Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/164645a8-e3f6-3c2b-af5b-df77c8b2acc8.roa
File:                     164645a8-e3f6-3c2b-af5b-df77c8b2acc8.roa (raw, json)
Hash identifier:          RMEKgl/VHH+sRntuRBb1CRNEN9r1Xgg4cnxjp68Bwuk=
Subject key identifier:   0C:DB:01:91:68:57:1D:B1:49:55:E5:D8:E6:EF:EE:5F:00:00:C6:56
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7E77ACB48255E734B7100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/164645a8-e3f6-3c2b-af5b-df77c8b2acc8.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     6140
IP address blocks:        2001:470:111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:e7:7a:cb:48:25:5e:73:4b:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=3e4c05fb-80aa-4493-b320-fc4d5c3b929e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:0a:95:be:f4:0a:66:0e:24:e4:ad:07:ce:
                    be:b4:c9:19:62:15:d2:3d:5a:ba:e6:28:51:92:b4:
                    08:f2:4d:9e:51:96:81:10:19:13:85:0b:18:e4:bf:
                    e9:3a:e3:70:28:e4:e4:f6:0e:95:66:eb:79:53:79:
                    1b:a6:e0:2b:57:38:da:ef:90:5a:79:d0:5d:4b:9e:
                    03:6f:c1:ed:69:ce:a3:47:7f:df:f4:27:dd:8d:b3:
                    d1:20:aa:f6:aa:da:f0:6e:aa:2b:26:50:93:2d:22:
                    73:ea:3e:b6:1c:68:4d:61:b0:7e:4c:7f:fe:12:76:
                    ae:3c:d4:6a:bb:ec:4a:15:09:98:39:b6:fc:e2:c0:
                    38:03:ba:78:c8:0c:57:db:7c:bb:b2:17:51:0a:a7:
                    cb:08:24:ab:c8:09:28:86:90:2a:60:e5:a0:7b:e7:
                    8a:06:85:95:b3:67:4f:39:d9:9f:be:b9:5e:c8:56:
                    59:b6:78:8a:b9:41:01:98:cb:c4:1f:be:fd:25:a4:
                    bb:44:53:59:66:df:19:7b:0a:75:c8:04:54:bd:11:
                    b0:60:12:fa:7d:9f:82:a0:46:1d:f0:20:c3:70:f1:
                    95:65:54:94:36:64:37:14:38:c7:a9:65:7e:d2:95:
                    1a:8b:ac:16:88:04:69:14:e9:a4:a0:f9:f5:e9:ff:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DB:01:91:68:57:1D:B1:49:55:E5:D8:E6:EF:EE:5F:00:00:C6:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/164645a8-e3f6-3c2b-af5b-df77c8b2acc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:dc:9b:db:1f:aa:42:17:99:61:dd:d9:56:86:d7:b0:c2:e9:
         a5:5c:45:12:72:ac:85:a0:5d:84:ff:4d:36:c5:67:e7:fd:98:
         de:78:d7:32:57:ee:02:74:96:ad:b6:b0:11:56:83:db:75:6b:
         12:d3:f5:5f:b7:5f:21:5d:6f:07:7f:81:2f:9e:1a:97:b3:5e:
         18:d8:83:79:22:45:96:40:b0:85:f8:bc:07:97:77:c7:f2:b0:
         4c:56:c9:87:85:b3:e4:4d:f1:28:01:96:7b:f0:62:70:31:f0:
         66:11:a0:63:6d:65:19:a3:bc:4a:c7:ac:91:d2:19:34:6e:dc:
         40:b0:1b:b8:ae:aa:a9:5a:f8:71:cd:ae:e5:3e:84:c8:bd:d8:
         2f:e5:68:ac:17:bd:33:4b:e6:47:a8:bf:df:ad:ee:2b:72:25:
         c8:fb:75:68:bf:96:3b:cb:5f:40:be:86:fa:01:da:cd:eb:6e:
         c9:45:d5:dc:4e:18:dc:e3:80:66:7b:ba:76:2c:85:45:99:6b:
         91:c8:6a:57:e9:60:b7:78:a9:78:0c:98:01:e6:53:24:1e:83:
         5e:a6:7d:fb:63:a2:1e:fa:44:5b:b2:23:99:8d:a9:39:b1:a9:
         e1:05:39:9a:99:19:28:4e:e7:25:fd:f6:41:a0:00:95:11:ea:
         2a:a1:fc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:23:51 2025 by rpki-client