Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e00751d9-4a22-309d-a1b7-daa7a75d3773.roa
File:                     e00751d9-4a22-309d-a1b7-daa7a75d3773.roa (raw, json)
Hash identifier:          cC7V1KD1BRorsOpr5zdgIYvFxdmc5wwbB4ON8U45GhM=
Subject key identifier:   E4:52:53:86:F6:B4:EB:93:EE:7C:09:C2:F5:AF:57:9E:42:16:E5:F7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A920636343669331B172E2100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e00751d9-4a22-309d-a1b7-daa7a75d3773.roa
Signing time:             Sat 19 Jul 2025 13:01:04 +0000
ROA not before:           Sat 19 Jul 2025 13:01:04 +0000
ROA not after:            Fri 17 Oct 2025 13:01:04 +0000
asID:                     393559
IP address blocks:        2001:470:3cf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:92:06:36:34:36:69:33:1b:17:2e:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 19 13:01:04 2025 GMT
            Not After : Oct 17 13:01:04 2025 GMT
        Subject: CN=117ed04c-2f17-4c92-9717-6a49e2d6a242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:01:5b:4c:ba:c4:3e:61:22:7d:8a:12:b5:
                    9d:38:fd:e1:66:f3:8f:21:5a:52:a3:77:07:f7:21:
                    1a:c5:0c:5c:25:00:83:85:e0:f8:28:3e:91:10:00:
                    24:60:c0:2f:c3:7c:99:59:c0:fb:30:f1:2f:5c:ad:
                    ed:c9:c8:5a:1f:78:b0:05:e0:98:23:e2:5d:09:f5:
                    f1:f9:79:84:b6:15:cd:c3:84:1e:40:b1:fd:91:35:
                    57:c4:f4:d1:ba:63:61:ba:d2:19:cb:ca:c4:c6:b2:
                    5a:8f:6f:82:fa:44:86:c3:bc:43:17:50:d2:5d:86:
                    ce:b4:84:50:50:99:84:d8:5d:ea:cb:a4:5f:44:b5:
                    77:b3:28:cb:7b:05:14:9b:3a:44:52:dc:07:fc:ed:
                    08:a9:1c:ff:f6:35:1f:09:e6:52:a5:21:0b:72:8b:
                    c9:f9:e3:7c:1f:0d:88:d9:8a:a5:ef:63:02:0c:b5:
                    f3:76:db:ec:cd:07:df:4c:29:4a:b1:3a:63:48:97:
                    98:52:96:69:f1:a6:60:f8:c9:de:26:d5:ca:f9:66:
                    19:63:48:50:97:1f:22:ff:90:53:29:32:98:11:34:
                    83:c1:f5:96:8b:1c:07:1f:19:dc:9a:a0:40:9e:f6:
                    ee:85:49:c9:e4:c7:fa:91:51:34:19:e0:9e:24:c2:
                    b6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:52:53:86:F6:B4:EB:93:EE:7C:09:C2:F5:AF:57:9E:42:16:E5:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e00751d9-4a22-309d-a1b7-daa7a75d3773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3cf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2b:a8:49:56:50:7a:cb:42:28:53:2d:98:a2:80:bf:fb:a1:
         74:fe:c3:31:d1:ed:41:75:a8:02:98:ed:e6:18:39:20:9c:57:
         70:25:03:94:cf:a7:d8:dc:1e:ac:1b:5d:f9:06:a6:62:e0:6e:
         19:11:85:f9:72:f8:99:c2:04:95:da:0e:e6:40:b6:ce:9c:bc:
         d2:e8:34:9d:0f:7c:38:d0:4e:ad:d6:c0:ed:59:f7:c2:0d:32:
         92:3a:9a:3f:eb:08:90:d6:d8:7a:aa:70:db:1b:6c:25:2a:8d:
         0e:1d:08:a1:0e:8e:8b:c5:ac:17:3c:f0:fe:ad:c3:3c:47:77:
         68:35:bd:a9:7f:ac:6e:9b:63:06:b4:28:dd:6b:f1:83:38:7a:
         28:c8:50:cf:b2:02:f8:99:b8:3e:8c:eb:53:57:f9:11:00:a1:
         18:9b:a7:2f:02:29:89:a2:be:11:9f:bc:73:14:2e:fe:6c:10:
         2c:e2:05:49:34:b9:ad:4a:d9:7c:e0:85:69:cf:6a:71:cb:f8:
         0e:49:3b:3e:61:26:ef:19:0e:6f:9f:e9:bd:39:56:4b:97:e5:
         4c:c2:08:b0:ea:af:35:2d:c0:03:58:9c:0d:36:42:85:e1:02:
         93:c4:6c:33:70:6a:a8:ac:cd:52:94:5f:d8:7e:6f:43:8a:cf:
         b5:b5:2e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 05:17:18 2025 by rpki-client