Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/095861cd-9f04-3417-84d1-90bb9b5a9b81.roa
File:                     095861cd-9f04-3417-84d1-90bb9b5a9b81.roa (raw, json)
Hash identifier:          7HKo+rbkPxDQ5Gj2swJX7v6sdyKEZExox5V57L2aNxM=
Subject key identifier:   3E:4D:D0:F0:F4:7E:1A:65:21:3A:84:C5:C2:C9:EF:54:C8:4A:55:CC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849EA938013EAB1DD8CD8C33800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/095861cd-9f04-3417-84d1-90bb9b5a9b81.roa
Signing time:             Tue 20 May 2025 13:30:10 +0000
ROA not before:           Tue 20 May 2025 13:30:10 +0000
ROA not after:            Mon 18 Aug 2025 13:30:10 +0000
asID:                     5726
IP address blocks:        2001:470:468::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:93:80:13:ea:b1:dd:8c:d8:c3:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 20 13:30:10 2025 GMT
            Not After : Aug 18 13:30:10 2025 GMT
        Subject: CN=a1bbb60f-92f5-4b2b-841a-df584317363c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:ed:69:e8:bf:57:9f:8d:6a:c8:1b:fe:4d:
                    e7:39:2e:de:6a:15:ef:36:1c:09:de:96:ed:ac:e8:
                    df:18:ff:cb:0d:ad:18:1c:05:1a:52:36:8a:81:e6:
                    50:54:06:81:f5:0b:f4:30:30:4a:d3:2d:4e:1e:f3:
                    7b:9c:45:88:50:dc:70:eb:d7:61:d1:70:e3:9e:48:
                    88:72:6f:02:ea:05:bb:0e:a5:a9:3c:53:85:8f:6d:
                    f9:e3:a6:c3:32:83:71:f5:ec:f0:a5:aa:26:56:5b:
                    81:2f:af:5d:43:c2:5d:01:46:f5:25:95:57:c3:d1:
                    78:5e:f2:d7:03:62:3d:ad:95:f4:6e:69:4b:f7:52:
                    1e:9d:a2:d6:5a:f1:f4:cf:ca:95:42:d6:c5:8b:a0:
                    d0:63:43:ac:64:6e:29:c9:7e:ce:ef:88:a4:5b:94:
                    1a:f1:b9:c6:da:70:a9:56:6f:ed:33:17:aa:c8:96:
                    71:8f:62:b4:6a:28:7a:54:a3:8b:31:76:4d:7e:79:
                    0e:15:8b:20:8f:bf:34:fa:7d:31:77:6c:e6:d7:a1:
                    43:91:b0:42:c2:0c:93:fb:b1:69:02:8b:dd:3f:30:
                    eb:3f:7b:e6:27:95:cf:02:99:b5:ed:62:64:d0:05:
                    f8:6e:eb:1d:9c:cd:92:44:a3:da:4c:57:4a:53:2c:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4D:D0:F0:F4:7E:1A:65:21:3A:84:C5:C2:C9:EF:54:C8:4A:55:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/095861cd-9f04-3417-84d1-90bb9b5a9b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:468::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:04:d6:2c:18:20:5b:ae:36:5e:d9:17:2d:d2:6d:7b:a6:63:
         bc:56:1d:dd:14:dd:0d:68:0d:7f:6c:a4:0d:72:d1:94:f4:49:
         d8:a2:5f:d5:c2:13:67:b0:b1:9c:31:99:86:9e:b8:4d:14:77:
         fe:fc:ba:21:39:37:14:1f:7f:ff:e9:f4:97:0d:5d:c3:7d:2d:
         2e:c2:c7:43:f3:e3:ea:81:c5:81:2a:25:d0:c9:e1:38:aa:36:
         b0:b8:9f:b7:b1:0c:ef:ea:7e:e3:34:c1:1c:d2:de:7e:c1:2f:
         61:76:84:f1:05:9c:93:b6:ed:6c:48:d7:e6:e8:71:80:78:06:
         52:31:34:ae:fd:cf:f0:07:5e:7c:b0:e0:8c:a6:7c:51:cf:3b:
         1b:2d:60:ad:00:18:4c:b8:71:8f:da:8e:61:04:a8:ce:62:ce:
         11:1f:ce:aa:6e:b3:e3:cd:11:a4:7a:a1:5e:de:a4:de:b2:0d:
         75:b3:4d:c9:9f:e5:fb:0a:3d:df:7b:84:dd:d5:65:ae:d7:b1:
         46:76:25:2b:0a:e5:3f:c7:1a:76:b0:3c:af:08:5d:7d:9b:9a:
         b6:84:f8:9c:db:a4:f3:da:e9:a0:d9:b4:da:4c:8a:da:67:b7:
         cc:73:f3:ca:44:1d:83:9b:58:63:83:2a:28:06:23:b7:9c:74:
         cd:64:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:27:07 2025 by rpki-client