Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c7438b6-78e6-32a6-84e2-24f3c12ae19d.roa
File:                     5c7438b6-78e6-32a6-84e2-24f3c12ae19d.roa (raw, json)
Hash identifier:          gighnhX3dCEYQopiVJI1AVIC46cuii+Lrr7ta6Y766g=
Subject key identifier:   37:04:62:0E:38:81:5A:77:ED:FF:F7:EF:84:2B:87:1E:D3:06:41:5F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7FA28AC1AC5D590A29E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c7438b6-78e6-32a6-84e2-24f3c12ae19d.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     10111
IP address blocks:        2001:470:302::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:fa:28:ac:1a:c5:d5:90:a2:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=319e8c7b-a795-40c8-9929-0d5a52acea7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:57:e8:f2:df:10:fa:09:be:5f:3c:8f:5f:
                    8c:0e:29:11:6e:a4:f4:d3:90:00:cd:e4:e7:9f:7e:
                    45:b3:19:66:53:db:38:e7:e8:39:60:10:ec:31:e2:
                    a4:f1:99:60:f3:5e:26:e1:22:f1:2e:d8:5d:af:bb:
                    9c:2a:0e:3e:7e:1a:1f:ea:c2:15:5f:ff:46:fe:c3:
                    9c:58:76:2c:d6:8b:7d:a9:66:c2:cb:00:af:7c:4c:
                    c3:c5:92:56:5b:d5:60:86:59:04:88:e5:6a:c9:d3:
                    3e:f5:4c:1c:0c:e9:d0:7f:b6:b9:6e:5f:fe:38:82:
                    61:0b:75:27:fe:fa:ed:36:18:68:f9:46:1e:77:77:
                    f9:be:2f:44:dc:b5:2e:b7:3d:a4:ea:fd:7c:9e:be:
                    62:ad:6d:03:9d:b4:91:86:1c:91:4e:92:30:2c:1a:
                    69:62:9e:0a:50:9b:96:85:40:82:c3:6a:1b:ca:54:
                    c0:3c:57:b7:cb:a4:af:fc:d7:84:ee:51:1e:4a:cb:
                    d3:d3:cb:b0:a3:d8:01:39:8b:cd:2d:32:c2:df:0a:
                    46:7c:20:34:a4:10:34:4e:b2:76:51:6b:e8:aa:1d:
                    d2:a0:85:47:1d:95:04:aa:c1:cf:fc:05:6e:75:1d:
                    e9:8a:44:4b:38:0c:70:98:59:1d:be:77:14:27:e2:
                    f6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:04:62:0E:38:81:5A:77:ED:FF:F7:EF:84:2B:87:1E:D3:06:41:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c7438b6-78e6-32a6-84e2-24f3c12ae19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:302::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:4b:cc:af:95:d9:63:1f:f6:8f:a5:f6:49:14:18:2f:5c:
         58:e5:d0:94:d4:fb:31:6b:81:d5:ca:ce:2b:ca:6b:5b:d0:49:
         2e:81:19:65:63:70:49:2d:7b:88:78:ea:76:58:f0:94:65:bc:
         9a:a5:a3:70:a8:2b:90:73:b3:75:29:f5:1d:97:e0:fd:55:b3:
         77:67:d6:6a:80:00:d6:33:6f:b3:2c:73:6a:78:31:93:1a:91:
         ae:c1:21:23:e6:28:90:7c:8e:ee:39:7b:2f:65:5e:ac:10:b5:
         af:06:c6:05:5d:f2:ba:a3:19:23:40:7d:c0:23:76:16:26:5d:
         29:91:4f:e3:87:72:d1:5a:a1:18:97:1a:0d:63:e2:0a:2f:51:
         c8:5a:7d:da:70:d2:63:bd:ed:00:96:d8:3a:7c:d3:bd:bf:f3:
         24:3f:ec:4d:4b:90:f1:51:45:fe:58:34:c2:78:66:52:6c:9f:
         65:2e:62:a5:0d:fc:28:f1:bb:b7:f3:f7:3d:be:19:f4:b5:52:
         80:4b:62:ea:7e:e0:72:9e:da:a8:07:c4:b3:4a:65:6c:ba:a3:
         b0:d4:a3:ec:10:52:51:7a:aa:74:f1:23:92:af:f2:7a:04:37:
         7a:da:fe:91:b2:2c:3e:1d:84:22:8a:63:27:f6:ee:18:c9:1b:
         71:87:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:29:01 2025 by rpki-client