Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26e0fa97-271c-3323-a7e2-a35d479057da.roa
File:                     26e0fa97-271c-3323-a7e2-a35d479057da.roa (raw, json)
Hash identifier:          g+KljWV2BqTeHL0xVORHLnr47vGBiHwQIPRLNzGBq3o=
Subject key identifier:   C5:C5:73:70:CD:B8:1F:FB:AE:E2:95:C5:64:E0:96:12:83:B5:0A:FB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A89A6166DD458B7497A8A9F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26e0fa97-271c-3323-a7e2-a35d479057da.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     206735
IP address blocks:        2001:470:155::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:16:6d:d4:58:b7:49:7a:8a:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=d8df3dc5-e1ce-43b0-95da-ed405ca6cca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3d:42:5d:d5:3e:9a:6b:ea:7e:eb:db:44:23:
                    91:86:0b:5b:5d:17:1b:0e:71:df:dc:3b:19:3a:9e:
                    a1:4d:11:f7:b5:33:7c:33:31:38:18:ff:f6:0f:c9:
                    19:7d:53:ce:f1:58:13:33:3c:6a:1d:cd:89:9b:f2:
                    28:4b:b4:23:cb:fc:15:d7:50:fa:19:4e:b1:e8:2d:
                    35:e2:67:6c:80:98:d3:95:e3:bd:fd:8c:8a:f1:4c:
                    f2:2d:dc:a5:7b:f3:a7:7e:0b:c0:2f:07:f0:fe:d1:
                    bc:2a:a2:60:26:82:47:41:75:69:1b:aa:fe:28:6f:
                    6f:59:09:7d:d0:34:6b:74:10:fe:73:b5:2d:80:d7:
                    7b:0b:6d:ec:44:7f:c7:69:a9:c3:14:f9:d2:5a:a8:
                    4f:cf:19:89:26:ac:5b:da:b8:ba:cc:dd:47:68:65:
                    99:78:44:86:1d:d9:6b:c3:a5:69:27:9f:8d:d7:df:
                    1a:3f:a4:41:4f:9e:b5:b9:c1:fa:28:8c:06:05:59:
                    9e:61:5e:db:60:77:b9:02:81:be:96:1b:e4:b5:88:
                    ae:e1:52:f6:57:07:d1:1f:01:da:74:5b:e5:b1:23:
                    12:c6:03:c2:f8:0a:6e:c0:83:80:4f:4b:7e:3e:b7:
                    69:7a:9f:ef:06:da:3c:f4:d9:9d:ff:da:d2:77:6a:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C5:73:70:CD:B8:1F:FB:AE:E2:95:C5:64:E0:96:12:83:B5:0A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26e0fa97-271c-3323-a7e2-a35d479057da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:155::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f4:ff:c8:d4:ae:19:93:e1:41:93:96:0c:3f:73:dd:5f:d5:
         e2:7f:39:60:30:9b:cb:b4:41:72:61:cb:4b:5c:e3:fb:dc:aa:
         63:c3:ff:64:c2:76:58:e7:5f:2c:72:f2:74:12:85:40:20:ca:
         6a:7c:49:17:47:6e:58:fa:3c:93:5a:43:24:54:f3:60:15:b0:
         e2:38:21:48:3d:0d:b5:ff:38:37:4e:16:3b:5f:76:d7:ac:05:
         ee:4e:fa:40:4f:86:c0:d6:1c:78:b7:12:5d:d5:e1:5c:3a:08:
         ad:6d:a4:ef:e4:75:f0:e6:ab:8f:b8:9e:24:b2:74:80:b9:16:
         36:cf:aa:4a:7c:99:20:ed:65:1f:7e:ba:8c:a0:86:65:c7:c0:
         f5:87:4c:b2:09:0a:11:18:2c:04:dc:5f:6f:60:53:21:72:fc:
         51:65:70:86:2f:c1:91:64:d7:a1:b1:41:3a:38:c4:7c:36:6f:
         d9:1c:10:ee:fd:87:f0:36:b7:39:0c:0b:7d:e9:75:8e:f2:e0:
         bb:d5:24:17:66:ea:97:36:1f:c5:c5:f5:91:e4:de:f4:b4:57:
         f6:9a:e0:7f:fd:c5:ed:69:ed:bf:45:61:82:40:c9:73:20:da:
         68:a7:de:09:f3:f3:b7:26:ed:50:53:c6:e3:ec:7f:3d:7b:15:
         97:05:8d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:02 2025 by rpki-client