Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ffda5645-cc19-3afb-ba33-6e0990ed522c.roa
File:                     ffda5645-cc19-3afb-ba33-6e0990ed522c.roa (raw, json)
Hash identifier:          4RqCFEkc5ISR2MzheWW6KcZMskmb3/xD2YNJgj0nT3c=
Subject key identifier:   41:7E:55:FB:D4:68:72:10:16:EF:22:D5:A7:B1:47:83:59:06:35:85
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B7005F52BB47C7848DAA0BC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ffda5645-cc19-3afb-ba33-6e0990ed522c.roa
Signing time:             Tue 07 Oct 2025 01:30:14 +0000
ROA not before:           Tue 07 Oct 2025 01:30:14 +0000
ROA not after:            Mon 05 Jan 2026 02:30:14 +0000
asID:                     393474
IP address blocks:        2001:470:3a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:70:05:f5:2b:b4:7c:78:48:da:a0:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  7 01:30:14 2025 GMT
            Not After : Jan  5 02:30:14 2026 GMT
        Subject: CN=c6a2462e-b3ac-43ab-9c1a-4464addcc5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:b0:01:2d:8e:6a:77:7a:24:6f:92:79:8f:
                    31:ac:b9:6e:bf:c3:25:f7:4d:65:77:fa:e6:93:47:
                    91:19:b8:03:5f:65:7c:7e:af:99:3c:5a:e3:d4:bc:
                    83:0a:bb:f5:7b:5b:e2:b7:9e:4f:6d:be:22:7a:bb:
                    7e:cf:9e:6a:e6:a4:e2:86:49:8f:d8:02:0e:e0:a3:
                    bc:09:da:85:5f:4e:fc:93:d5:7a:35:00:55:b3:06:
                    f5:45:43:3c:80:4f:8d:80:c4:82:13:2a:66:06:f0:
                    a9:8c:17:a5:b4:a1:bd:bf:da:b6:ea:d4:50:76:f2:
                    ee:79:54:62:4b:24:10:d6:79:46:fc:31:e7:d9:a2:
                    b9:2b:09:7b:21:a5:36:19:ef:be:2b:4c:0a:85:5a:
                    35:37:bc:08:da:d3:fe:ff:84:98:76:20:b6:31:24:
                    5e:2e:0c:60:e7:df:39:b9:22:29:ea:f1:7f:fc:7d:
                    e8:ec:ba:6e:43:0b:25:9e:38:c6:9a:67:c3:a3:e4:
                    fa:cf:77:80:6b:c0:b5:6a:e9:32:71:20:ef:14:8a:
                    17:62:0f:91:46:3c:e2:0c:9e:6d:8d:d0:a6:a3:a2:
                    b2:3e:17:fc:6b:77:55:79:39:6b:5a:36:34:7f:d9:
                    69:dc:d4:19:97:b2:b9:f9:04:76:6b:48:d9:1f:d6:
                    f6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7E:55:FB:D4:68:72:10:16:EF:22:D5:A7:B1:47:83:59:06:35:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ffda5645-cc19-3afb-ba33-6e0990ed522c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:32:64:bb:bb:f4:5e:4a:23:f3:44:4b:ae:3d:ad:f8:64:e4:
         1b:5c:38:d4:4f:a2:91:6c:a2:ca:50:89:26:d8:d7:76:87:4f:
         3b:14:3e:66:9d:77:10:70:a3:6c:1d:ee:e9:b1:03:e2:70:5b:
         01:74:54:fe:36:4f:7d:01:40:44:3c:4f:48:44:8a:ff:4e:ab:
         22:cb:ec:49:95:cc:a2:33:1b:4d:8d:7b:7e:7e:50:30:c6:a9:
         da:34:f3:91:19:6e:f8:c4:2a:7a:72:23:4e:f3:8a:94:66:aa:
         e9:1b:7a:50:0d:49:9a:a1:da:57:fe:db:99:75:74:ca:ec:77:
         97:f1:aa:84:7b:25:42:b0:c1:37:6b:c5:b0:1f:b9:84:0c:b9:
         75:33:ce:eb:4d:4c:8a:64:c9:ed:d3:92:30:7d:20:d6:ce:5e:
         4a:c5:97:72:a0:bc:5e:c0:fb:4d:ff:29:8e:fe:26:5b:62:25:
         9b:16:3a:5d:03:b3:63:60:6d:36:69:c4:2d:98:43:53:1f:87:
         e9:5e:b7:e3:f3:f5:43:60:07:3b:a0:59:ef:7f:d9:36:18:19:
         d1:16:cb:0f:00:ef:03:90:e3:40:c3:b8:f9:25:e7:fa:6f:c6:
         0e:6f:a5:b3:09:bd:fd:fd:30:4b:83:d5:57:a8:07:96:ca:ae:
         1f:e7:8b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:41:01 2025 by rpki-client