Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/950420fc-10b0-3aed-8db8-f3ebf002cb06.roa
File:                     950420fc-10b0-3aed-8db8-f3ebf002cb06.roa (raw, json)
Hash identifier:          BwvuCUM2Fuhzik8ss1DzxjSd8ysipkWJXETwlLZRzE8=
Subject key identifier:   89:F3:92:26:48:7F:48:74:CD:68:83:98:E5:60:AC:DF:15:55:0F:5B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A7BB0A48AB872EDB9A540F100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/950420fc-10b0-3aed-8db8-f3ebf002cb06.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     210644
IP address blocks:        2001:470:276::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:a4:8a:b8:72:ed:b9:a5:40:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=619d4b9e-036d-407f-af97-945d8dfb0d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:62:75:be:e0:75:9a:87:a1:dd:d0:a6:d9:
                    7a:99:4e:fa:ef:79:82:d0:84:df:1c:c7:8e:8b:a7:
                    28:0d:c6:03:fc:5f:57:73:a0:b3:cc:6f:35:2f:67:
                    bd:66:d6:d0:98:f6:59:c0:32:17:fd:74:d1:8a:88:
                    50:16:04:d7:1d:b5:e5:2b:eb:42:12:5a:98:b2:db:
                    60:aa:b4:18:64:af:c2:a1:3c:9a:e9:e7:f1:36:a1:
                    8d:e9:2e:84:62:08:82:26:5c:14:d6:3f:f1:7d:1c:
                    f3:1c:32:db:ea:38:a1:0c:17:e1:3f:a7:8b:94:e6:
                    a2:d9:00:8f:8e:42:6d:c6:35:71:fc:b0:c3:80:95:
                    e5:a1:13:7d:ae:66:ad:2c:5a:1d:ae:6d:ab:c9:64:
                    39:45:90:f6:4c:e5:ac:cf:36:f7:9c:67:76:98:b9:
                    61:a4:62:b9:f8:8e:0c:2e:f2:25:10:00:3f:75:bc:
                    96:5b:c8:39:8e:bd:ee:81:9c:8e:4a:ff:ad:4b:0f:
                    31:f7:b8:66:69:b5:d5:8c:bb:87:14:7c:c6:78:a4:
                    49:f4:06:4b:75:05:01:1e:ad:55:2e:fa:40:68:fb:
                    d2:d2:4c:aa:08:4a:0b:05:7d:8a:da:e8:f0:b0:7e:
                    6e:31:cf:d9:c4:1e:28:84:dd:55:3b:4e:9a:c4:30:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F3:92:26:48:7F:48:74:CD:68:83:98:E5:60:AC:DF:15:55:0F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/950420fc-10b0-3aed-8db8-f3ebf002cb06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:276::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:98:f8:65:00:69:31:f4:9c:85:28:e3:64:9f:73:e4:94:27:
         6c:dc:b6:db:ab:b2:5f:33:05:52:1c:e4:c1:60:a9:b5:c6:84:
         34:91:21:5f:cb:a2:19:20:77:77:81:87:98:f9:a1:9d:5f:ac:
         3c:06:9e:4d:a7:16:7c:1d:8d:5c:f6:78:5a:4a:95:5e:d8:74:
         99:ae:74:2b:9c:87:29:52:5d:db:ab:12:e1:83:ec:a5:43:63:
         f9:a7:a1:7e:10:97:1b:47:3c:3f:f0:4b:a4:de:4e:74:23:69:
         89:bb:02:8d:0f:55:d9:8c:da:72:5a:78:f4:7c:ab:00:3a:59:
         64:bf:e8:f5:10:f1:29:e1:c1:65:58:77:48:8b:aa:71:70:d2:
         0d:89:c0:02:db:e1:81:ec:6f:1c:e6:c9:43:ef:19:87:d0:15:
         80:a6:f7:6b:7a:c6:6b:ba:4f:24:85:f3:0b:f1:d3:76:8d:42:
         57:01:6c:41:70:19:47:aa:5f:c8:d7:16:78:aa:e8:09:11:34:
         7b:23:3a:93:2c:0c:e5:ff:b6:8b:cb:a1:c1:5f:4d:db:b0:34:
         6f:7f:89:de:5c:4d:44:6e:2a:07:a6:b7:d8:ff:c7:b5:d5:17:
         47:f8:71:4a:bd:18:b1:da:0a:f9:6d:53:42:0f:b7:ea:c4:ba:
         91:40:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 05:20:32 2025 by rpki-client