Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d92bc0f7-15a7-32e6-b19c-d917564689cb.roa
File:                     d92bc0f7-15a7-32e6-b19c-d917564689cb.roa (raw, json)
Hash identifier:          RAjB3vcDen1+yM9uXMMfNvvquHITF/UkfdBRxnoppew=
Subject key identifier:   AD:8E:38:D4:2A:71:50:1F:FF:B8:5C:16:E7:B6:46:09:7B:5D:17:4A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7C5B4D226B62BA5B96A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d92bc0f7-15a7-32e6-b19c-d917564689cb.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     149440
IP address blocks:        2001:470:177::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:c5:b4:d2:26:b6:2b:a5:b9:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=927b13f6-4bf3-4483-af53-00fc2fbffb1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5e:7f:48:da:5a:4d:65:5c:7b:df:bb:89:81:
                    0f:91:86:52:27:5d:95:4c:7c:a0:cc:dc:bf:3d:9b:
                    22:17:a2:45:fb:a3:bd:19:0c:e5:5b:aa:53:39:a7:
                    d1:34:38:db:1f:fd:75:2a:f3:f1:c3:11:5c:33:e2:
                    64:fc:9b:48:0e:d4:a3:5b:6e:fc:53:55:82:2d:f4:
                    89:20:85:31:74:48:dc:f7:62:77:39:83:ff:36:ea:
                    d0:f8:23:42:03:3b:aa:2e:28:f2:22:99:1a:fd:a5:
                    c1:7d:88:43:27:70:18:f4:4e:d6:90:80:59:19:5b:
                    38:a8:81:f1:63:70:c2:27:d2:16:ab:80:51:02:59:
                    e2:56:c6:1c:f1:7c:00:ae:56:db:9d:23:b0:b8:5e:
                    b8:9e:cb:71:bf:0d:8e:63:01:f4:0f:45:d2:12:08:
                    8f:a4:77:d8:30:29:4f:4f:1f:84:3d:58:37:1b:43:
                    d2:41:85:e7:a7:35:36:ff:69:04:7f:f2:60:70:9f:
                    4a:5a:9a:73:3b:b0:69:45:aa:d2:55:c7:25:6c:a8:
                    a9:b9:a7:70:72:32:9d:b8:2b:39:0b:00:cf:80:16:
                    fa:cc:df:58:d5:74:4a:1f:03:0c:5a:d7:cc:d8:ce:
                    3b:12:de:b6:31:ad:75:d1:28:0d:29:4e:0f:bb:67:
                    5e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8E:38:D4:2A:71:50:1F:FF:B8:5C:16:E7:B6:46:09:7B:5D:17:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d92bc0f7-15a7-32e6-b19c-d917564689cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:177::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:02:cf:1a:69:bf:30:b8:21:e0:e0:1e:2c:58:1a:aa:e7:e2:
         e8:d9:bc:b3:73:d6:27:1c:31:1e:4d:01:78:02:34:34:e9:70:
         ef:22:bc:97:44:fb:58:77:2a:db:dc:2a:6f:2b:ca:9c:ed:3b:
         31:94:3b:8d:94:25:56:35:ed:9a:07:4a:08:1f:42:e0:7c:c4:
         e6:ef:21:3e:e6:92:2d:22:63:bd:49:6e:a8:c9:05:49:ef:0d:
         8b:c3:9c:1b:b0:bb:09:db:be:0d:cf:b0:13:17:5a:5e:0e:1f:
         83:22:9f:ce:a9:27:16:31:9b:7d:2b:78:1c:d5:1e:02:41:fe:
         a9:75:fe:4d:60:e2:b9:81:2a:48:da:e5:40:55:17:5c:19:2d:
         51:eb:59:3b:d1:4a:ac:5d:32:67:96:21:2f:fd:91:31:76:aa:
         09:9a:13:2e:48:ed:da:6b:19:a3:ad:e5:32:d7:0b:e2:cc:ea:
         6c:55:94:d7:6a:35:5e:73:be:37:26:02:41:4c:0d:e5:0d:47:
         c7:ba:62:57:0b:da:5f:9a:b9:c5:97:18:0e:10:dd:e6:96:64:
         81:9c:7e:cb:dd:6b:59:c7:6d:f4:f2:d6:4e:c4:4c:bb:82:cd:
         f2:d1:d3:6c:3f:14:90:84:59:40:41:2e:ef:66:5f:c1:9d:c9:
         ee:c8:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:24:08 2025 by rpki-client