Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/f2365043-f512-3bfd-8495-43e52b28ab51.roa
File:                     f2365043-f512-3bfd-8495-43e52b28ab51.roa (raw, json)
Hash identifier:          8eF8d2+zd4E+uGaHwBjWJ+fU9uTYqWhE1Q26UaAZ1Hs=
Subject key identifier:   BA:8C:F5:58:13:19:E9:51:99:37:6E:EB:C4:7B:34:00:7E:F7:F4:97
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584BB88D1464DE9C19C8910C1480
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/f2365043-f512-3bfd-8495-43e52b28ab51.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     397715
IP address blocks:        2607:f598:f001::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:14:64:de:9c:19:c8:91:0c:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=37e44da5-06a6-4e9b-a3a7-3b3e4b2d9105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:df:85:e8:f2:a3:47:bd:42:b2:be:e8:ae:
                    72:f6:20:c1:2c:eb:36:1a:9d:ff:38:9b:35:4d:a0:
                    8a:de:c6:92:0d:b0:80:78:2a:f5:bf:0d:f8:ed:5a:
                    92:05:bc:02:54:18:65:8d:13:5e:18:a2:18:8a:f2:
                    95:5f:fc:0a:22:8b:50:f8:6b:2a:72:21:31:90:f4:
                    8f:e9:d8:e3:46:ab:5a:a3:e7:8e:29:fd:4f:a0:9d:
                    34:4c:6d:17:aa:ca:38:e2:df:8b:bf:34:dd:73:7a:
                    d8:b9:ce:38:6c:e9:28:c2:31:0a:d4:c0:e2:c0:d1:
                    e7:1a:6f:3a:3f:65:fc:c2:1c:1a:24:68:95:d1:41:
                    c2:b5:85:55:0f:d8:6c:35:32:3d:db:ee:05:3b:7f:
                    16:13:64:3a:ac:91:7e:e0:d0:67:42:d7:48:af:3e:
                    47:d9:3d:b1:6f:3a:f4:1f:1b:14:b2:ff:32:03:ba:
                    36:a0:5b:dc:1b:08:47:32:e0:9e:d1:52:b6:f6:f9:
                    c0:4c:35:5f:70:37:6f:3b:ac:ef:f8:04:37:2d:09:
                    c9:cf:a5:3d:6c:9b:43:07:a3:d9:5a:99:0e:94:9e:
                    2b:21:69:15:d0:ed:60:02:87:61:52:90:35:a4:b2:
                    1d:65:f0:87:fa:a3:18:f1:be:58:8c:9a:e4:a1:b2:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8C:F5:58:13:19:E9:51:99:37:6E:EB:C4:7B:34:00:7E:F7:F4:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/f2365043-f512-3bfd-8495-43e52b28ab51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f598:f001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f1:db:b6:58:d4:99:79:90:3f:4f:94:b3:13:54:42:8d:ef:
         43:07:d4:b3:4e:43:05:79:a1:74:23:b0:b1:98:7f:e5:48:ba:
         02:19:a6:c1:a5:ab:3e:52:29:7f:ed:cb:ba:4c:3a:36:0c:67:
         5b:c3:46:03:a6:8d:14:95:5d:f2:63:3d:45:12:4c:56:1c:4d:
         46:65:2c:85:21:a8:2d:ef:9a:81:df:0a:42:4a:88:f4:87:52:
         8a:92:2f:5a:4f:19:eb:59:0b:3c:cf:b8:9f:ba:39:2f:aa:46:
         6c:40:c6:83:9f:66:09:28:60:bb:aa:69:1d:8b:e5:27:e5:93:
         8d:15:0e:44:f2:56:45:4f:2d:7b:cb:a8:b6:b2:bd:b5:f4:4f:
         b0:ff:ad:c2:0b:e4:d8:7c:eb:7a:79:9b:46:5d:b3:39:e6:55:
         e9:8a:24:3b:91:79:1a:69:34:10:e5:91:a2:e2:0b:2b:31:3d:
         f5:04:1e:2b:64:98:e4:fc:ec:fb:54:a5:77:78:08:8a:ff:47:
         ea:e1:b1:d3:6f:d2:fc:b4:6a:42:c6:c0:98:67:fb:1e:ec:51:
         9d:63:65:7a:21:25:b9:73:13:e5:3b:8a:57:e4:18:ca:6e:49:
         30:4e:bf:4c:98:8b:17:69:11:2c:ea:26:9c:5a:84:a8:41:00:
         dc:b7:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:50:09 2025 by rpki-client