Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f021a2c2-4428-3702-aa8c-1127cc5423b6.roa
File:                     f021a2c2-4428-3702-aa8c-1127cc5423b6.roa (raw, json)
Hash identifier:          wB3+qMAIt8k2TTZZz2pCp80vm6vuuJOTmstygKTQ8ZI=
Subject key identifier:   50:03:34:D7:61:EF:CD:19:DD:AB:89:6A:31:0D:1D:38:0A:85:A7:1C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A61399688189E4CAD2E9B0800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f021a2c2-4428-3702-aa8c-1127cc5423b6.roa
Signing time:             Wed 02 Jul 2025 01:30:12 +0000
ROA not before:           Wed 02 Jul 2025 01:30:12 +0000
ROA not after:            Tue 30 Sep 2025 01:30:12 +0000
asID:                     36360
IP address blocks:        2001:470:3d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:39:96:88:18:9e:4c:ad:2e:9b:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  2 01:30:12 2025 GMT
            Not After : Sep 30 01:30:12 2025 GMT
        Subject: CN=410eb1c8-590f-4702-bc73-7a16af6a018f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:4e:b2:6b:35:2d:1f:19:5b:f1:fd:08:63:
                    1c:13:4b:be:f4:8f:22:87:07:87:2b:03:e8:24:09:
                    19:a7:9d:ce:e3:40:cd:19:22:cb:ec:3f:66:cc:31:
                    c3:ba:ac:a2:e1:23:a5:ca:78:7f:58:e7:d0:8b:c4:
                    20:b7:08:bd:b0:1e:42:93:a8:1a:85:59:44:2a:4c:
                    90:5c:63:9a:fd:2f:3b:57:e0:ce:30:99:54:76:49:
                    1d:e1:d3:fb:c0:a9:2c:59:cb:23:70:c1:11:3a:a1:
                    2c:d0:d0:b6:dc:fb:dc:c2:f5:ea:2c:4d:2a:9f:79:
                    6e:bd:4e:07:13:e0:26:2f:ec:c2:70:a2:1c:0c:9d:
                    dd:89:0e:f8:ff:53:55:0d:f3:da:0e:d6:ac:4f:fa:
                    39:2e:16:f6:84:ae:6c:3b:b0:2d:f4:92:42:49:31:
                    59:9b:6b:19:82:e1:f4:ca:01:c0:5c:18:aa:94:6a:
                    32:90:54:1d:1f:a2:6d:2d:b3:d4:3b:64:39:3b:ba:
                    bb:87:aa:77:54:d9:20:d9:51:70:4f:80:4d:67:73:
                    41:b1:e6:d8:63:82:29:42:36:1a:87:ba:47:bf:37:
                    c8:6d:6b:7c:e2:ec:fb:7e:e3:cb:51:bf:cb:c5:e3:
                    b9:b2:70:2b:d2:64:76:62:5f:ec:a5:1f:2b:33:77:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:03:34:D7:61:EF:CD:19:DD:AB:89:6A:31:0D:1D:38:0A:85:A7:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f021a2c2-4428-3702-aa8c-1127cc5423b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f0:05:07:96:7a:f0:6d:00:6b:6d:00:54:3b:e7:90:c7:93:
         8d:57:a4:23:6b:94:60:29:0f:2c:d5:f4:fa:52:ef:5a:ed:f8:
         92:b0:34:66:5b:06:60:33:60:fa:cd:79:a4:70:5e:b7:bd:67:
         e4:65:6e:32:02:22:41:08:e9:fb:7f:ba:59:6a:eb:99:f4:4d:
         2c:87:f9:74:62:12:44:34:ab:39:90:23:00:30:b4:95:67:a9:
         be:e1:76:e3:e0:12:c4:7d:26:21:b3:9c:f0:2f:23:25:98:8d:
         c6:fa:c5:b8:66:78:c4:a5:15:77:b8:eb:24:5d:77:be:b4:68:
         18:16:bd:80:f3:20:9e:e5:d7:08:6d:b9:3b:f3:35:ed:53:e9:
         cd:7b:25:ce:c9:64:5c:3f:76:31:18:7a:be:58:60:db:c3:ce:
         69:50:4a:ad:5f:d0:6f:ac:c2:9a:7f:73:df:80:6b:b0:5c:68:
         68:5c:96:b4:63:9d:91:75:48:9e:c1:83:cf:da:fb:9f:e6:40:
         5f:88:9c:9e:75:fe:4c:f1:35:d6:e5:79:28:b6:35:f9:7e:25:
         c7:b3:66:3e:ca:53:81:49:d2:79:c9:2a:44:19:91:c8:84:ec:
         ef:9e:b8:db:48:9e:fc:d1:08:88:0a:10:90:4e:9c:37:d4:37:
         9b:32:81:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:00:35 2025 by rpki-client