Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9300cc27-8ff5-35df-a23f-9ecd735e51ce.roa
File:                     9300cc27-8ff5-35df-a23f-9ecd735e51ce.roa (raw, json)
Hash identifier:          eNXbE4BHDIjP58OUpF0BlSCamTtbImo4n1BjDURN+Ck=
Subject key identifier:   45:6F:D9:4F:9C:2C:2D:99:02:1A:3C:E1:73:88:58:B0:08:D9:F4:72
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7FA49BA43D076295BD080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9300cc27-8ff5-35df-a23f-9ecd735e51ce.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     12119
IP address blocks:        2001:470:303::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:fa:49:ba:43:d0:76:29:5b:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=d61c717d-32cf-475c-9cea-ddcb5c64020a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:72:b3:dc:b0:8d:8e:e2:59:52:67:b0:a4:
                    e4:43:ca:02:46:a4:18:20:4e:d0:f4:f1:f8:8f:d2:
                    05:ba:44:3a:58:27:a8:4b:af:08:c2:9c:e8:9f:c6:
                    ba:c5:5e:bc:09:33:52:26:93:9a:fd:4e:b7:e8:f6:
                    da:1a:41:6c:8d:ac:1b:93:5a:8d:4c:89:f9:6e:52:
                    60:43:65:c3:a0:20:04:23:1a:e8:19:72:ee:70:a5:
                    59:6a:19:de:5b:09:53:46:a5:11:47:e4:dc:91:c5:
                    fe:5a:fa:ba:30:48:f6:2a:fb:c7:6c:7f:5e:33:9e:
                    48:c1:9d:4a:16:a8:27:4f:60:b4:06:e9:b2:2e:b1:
                    6c:11:ff:7c:62:ad:62:e8:9c:47:2c:58:92:3c:35:
                    b0:fb:bd:59:8e:cd:3c:9d:d8:d4:3c:69:6f:86:76:
                    95:be:c9:cd:9e:e5:b5:ef:b8:f8:18:26:7b:00:a4:
                    fc:90:70:23:e6:78:52:ee:42:f8:27:89:12:ae:4b:
                    28:2c:de:bf:71:05:1b:94:8c:ea:8a:d8:fb:12:e4:
                    2c:69:ea:28:f6:66:9d:8e:17:80:66:04:d3:ac:b2:
                    14:fd:52:8b:55:8a:4f:ea:68:12:47:e5:9d:89:04:
                    0c:29:c1:bd:12:51:3d:e7:c0:d8:c8:3c:97:7e:18:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6F:D9:4F:9C:2C:2D:99:02:1A:3C:E1:73:88:58:B0:08:D9:F4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9300cc27-8ff5-35df-a23f-9ecd735e51ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:303::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:e7:99:65:92:f9:82:91:cf:cf:d3:12:39:46:6e:c7:0c:
         a1:8b:0c:6f:04:64:20:ea:0d:71:eb:c6:23:ed:9f:40:6c:94:
         fa:86:fc:41:6a:ba:01:bf:d6:56:41:5c:c0:31:42:c5:50:e8:
         af:25:8c:6f:11:52:c1:85:03:61:79:1b:ff:4c:4c:ec:71:7c:
         f9:8b:9e:91:d9:f4:fc:3a:9c:a7:e0:6c:3f:86:be:eb:ae:9e:
         f9:69:ed:d3:a7:ee:5f:37:2b:51:ac:3d:fe:46:c8:24:f6:64:
         be:83:50:81:25:a4:50:f0:93:c7:38:55:12:45:3f:6e:61:b2:
         e9:6e:1a:07:08:36:ac:dc:13:48:e7:a0:5f:3c:eb:2a:da:bd:
         21:b6:58:73:6b:d9:d8:61:7f:89:87:54:f5:87:a7:04:8a:87:
         13:4b:7c:bd:5f:44:4e:2c:3b:4c:6e:d6:de:f4:b8:f8:5f:ce:
         ed:47:96:50:00:42:d5:d5:f8:5f:e3:d1:2d:92:96:a8:53:c4:
         5f:db:d4:f2:70:eb:35:c4:a9:6a:ea:45:10:d4:aa:47:f3:d0:
         4b:34:86:ce:40:d9:59:2b:67:02:42:de:36:1a:a2:d3:34:61:
         2c:ba:8c:da:ac:cc:60:66:80:31:e8:b7:b5:57:ae:32:7d:10:
         e3:1b:d2:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/pJukPQdilb0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
ZDYxYzcxN2QtMzJjZi00NzVjLTljZWEtZGRjYjVjNjQwMjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj49ys9ywjY7iWVJnsKTkQ8oCRqQYIE7Q9PH4
j9IFukQ6WCeoS68Iwpzon8a6xV68CTNSJpOa/U636PbaGkFsjawbk1qNTIn5blJg
Q2XDoCAEIxroGXLucKVZahneWwlTRqURR+TckcX+Wvq6MEj2KvvHbH9eM55IwZ1K
FqgnT2C0BumyLrFsEf98Yq1i6JxHLFiSPDWw+71Zjs08ndjUPGlvhnaVvsnNnuW1
77j4GCZ7AKT8kHAj5nhS7kL4J4kSrksoLN6/cQUblIzqitj7EuQsaeoo9madjheA
ZgTTrLIU/VKLVYpP6mgSR+WdiQQMKcG9ElE958DYyDyXfhgcDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEVv2U+cLC2ZAho84XOIWLAI2fRyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTMwMGNjMjctOGZmNS0z
NWRmLWEyM2YtOWVjZDczNWU1MWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFpr55llkvmCkc/P0xI5Rm7HDKGLDG8EZCDqDXHrxiPtn0BslPqG
/EFqugG/1lZBXMAxQsVQ6K8ljG8RUsGFA2F5G/9MTOxxfPmLnpHZ9Pw6nKfgbD+G
vuuunvlp7dOn7l83K1GsPf5GyCT2ZL6DUIElpFDwk8c4VRJFP25hsuluGgcINqzc
E0jnoF886yravSG2WHNr2dhhf4mHVPWHpwSKhxNLfL1fRE4sO0xu1t70uPhfzu1H
llAAQtXV+F/j0S2SlqhTxF/b1PJw6zXEqWrqRRDUqkfz0Es0hs5A2VkrZwJC3jYa
otM0YSy6jNqszGBmgDHot7VXrjJ9EOMb0mE=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:21:51 2025 by rpki-client