Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1bcb580-9dda-3d8e-894a-e45b5b7878bf.roa
File:                     b1bcb580-9dda-3d8e-894a-e45b5b7878bf.roa (raw, json)
Hash identifier:          BkoOjoVS9sDIoE44/rNZlWoQ0XfJSRrhDZgDsevpGyc=
Subject key identifier:   4E:DB:7D:64:3E:7C:D2:8A:CE:2D:89:FE:54:F3:9F:30:0E:40:F3:5D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A66C095653A44E2A938F415EC
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1bcb580-9dda-3d8e-894a-e45b5b7878bf.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     138995
IP address blocks:        2001:470:3fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:95:65:3a:44:e2:a9:38:f4:15:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=b5039fd0-114f-4c1a-be76-9674dc93b827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:98:dc:ff:1e:2a:23:f5:2d:76:37:7e:bf:c8:
                    26:56:1d:24:9a:b3:ce:0f:3c:ab:a7:1f:b8:62:94:
                    0b:19:36:7b:9e:71:fc:72:36:ba:c7:ba:77:e2:ef:
                    53:42:42:26:57:23:29:29:d2:3b:23:17:d8:40:6a:
                    53:10:99:56:a4:e7:60:c4:ca:f7:b6:8d:5d:17:36:
                    ae:91:12:aa:23:f0:6e:52:36:61:e4:7e:f6:ee:d5:
                    14:a6:b3:f1:ad:27:1c:d4:69:c6:d5:df:28:d0:6d:
                    94:0e:e1:cb:52:59:e1:74:ed:3e:51:54:f3:d9:8a:
                    42:87:43:cb:9c:46:92:4f:79:2d:de:b1:55:25:0b:
                    00:0a:83:10:c9:80:1c:8c:ec:2a:52:a1:38:ae:2d:
                    33:84:82:79:69:a6:93:b7:ac:db:1e:df:22:11:1a:
                    e6:4b:7a:82:23:39:03:46:5f:f2:11:78:fd:d1:76:
                    a7:db:a9:83:b7:80:e9:5a:10:ff:f3:c7:a6:55:9d:
                    87:c1:35:d5:03:d5:f0:54:7b:7d:32:22:cc:9e:df:
                    1c:ba:72:ca:de:cc:a4:65:d5:0b:27:f1:55:1b:e3:
                    29:a5:16:4e:fd:1b:0e:cc:52:d2:9c:4e:b4:2b:db:
                    ce:95:61:a2:94:7c:74:23:ee:03:99:dc:47:13:a9:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DB:7D:64:3E:7C:D2:8A:CE:2D:89:FE:54:F3:9F:30:0E:40:F3:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1bcb580-9dda-3d8e-894a-e45b5b7878bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:af:11:93:69:92:5d:6e:67:89:2a:c1:f4:00:25:f2:e3:20:
         49:cd:73:dd:be:26:cf:70:4f:d6:20:18:15:29:00:b8:1e:f4:
         61:0d:18:1f:3c:fe:53:69:6f:d8:04:2f:99:2c:89:00:f8:ad:
         36:7f:bd:f6:e4:55:b4:45:5b:94:97:c8:37:9e:46:0c:4d:75:
         e3:0c:2a:8e:fc:ed:fa:a8:cf:3a:13:ae:3c:b9:c3:a1:2d:62:
         c0:6f:0b:21:0c:c2:02:e0:f4:76:d3:bf:d7:94:b4:39:05:01:
         37:65:05:d0:e0:44:af:b6:eb:11:4d:3c:e8:1d:cc:e0:fe:e2:
         e3:20:a3:97:b5:84:41:e6:2e:bf:8b:09:7b:0f:44:0e:f1:6c:
         79:f3:f6:1e:28:b8:d4:8b:b2:8a:97:e9:05:25:01:32:a9:94:
         4b:88:28:19:d7:44:65:c1:86:e2:1a:9f:9c:14:44:f1:7f:7c:
         83:24:c7:ec:68:a4:e0:42:7d:67:a8:4e:ae:b1:58:de:04:d8:
         84:f8:1a:e3:0d:c3:e6:43:9d:7e:77:a6:e7:43:28:d2:dc:ba:
         a4:99:84:1f:7b:e7:5e:12:5e:de:a3:bf:8a:e8:f7:dd:6f:7c:
         8f:23:36:cf:c0:00:e8:bb:5f:8c:08:c7:4d:9f:58:cc:fe:1a:
         91:c3:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 05:20:31 2025 by rpki-client