Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e4b651c2-3505-346d-9954-0b09a8d445d1.roa
File:                     e4b651c2-3505-346d-9954-0b09a8d445d1.roa (raw, json)
Hash identifier:          mSuDlj5AlW+OvQdKFa585CSyK1+Gjj9cKHyJDewvBqU=
Subject key identifier:   9B:04:2B:E9:F1:72:F6:12:A0:F8:E0:99:09:8F:85:D2:5D:B1:35:F4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7FB616E4A02BB62D07BC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e4b651c2-3505-346d-9954-0b09a8d445d1.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     62833
IP address blocks:        2001:470:320::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:fb:61:6e:4a:02:bb:62:d0:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=a803cb29-0422-4204-9f0c-016e02754ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c7:3f:ea:ea:2e:b4:66:e1:3c:3c:5f:2c:18:
                    38:9e:3c:1c:89:f0:9b:0e:c1:6f:84:f8:84:0d:43:
                    c7:89:fc:0c:c5:b6:ea:f5:da:f9:e7:46:ed:ff:ee:
                    95:a4:d3:38:2b:fb:46:65:6f:b1:7d:a7:d3:d9:76:
                    ff:c8:76:31:d9:a5:6d:c3:8c:9e:a9:af:d1:e3:be:
                    84:3a:ed:06:5f:ec:4e:d8:8e:8e:9a:99:14:9e:d2:
                    2f:a5:c1:15:38:8e:c4:5a:70:da:40:db:27:ef:8a:
                    a1:aa:7b:d5:06:85:2b:0e:51:96:0d:8f:4c:da:3a:
                    2a:f8:e0:f1:82:41:81:63:6a:d7:7d:a2:26:c6:98:
                    63:b2:57:a6:fc:2e:d0:1d:c5:dc:fc:1a:b3:98:0c:
                    4e:d2:fc:6a:ea:5b:89:b6:db:64:44:0a:f5:83:63:
                    6e:e0:85:14:ef:40:58:82:89:a2:02:09:f1:03:68:
                    4f:fb:12:44:cc:e2:8a:88:38:0f:11:a5:a0:ae:00:
                    15:a5:01:a4:97:db:76:ba:cb:1f:c1:04:21:ce:38:
                    73:78:57:87:06:c2:f1:07:66:2d:e8:31:38:73:dc:
                    6a:24:81:4b:f2:59:cd:96:4f:f2:94:d1:b4:90:6c:
                    0e:aa:fb:65:af:62:ec:22:66:27:0b:24:da:19:85:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:04:2B:E9:F1:72:F6:12:A0:F8:E0:99:09:8F:85:D2:5D:B1:35:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e4b651c2-3505-346d-9954-0b09a8d445d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:320::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ed:65:da:e3:c0:39:46:20:f2:5b:2f:08:69:b4:3b:3b:5a:
         46:ba:a0:c4:74:11:cf:2c:25:85:0d:b0:24:51:c3:c5:46:a1:
         b0:d2:e6:c1:c6:09:1c:18:a1:58:5b:49:e4:f0:02:a7:70:1a:
         00:5d:05:ce:83:b7:39:04:a0:a5:b9:e7:4b:da:78:18:23:fe:
         5e:89:84:f3:d8:79:42:79:44:9e:ee:c4:b7:54:b0:98:f4:e5:
         a2:70:69:ab:60:82:a9:a5:8a:82:fe:f6:57:8b:d6:ea:16:98:
         de:58:63:e9:54:da:3e:6c:c6:27:c5:f8:9b:66:8e:43:76:ba:
         98:14:c4:a7:c2:ec:e4:20:74:ac:5a:9f:e2:a8:8d:8b:70:a6:
         da:a9:cf:3a:89:7b:da:df:dc:d5:2b:2a:d0:88:7d:cd:22:6c:
         98:82:18:4a:e7:5a:e3:c9:49:c0:50:68:7c:9a:3e:ff:2c:44:
         61:a6:a0:cc:54:a5:71:85:6f:79:e5:b7:59:ae:05:b1:bc:c8:
         5a:56:e5:ed:61:46:9a:88:b3:84:c6:4c:ca:7f:47:5b:78:cd:
         d3:a5:7a:d2:17:9c:a8:08:3a:b1:5a:73:6e:b8:2f:e8:ea:d6:
         21:79:16:4c:c9:17:da:5e:84:c4:f5:e0:df:30:de:39:b8:f7:
         48:20:b9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:25:51 2025 by rpki-client