Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/25193880-740b-3d8f-806c-6a69f18a910f.roa
File:                     25193880-740b-3d8f-806c-6a69f18a910f.roa (raw, json)
Hash identifier:          Zm5beitD63NN4QfPw2mtxnz5RNcW72RGmMNCo7o5UaU=
Subject key identifier:   98:DB:D6:2C:C4:CE:9D:A5:7C:77:CA:63:5E:E6:47:CD:A3:5B:99:29
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584BA0D24EC52DDAF2F6D4E7B200
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/25193880-740b-3d8f-806c-6a69f18a910f.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     1299
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:4e:c5:2d:da:f2:f6:d4:e7:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=e173ae87-16bd-4491-afa9-c0699c3138f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:3c:4a:f1:e6:84:c7:37:f5:b6:76:f4:cf:
                    ef:a5:e9:f4:b6:cd:bb:07:0f:6a:48:cf:b6:19:98:
                    fb:98:18:96:cd:b6:79:36:0b:a7:e4:94:3a:99:77:
                    d0:96:a9:1b:61:06:8a:9a:b1:7f:32:37:a4:5f:34:
                    cd:14:97:c3:f1:41:eb:fc:d8:60:90:b2:93:94:d8:
                    fd:b1:9d:90:70:f5:84:f0:f0:6e:ea:ca:2d:0e:81:
                    2a:2f:42:be:ad:64:20:2b:bc:d1:5f:91:be:a8:a0:
                    31:f9:c1:d2:e2:57:6e:01:d2:4c:06:81:be:cb:f8:
                    b9:c0:69:73:27:c1:d7:3b:92:b1:60:3b:4c:0d:de:
                    ca:4b:8b:6e:fc:f6:dd:ee:49:58:cf:b5:5a:7c:41:
                    2d:64:2b:48:03:46:6f:02:42:ce:b6:47:25:3c:c9:
                    ac:d8:2e:d6:5f:75:b3:26:94:f1:84:fc:2a:79:5d:
                    03:9c:b0:0c:30:2e:ec:f5:71:dc:fb:db:85:8b:00:
                    d2:cf:66:4f:64:0b:5a:e5:3f:27:48:21:19:ef:bd:
                    e7:9e:f2:c3:9b:b8:99:75:89:df:a2:87:cc:d1:a1:
                    cd:98:f9:9c:a6:bd:94:63:d7:b7:0e:1e:7a:8c:b0:
                    79:8c:68:90:f3:d7:79:39:f6:30:51:d5:8f:37:7d:
                    0d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DB:D6:2C:C4:CE:9D:A5:7C:77:CA:63:5E:E6:47:CD:A3:5B:99:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/25193880-740b-3d8f-806c-6a69f18a910f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:16:06:af:53:66:3e:26:5f:21:10:76:b7:79:08:08:05:68:
         1b:d6:68:66:d8:c5:d2:25:b1:77:54:56:c7:9e:61:dc:ce:9e:
         e1:97:04:35:15:75:a1:75:a1:d9:ac:2f:95:b0:88:4f:39:e6:
         3b:1b:56:e9:12:1d:f4:4a:1f:6b:81:c3:cd:af:c9:69:81:01:
         78:5e:4d:f4:c3:72:40:1c:de:3e:cc:84:b6:a1:d9:79:1b:15:
         2f:a8:30:39:4a:ae:41:a1:7b:f8:61:9a:c0:29:ee:72:cd:da:
         73:f6:aa:61:23:08:e6:36:2a:53:e8:12:65:ba:8f:d9:1f:28:
         1f:00:86:98:f1:cb:db:a2:49:8c:a0:a6:dc:f8:d3:08:47:45:
         d8:49:eb:46:6a:83:b4:cc:12:f5:43:a6:cb:b3:1d:80:de:7b:
         04:58:3b:af:aa:ac:d8:dd:90:34:7a:aa:ad:44:8f:52:5e:07:
         7e:71:b4:16:eb:07:0b:2a:2f:a9:e9:90:24:44:16:ad:a7:37:
         e3:46:64:f6:99:f9:0e:88:bb:8c:97:44:3c:89:04:54:ca:de:
         55:5b:2a:35:00:b5:6e:06:15:2d:03:88:fc:c3:82:d8:79:6c:
         f9:35:8d:99:7e:1a:af:14:e5:ef:70:0a:21:50:08:19:0e:e0:
         7b:fe:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:42:53 2025 by rpki-client