Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2555fb4-9a91-3bfd-8389-c245a33ea09e.roa
File:                     a2555fb4-9a91-3bfd-8389-c245a33ea09e.roa (raw, json)
Hash identifier:          322m/5lldP8mzkDY1k4cLbai44eG0nsPSxQSQdosa/s=
Subject key identifier:   14:F7:BE:30:32:CB:B2:CE:18:51:9B:E2:16:30:7E:05:EA:AE:D0:46
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A65699757C796675E74D09D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2555fb4-9a91-3bfd-8389-c245a33ea09e.roa
Signing time:             Thu 03 Jul 2025 13:30:10 +0000
ROA not before:           Thu 03 Jul 2025 13:30:10 +0000
ROA not after:            Wed 01 Oct 2025 13:30:10 +0000
asID:                     23673
IP address blocks:        2001:470:3fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:69:97:57:c7:96:67:5e:74:d0:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  3 13:30:10 2025 GMT
            Not After : Oct  1 13:30:10 2025 GMT
        Subject: CN=7abc74d8-de8e-4fa6-8a2e-643b611f9200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5e:48:85:88:22:55:60:6c:ce:6f:c8:33:e5:
                    2a:19:2a:6c:bf:a8:5d:24:96:50:7e:24:4b:51:70:
                    08:19:ff:0f:69:c3:70:15:d9:0a:67:b8:2f:bd:d7:
                    64:84:9f:fe:b5:ff:70:d2:cf:d1:af:5d:01:e1:c5:
                    9b:e1:8b:9d:7b:89:a1:ab:a5:3c:c8:50:05:88:35:
                    5d:76:fe:a4:fc:43:81:d0:79:39:ec:f7:26:3d:c9:
                    78:0b:c1:6d:b2:8e:0b:12:dc:88:7c:7d:36:b8:0e:
                    87:6a:0c:c7:dd:b6:d9:40:ae:3f:a2:be:7b:77:e0:
                    28:38:7b:8d:4b:c7:1d:37:fc:b8:c3:77:fa:46:f4:
                    eb:b9:d6:ea:5d:d3:18:51:28:da:c5:0d:b2:b2:52:
                    f7:13:15:c7:c1:b3:3d:68:40:b2:21:3b:22:2b:38:
                    6a:d9:db:32:dd:05:25:93:b7:fe:28:90:a8:16:52:
                    97:f4:0b:e1:76:2c:3c:4e:50:d4:4d:a6:95:8d:6e:
                    65:72:1c:c6:84:5c:e5:f7:31:c1:83:93:f6:4e:76:
                    15:79:97:b8:d1:13:94:71:94:f9:f1:04:c5:8d:5a:
                    f9:f0:0c:c2:21:11:94:40:d9:6e:85:3c:75:60:41:
                    b7:1d:f0:fc:6a:21:e0:f5:69:8f:6f:e0:c6:b0:05:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F7:BE:30:32:CB:B2:CE:18:51:9B:E2:16:30:7E:05:EA:AE:D0:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2555fb4-9a91-3bfd-8389-c245a33ea09e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:06:92:e5:8a:8e:f6:3d:84:33:7f:d7:8c:e0:17:e7:59:
         8d:ef:b4:32:78:4c:c0:10:7e:ea:37:b2:4b:75:90:b4:38:2a:
         8b:60:c6:38:25:aa:8a:37:48:bb:15:58:73:dc:0b:c2:fe:45:
         ed:eb:bc:c3:1d:83:2d:7a:b0:26:d2:5f:94:1a:66:c8:32:65:
         45:bc:16:ea:c2:1a:ba:b2:cf:09:5a:93:4a:5a:73:22:23:a8:
         ea:7c:ef:b0:43:11:21:90:e0:7a:04:eb:72:79:d1:c2:88:0f:
         fe:5d:65:db:73:b7:ad:63:1f:4a:1d:b9:a1:59:bf:1f:be:d6:
         f4:45:0f:85:ff:fb:64:0c:bf:b9:4c:e7:e5:6d:6d:c5:5e:a7:
         69:9e:09:c9:02:c8:2a:08:1e:69:ef:96:16:1b:f8:69:88:f5:
         84:98:7f:9b:35:26:26:70:ab:07:fb:d7:38:a3:23:a2:aa:11:
         a9:5a:64:f3:71:e3:53:8b:7d:b0:72:73:34:62:cb:19:51:82:
         8f:e4:65:a0:60:8e:3b:60:46:72:18:3a:82:d6:bd:ed:cf:83:
         1f:a2:cb:0b:af:30:ad:08:1f:20:ef:07:87:20:9f:b0:a5:46:
         f8:d6:88:0b:87:ca:9e:e2:b7:d2:fe:10:0e:92:57:e9:63:9c:
         a1:38:22:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 05:19:25 2025 by rpki-client