Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5fe6cea3-af8f-3aa6-9e40-818288926845.roa
File:                     5fe6cea3-af8f-3aa6-9e40-818288926845.roa (raw, json)
Hash identifier:          BBQFJXtN7vwCorLBSrKe6SSjyqq35x8BevTVwHrAHaY=
Subject key identifier:   B1:EB:C1:C9:EC:C3:14:D6:17:8B:68:2F:78:C1:06:7E:27:56:1C:D3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584BB45D458C8BD08F9BA45423A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5fe6cea3-af8f-3aa6-9e40-818288926845.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     27578
IP address blocks:        2001:470:4ad::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:45:8c:8b:d0:8f:9b:a4:54:23:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=5de3ad8d-fdd1-42d5-9f48-7a1a1b3b1330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:eb:cf:4b:9e:9e:32:92:32:c7:d5:5c:68:5a:
                    55:be:99:51:cb:d5:bf:e9:2d:e9:bf:cb:9c:0d:92:
                    a1:35:b1:1c:9b:ab:bd:e1:7f:8e:ca:ba:7f:1f:2e:
                    8d:b4:f6:eb:5c:13:e8:68:34:86:4a:a3:8a:3e:6d:
                    a3:f9:ac:ad:07:89:ac:17:27:0c:71:89:86:13:cc:
                    75:55:55:6f:6e:1e:82:43:b6:50:6a:7f:05:f3:46:
                    31:f3:94:82:24:c8:a1:49:ef:f1:2b:14:04:e4:4e:
                    49:a8:18:77:b8:12:89:4f:2f:b3:88:cf:57:b7:8d:
                    e5:d4:93:ea:67:d8:5f:a8:41:1c:63:c8:8e:cb:b2:
                    93:d3:8a:51:e9:6a:53:3c:21:df:3d:74:42:84:9f:
                    0b:fe:c4:a9:7a:55:80:04:37:ac:8f:d4:46:6d:9a:
                    2a:7d:15:09:fc:58:bc:a0:77:1a:fe:c4:0b:ad:b3:
                    f2:6c:93:33:5d:3d:69:59:63:37:36:6a:af:e1:ee:
                    85:83:8c:b9:40:75:97:99:d5:05:50:c5:92:80:38:
                    90:e1:a7:6b:2e:be:91:01:24:73:f9:ed:c5:69:4a:
                    6e:aa:5a:93:74:3e:2f:f3:d4:77:36:a8:2d:0f:7e:
                    b9:4c:01:56:59:4e:7e:ff:3b:0f:a2:c5:ca:8b:9e:
                    9c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EB:C1:C9:EC:C3:14:D6:17:8B:68:2F:78:C1:06:7E:27:56:1C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5fe6cea3-af8f-3aa6-9e40-818288926845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4ad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:48:b6:82:a6:de:a8:5d:70:6f:78:23:b2:c8:46:d6:d2:3c:
         22:7c:3f:47:f1:d2:0c:0a:71:58:ee:eb:a3:2e:df:92:b6:72:
         78:47:37:4f:14:38:2d:a0:13:8a:8c:45:1b:06:b3:a9:45:52:
         36:b9:78:b2:5b:4c:da:66:99:ae:0f:3e:52:d8:29:05:48:a7:
         2d:8a:74:23:9b:67:84:40:79:4a:8d:fa:06:6c:59:92:9f:31:
         47:0b:05:f2:b1:b7:05:96:6a:88:dd:25:a3:60:ca:06:1a:8e:
         0e:bb:16:7a:2a:54:8b:c3:4d:4b:2d:7a:f9:22:4b:81:88:38:
         ba:b0:ce:51:f9:1c:e6:eb:8a:23:9f:db:f5:f4:50:2f:f7:0a:
         ca:93:28:67:9a:6b:d1:ca:3c:72:98:38:b5:6f:52:cb:cb:9a:
         0c:23:f2:32:8d:7f:2a:4a:45:39:bf:b6:66:af:b9:d6:0b:29:
         19:b2:63:f4:9d:a1:89:12:ce:28:da:27:8a:44:c7:91:fc:d4:
         be:f9:e7:f1:35:c2:92:25:91:0e:b8:70:e3:fa:44:75:ed:d9:
         e6:f1:83:70:61:4f:49:d7:5a:d9:49:01:5e:ec:59:87:cb:92:
         97:f0:58:63:3c:e3:7a:13:86:7e:ef:73:37:b7:a3:55:87:68:
         9e:dd:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:20:56 2025 by rpki-client