Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa
File:                     77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa (raw, json)
Hash identifier:          HStmw2sVy0lP7uHbgGafv44w3nzOT5fbplyaNnQMIOE=
Subject key identifier:   3F:2B:6F:AB:4E:42:64:ED:0A:C6:57:FE:46:08:63:5C:A2:F4:11:36
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99E630A814E3B1E87A71A200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa
Signing time:             Wed 22 Oct 2025 01:30:11 +0000
ROA not before:           Wed 22 Oct 2025 01:30:11 +0000
ROA not after:            Tue 20 Jan 2026 02:30:11 +0000
asID:                     209847
IP address blocks:        2001:470:433::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:e6:30:a8:14:e3:b1:e8:7a:71:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:30:11 2025 GMT
            Not After : Jan 20 02:30:11 2026 GMT
        Subject: CN=34c53f65-1bd7-4271-b9f4-90fe2d4c3764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:ca:07:29:34:85:76:f3:04:89:df:b3:57:
                    c9:15:cd:cb:34:13:7d:86:03:3c:c0:eb:06:48:55:
                    e9:17:33:f3:a5:50:83:c3:c7:ee:d9:cc:72:a0:aa:
                    13:68:45:a6:31:84:01:39:1f:ff:4c:ef:4d:34:37:
                    38:8b:e3:42:e5:d4:7a:e1:13:17:1a:99:39:bc:4a:
                    32:24:85:9e:85:9b:96:91:65:8c:39:59:d7:35:73:
                    6a:c2:25:bb:1c:27:40:43:2f:20:79:a2:57:f2:db:
                    c2:7f:71:bc:4e:b4:c1:c4:1c:09:ac:f4:6b:e1:8d:
                    c0:48:3c:8c:76:00:fa:90:6d:87:85:89:95:f6:c9:
                    e6:a7:0a:81:74:9e:92:d7:a8:53:e6:34:d9:23:6e:
                    ec:35:9d:9a:b1:d5:6b:a6:a7:c5:cb:71:cd:49:0b:
                    d9:0e:7a:3e:8b:6e:11:d5:fa:f0:51:fd:0e:fd:e5:
                    2f:8f:97:c1:a9:4a:8c:d5:aa:b3:7c:61:11:68:66:
                    f4:4b:90:55:b4:40:b2:8c:3c:4d:31:c1:93:c0:0d:
                    38:be:5b:58:a0:8f:73:e0:59:c3:7c:0a:2e:54:6c:
                    53:7f:6e:14:a5:6b:fd:78:55:a8:26:ef:72:f2:33:
                    a1:e4:8d:7a:4c:26:29:45:63:f2:e8:36:d4:1b:3b:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2B:6F:AB:4E:42:64:ED:0A:C6:57:FE:46:08:63:5C:A2:F4:11:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:433::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0a:9f:42:29:e5:98:66:dc:bc:f4:1c:3a:b5:cb:4e:45:5f:
         2f:a7:e7:a8:25:01:86:e3:a3:af:3a:94:5a:1c:33:01:99:71:
         cf:d2:67:3f:2d:58:7e:49:b4:2a:ea:47:46:4a:1f:5e:21:21:
         9b:20:a6:50:a3:29:0e:3e:23:53:6d:28:49:ec:3a:66:55:df:
         dd:f1:86:52:96:23:53:2a:e2:8a:94:ef:40:88:18:ce:75:18:
         c0:31:88:39:20:34:c4:e4:da:43:67:93:95:79:53:04:72:9d:
         ca:7e:66:35:17:62:7e:76:55:96:0b:0d:4f:94:32:35:91:e2:
         07:3c:cd:23:36:f6:72:9d:fb:0f:4e:f8:2e:21:b5:3f:a1:ab:
         ea:2e:14:0b:e3:26:b5:e3:1d:b4:ee:be:d7:38:de:77:f8:3c:
         db:29:79:69:1c:75:af:ad:17:39:d5:86:27:aa:c6:71:e3:72:
         43:9b:f0:31:01:20:c3:f1:a1:fb:ba:ca:85:17:5a:9a:18:2a:
         0c:b5:8f:49:d1:a4:c7:4d:60:e4:05:0d:63:21:56:2b:38:6b:
         d5:4c:4c:5b:04:91:57:25:a4:f9:59:29:92:64:c0:62:5c:b8:
         ad:52:7a:80:ba:88:24:36:07:5a:d5:ab:2f:a7:b5:6f:61:f0:
         50:9f:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:21:08 2025 by rpki-client