a:48:6b:c9:db:60:
                    61:c9:a4:eb:e2:86:67:8b:87:00:7d:68:26:d6:6f:
                    36:81:12:e2:72:2b:f8:1a:94:3a:74:22:d4:d5:db:
                    71:78:52:14:4a:80:af:33:60:3d:a4:f7:3f:e3:45:
                    18:2d:97:ce:9e:d7:35:ea:61:3a:6e:59:34:2c:b5:
                    f4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8D:0A:16:4B:68:92:92:D7:90:87:19:9A:C2:52:D6:46:D9:FA:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe7a6f31-4d9d-3c84-9e27-097ab71a8380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:97:90:ce:99:49:3b:29:7b:88:18:59:0b:9d:5d:a9:b6:f0:
         ce:6c:1d:88:00:89:9a:86:62:91:fc:41:69:63:07:8e:30:6e:
         8c:c8:b7:3b:47:8e:8d:51:c8:17:f9:82:94:1a:d8:be:1e:17:
         30:cb:04:cc:87:56:25:b5:b9:82:f8:8c:f7:ba:06:dd:1a:3a:
         4a:38:12:24:21:0c:fa:24:58:4d:66:ea:3b:35:d9:1d:18:50:
         83:82:13:55:43:b9:be:b9:a3:b3:54:c5:5b:21:fa:54:a7:5f:
         c4:4e:95:c1:85:1f:7a:ff:8b:f4:5f:77:97:d4:2b:1e:b7:26:
         d5:79:38:17:5a:42:2f:c0:b4:0a:9d:55:73:b1:14:4a:27:0a:
         fd:aa:ec:f1:1e:7a:c0:1b:d3:7f:73:36:cb:0b:be:39:db:82:
         3f:1d:6e:27:bb:3b:1c:6d:42:73:00:b1:0c:68:d4:e3:d5:9a:
         6a:d7:25:fd:ec:e5:08:28:5a:06:fd:21:05:48:20:86:f2:fe:
         66:1e:79:5f:67:4b:92:6c:93:fc:8e:07:be:ee:e6:97:7f:09:
         1a:88:8e:99:d0:88:a9:2b:03:90:92:1f:ed:2a:11:f9:28:55:
         32:ed:96:f4:68:40:ad:62:c7:e9:78:24:08:90:b4:ad:a1:71:
         80:7d:a6:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt7MKvQ3Jeo92Ai0ggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAxMTAxMzAxMloXDTI2MDEwOTAyMzAxMlowLzEtMCsGA1UEAxMk
OGYzYWNkZDctNGY2NC00NTY4LTk3MjItOGNlZjU3MDcyYzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui2VSDW7raGcPakaNvgTUoJQ3lTXQh3MkjSD
liPaiU0JaKSVAZIlqf7hWiMZXp8gqWSZNW1SbhCy4L7essGlYCoTZUNtQqq9sWDp
iOgaoDEzfoGmbGs7azlUeAp4TpAtpKAJsmLdufTUTiXa3CnNYmrBmX7+eteMzDWC
DHAlRauRkXa9f7kc4/Dl5gMprGnjMfSRfki2kWeLR9m7DKxM/og77ZUuFRkBkejM
dRK96rhaTMrqfH7Zfg71l/RaSGvJ22BhyaTr4oZni4cAfWgm1m82gRLiciv4GpQ6
dCLU1dtxeFIUSoCvM2A9pPc/40UYLZfOntc16mE6blk0LLX0QQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFASNChZLaJKS15CHGZrCUtZG2fpVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmU3YTZmMzEtNGQ5ZC0z
Yzg0LTllMjctMDk3YWI3MWE4MzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAByXkM6ZSTspe4gYWQudXam28M5sHYgAiZqGYpH8QWljB44wbozI
tztHjo1RyBf5gpQa2L4eFzDLBMyHViW1uYL4jPe6Bt0aOko4EiQhDPokWE1m6js1
2R0YUIOCE1VDub65o7NUxVsh+lSnX8ROlcGFH3r/i/Rfd5fUKx63JtV5OBdaQi/A
tAqdVXOxFEonCv2q7PEeesAb039zNssLvjnbgj8dbie7OxxtQnMAsQxo1OPVmmrX
Jf3s5QgoWgb9IQVIIIby/mYeeV9nS5Jsk/yOB77u5pd/CRqIjpnQiKkrA5CSH+0q
EfkoVTLtlvRoQK1ix+l4JAiQtK2hcYB9pto=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:22:22 2025 by rpki-client