Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d494d5b-2611-3e3d-a138-a33e9251efc9.roa
File:                     4d494d5b-2611-3e3d-a138-a33e9251efc9.roa (raw, json)
Hash identifier:          zECjc3IFVtTmOJenXKmH60+qiziz8q3PpIgoB1JwLN4=
Subject key identifier:   A7:3C:46:DE:55:FE:70:5C:A0:31:76:7D:D0:AE:E4:70:92:30:BB:4D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A7085E88E62EFAF3D5EC06E40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d494d5b-2611-3e3d-a138-a33e9251efc9.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     329510
IP address blocks:        2001:470:445::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:e8:8e:62:ef:af:3d:5e:c0:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=fe868479-d1e1-4d62-906c-2849a9e9e38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:40:a8:3b:24:19:bb:cc:48:c6:65:e7:a6:
                    0e:9c:cd:c8:4b:25:a2:a5:fb:f3:46:1e:23:ce:c9:
                    d8:d9:ae:65:f7:ad:63:e0:ab:53:6c:9b:19:b9:1d:
                    f4:36:b8:42:12:8b:d9:1c:f3:b8:ca:c7:48:5d:c9:
                    e7:83:f9:ef:e2:bd:62:bc:39:98:ca:f1:91:13:89:
                    1e:88:1f:c1:49:c7:95:04:f8:82:c5:42:76:4f:97:
                    3b:3c:0e:17:8e:bd:b9:cb:e7:71:ce:d4:4c:41:fd:
                    63:8c:ae:f9:82:8a:88:0e:1f:50:74:a8:c3:ea:25:
                    ab:f9:d8:10:0a:3a:1a:02:f2:b8:b9:2a:39:73:7f:
                    1d:39:41:6e:90:99:ba:75:26:8b:c9:1e:2b:7c:3a:
                    ed:9c:eb:8f:a0:49:5b:b5:60:08:8f:ab:b4:d2:fd:
                    39:73:90:22:40:0c:7b:1e:c6:92:62:a8:0e:00:fd:
                    b7:f7:90:e2:af:08:21:56:20:4b:50:89:63:bd:bf:
                    a7:51:ae:60:e3:61:46:5c:94:16:bd:2f:78:b6:3a:
                    54:3a:cd:6f:d0:4f:b9:e9:7f:04:97:d0:e6:49:83:
                    4c:26:82:19:d9:4d:aa:64:73:9c:08:46:d4:ca:aa:
                    bd:25:01:7d:66:fe:ff:af:46:fa:41:dc:5d:03:8e:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3C:46:DE:55:FE:70:5C:A0:31:76:7D:D0:AE:E4:70:92:30:BB:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d494d5b-2611-3e3d-a138-a33e9251efc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:445::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3e:3e:00:ef:27:4b:f5:15:3e:00:65:12:f6:38:80:e7:35:
         f6:07:ed:1e:4d:8b:62:4f:db:6d:6e:62:fb:71:da:fb:df:3e:
         2e:64:58:bd:b7:d6:06:88:27:e7:f5:b9:22:d2:07:b5:8f:26:
         f1:29:83:0e:88:3c:de:5a:1c:37:ac:be:f4:5d:de:c9:7e:10:
         0c:02:04:d0:84:73:15:ab:a2:34:58:0c:08:e2:44:57:85:e6:
         47:02:33:60:b2:bc:48:b2:8e:a9:77:9c:48:34:48:d6:0d:f4:
         d1:35:6a:04:8b:6d:bb:ff:18:56:42:5b:bf:65:9d:37:1c:a3:
         fb:55:dd:3c:0f:fb:6b:6b:4c:82:37:09:d3:15:a3:e9:b3:25:
         34:3e:b5:76:16:27:d1:ca:0f:ed:f6:fb:5e:ed:3f:c8:bb:2d:
         d8:2b:31:0b:e0:ea:11:d5:dd:70:90:ed:b5:66:c7:32:b7:0e:
         ce:a5:2e:3c:00:cf:78:df:42:74:ab:f0:e3:09:34:a9:1c:d8:
         dc:06:8d:29:ab:d8:20:0f:95:93:4b:cd:c8:bf:23:09:ed:e1:
         a9:e0:e3:21:51:79:05:9c:d9:b2:d1:90:4e:e2:24:f3:56:99:
         4a:0b:f9:fb:2a:f4:c5:b0:c7:bd:98:73:aa:bc:c9:b2:8d:a4:
         79:56:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 05:19:25 2025 by rpki-client