Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1bd47aed-fa6d-3ca1-9ab5-79c8fcd23c60.roa
File:                     1bd47aed-fa6d-3ca1-9ab5-79c8fcd23c60.roa (raw, json)
Hash identifier:          4bXKX0irqYCIzjWCNs6n2z0PIdq7FuDA05AKH7fdKIY=
Subject key identifier:   62:8A:D7:10:21:D7:75:C7:E2:19:78:5E:83:8E:6C:E9:88:D3:1A:16
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7CE307B2241331C872A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1bd47aed-fa6d-3ca1-9ab5-79c8fcd23c60.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     17008
IP address blocks:        2001:470:273::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ce:30:7b:22:41:33:1c:87:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=bd4d0486-d496-4a99-9970-cfca5e124660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:92:cc:08:18:66:b1:a7:a2:be:0d:ec:f7:
                    7b:1d:ee:b6:b9:24:ae:d4:87:33:12:2b:04:64:da:
                    e9:ec:e1:d1:29:2b:16:c5:1f:f5:7c:cf:0e:ec:86:
                    e6:e2:c9:e1:9c:3f:6f:51:9a:27:58:e9:70:eb:45:
                    c6:9c:1a:1d:79:d6:af:0b:7e:e8:fd:a8:dc:86:e3:
                    46:ef:00:09:d9:6b:a4:31:29:e0:83:99:2c:54:f8:
                    6f:a6:76:43:0d:80:0a:e8:9e:39:d6:ff:95:d4:a2:
                    ab:70:bd:73:93:0c:09:8c:a7:91:8c:55:39:69:31:
                    08:40:3b:d2:4c:f8:31:3e:e1:30:8f:4a:bc:0a:27:
                    3a:c6:74:31:86:b7:a1:cd:3b:21:22:48:b8:79:72:
                    a9:19:e4:d3:46:d1:c8:e1:2b:a1:3c:df:6d:29:d9:
                    b6:bd:33:b0:98:44:ba:60:60:a1:f0:12:62:91:38:
                    f3:15:f6:2c:fb:b3:6d:78:d2:ed:9f:64:4c:3b:d0:
                    93:79:65:a5:c5:05:57:e0:a9:40:0a:0e:e2:7c:9f:
                    43:b5:6e:54:dc:b9:a0:64:b3:52:c0:b2:93:65:40:
                    d7:67:59:5c:c2:09:fb:6b:8a:ae:b9:cb:29:be:d3:
                    11:07:92:9f:c5:ac:4e:1a:37:27:ad:6a:4b:d6:4c:
                    9d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8A:D7:10:21:D7:75:C7:E2:19:78:5E:83:8E:6C:E9:88:D3:1A:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1bd47aed-fa6d-3ca1-9ab5-79c8fcd23c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:273::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:44:3c:0a:f5:89:67:de:91:43:31:be:98:9e:28:6a:ee:f2:
         14:d3:4d:0b:9d:b5:57:5b:05:cc:02:bf:4b:eb:ad:2c:29:60:
         22:fe:a6:e8:56:72:51:22:a8:66:07:1c:79:e5:6d:a2:f7:45:
         06:d0:05:ce:51:58:cb:e5:39:6a:50:14:7e:af:a1:67:49:f1:
         66:96:c2:ca:89:12:fd:da:e7:a2:4d:08:36:b0:75:78:fe:8e:
         f7:29:1a:3b:73:da:7c:e5:99:45:b0:eb:5b:78:68:f9:86:db:
         95:4b:55:00:f2:00:46:b5:11:e2:23:1f:e9:4d:01:1f:b2:4b:
         72:fb:6a:ab:8e:23:87:6a:05:23:7b:01:fb:41:c5:dc:72:14:
         00:b8:31:5c:80:58:58:56:ea:b7:51:de:89:95:24:03:d2:91:
         72:b8:8e:e2:8b:92:58:99:1f:38:a8:3d:ea:69:e9:22:fb:91:
         f2:ce:83:a2:71:3f:02:59:07:6f:16:80:d5:4f:db:74:36:eb:
         e1:e4:ba:b7:de:33:a9:2c:13:23:43:50:26:d2:fc:8c:52:6a:
         1a:6b:df:ee:a7:22:09:8f:e0:7b:0f:49:13:9e:47:05:aa:d4:
         77:c0:2f:d6:5f:f2:2e:a6:48:b0:f8:f0:94:e9:23:5f:d0:e0:
         ff:67:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:21:34 2025 by rpki-client