Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49131492-fb77-3e0a-b34e-b5b805ec45a6.roa
File:                     49131492-fb77-3e0a-b34e-b5b805ec45a6.roa (raw, json)
Hash identifier:          aK+AXVFwJhx0dhcjK5y8jOk+2wjZ5YeEN4PcVe+4YqM=
Subject key identifier:   E5:5B:94:CE:E8:06:03:D6:71:13:EE:32:82:3B:3F:24:88:21:F2:E2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7F9B41CACFACE2A862300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49131492-fb77-3e0a-b34e-b5b805ec45a6.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     21903
IP address blocks:        2001:470:da::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:f9:b4:1c:ac:fa:ce:2a:86:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=5db071a0-4127-470c-b19d-92886d6b9aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:91:ac:31:bd:43:f7:b6:70:78:18:36:b5:
                    f0:63:b0:2a:6a:47:31:80:51:04:80:8b:49:5c:bc:
                    8c:96:b6:46:80:3e:53:b0:a1:ae:7f:02:42:de:a6:
                    c4:7a:c5:d6:5c:4f:45:ca:b1:00:b7:93:ad:62:69:
                    6c:be:95:a0:2a:7c:fa:ae:fa:2e:0b:7f:a9:b1:82:
                    00:d7:2d:0d:d4:ca:de:0b:0f:5d:5a:66:1f:38:1b:
                    4f:79:3f:79:5f:38:ea:fc:e9:a5:d8:af:bb:21:cf:
                    a3:f9:98:ea:15:4a:6e:ed:9e:b5:64:16:3c:71:c8:
                    39:45:0f:72:79:1a:25:d0:08:c5:da:55:2b:84:49:
                    8d:48:c4:60:8d:3f:c2:62:ee:41:51:76:3f:f1:c7:
                    79:e8:24:95:6a:b9:59:9f:ec:eb:32:2e:33:ac:42:
                    85:e5:bf:a4:c1:4e:89:be:c6:20:6c:a1:39:6f:a0:
                    cd:61:4c:4c:dc:86:9f:0e:71:3b:be:25:fc:5e:79:
                    1b:c9:a2:af:42:67:cb:7f:44:d9:74:84:5b:a0:ed:
                    b4:fc:72:1d:44:8d:0d:cb:ca:12:f4:11:3f:e1:40:
                    fa:cc:d7:cb:2c:27:d7:f2:78:41:2d:83:00:34:04:
                    60:0f:4e:07:de:7c:ef:4f:50:2c:94:2d:e6:b9:30:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5B:94:CE:E8:06:03:D6:71:13:EE:32:82:3B:3F:24:88:21:F2:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49131492-fb77-3e0a-b34e-b5b805ec45a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:da::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:f2:b2:92:e9:48:f8:28:3c:6e:f3:b2:0d:d2:db:c2:0e:65:
         34:f5:25:2a:54:28:e8:9d:36:a6:6a:18:b4:8b:e2:0a:2f:75:
         0d:f0:d3:47:09:d2:ce:0c:ca:8d:64:72:66:39:1d:a4:99:38:
         a7:66:c6:3f:4a:a8:4a:1d:b2:1d:81:fd:9e:c7:18:cd:70:f1:
         00:98:c9:72:cb:33:e2:73:aa:f9:43:88:be:fd:48:84:38:5d:
         8b:35:10:40:4d:04:ca:2e:67:36:38:d9:62:ab:71:2d:77:bf:
         d9:99:e2:fa:1b:e5:df:fb:f1:08:8a:f6:f6:99:e4:f7:b8:87:
         76:d0:fc:b7:42:9e:86:b0:d1:a6:7a:f8:13:a3:6d:7c:56:fb:
         2a:64:34:4a:13:9d:a7:a4:ff:58:6c:5a:84:60:c8:2a:82:1a:
         6e:28:57:ce:fd:63:5b:04:49:47:a6:e2:b8:0d:e9:a4:d3:e8:
         d2:73:5e:18:f8:2d:14:b9:22:60:8a:35:ac:b5:c3:25:62:6c:
         3e:d6:d9:1a:2e:93:8a:8a:48:02:aa:62:81:56:09:f2:56:c3:
         31:97:b7:50:58:10:c9:2f:54:19:ac:09:62:98:40:4e:fc:a1:
         09:ce:05:71:58:f2:25:b5:ca:4f:e5:75:61:c4:ce:a5:d6:7f:
         41:4c:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:25:39 2025 by rpki-client