Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0da4feca-118b-3171-aba5-b6769d45ee02.roa
File:                     0da4feca-118b-3171-aba5-b6769d45ee02.roa (raw, json)
Hash identifier:          gz5C+iiKPJn65/6dwInjJMowSbmb9fk2dEZemjdizfw=
Subject key identifier:   06:73:D6:41:53:F4:C8:E4:54:06:DF:CE:95:2B:A5:16:6B:5F:52:58
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AEF9A7786ACA08D64ADECF5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0da4feca-118b-3171-aba5-b6769d45ee02.roa
Signing time:             Fri 22 Aug 2025 01:30:11 +0000
ROA not before:           Fri 22 Aug 2025 01:30:11 +0000
ROA not after:            Thu 20 Nov 2025 02:30:11 +0000
asID:                     201754
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:9a:77:86:ac:a0:8d:64:ad:ec:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 22 01:30:11 2025 GMT
            Not After : Nov 20 02:30:11 2025 GMT
        Subject: CN=8a1ecc63-0beb-4cf4-9507-0a671456bf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:32:ef:fc:f8:b7:c7:ce:a9:fb:f0:33:6d:6f:
                    1f:46:4f:3e:d5:6c:bc:41:33:7b:24:6c:d7:0b:46:
                    67:cd:67:38:78:4d:63:f7:32:a0:3f:c0:5a:d1:1c:
                    33:b6:1f:4a:94:b4:64:ff:37:1e:83:3a:82:d7:09:
                    ea:0f:38:bb:eb:5e:1a:b9:e0:ad:0d:d6:04:98:59:
                    e8:ba:5f:b9:ad:69:4c:a1:ae:30:cd:29:76:99:7b:
                    13:c4:ab:5f:8e:d7:cf:37:12:1a:a8:f4:d1:ca:c3:
                    45:67:c2:5b:e4:09:e5:b5:64:d2:8e:e4:31:58:ab:
                    1b:46:74:04:d5:f9:9f:d7:c3:96:5c:de:64:f4:32:
                    cf:3f:63:f9:e7:f0:76:7f:d7:a1:dc:66:a4:70:5f:
                    0e:39:1e:9e:dc:41:ff:83:58:1e:f2:4d:46:81:bc:
                    e6:85:40:e8:d9:97:4e:86:b4:09:e8:25:2a:ea:c4:
                    0d:21:90:40:40:e8:27:6c:09:7a:b0:3f:97:15:a4:
                    17:56:eb:6c:81:f8:bc:56:e9:28:67:ed:fa:b2:42:
                    5d:d9:c4:cc:d4:bd:8d:95:ab:db:d0:e3:7c:8e:f5:
                    0d:05:dc:24:3b:af:02:3b:10:7e:5c:c7:91:0d:8c:
                    f5:c9:34:51:e9:b1:25:f2:c1:22:83:36:d2:cd:9a:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:73:D6:41:53:F4:C8:E4:54:06:DF:CE:95:2B:A5:16:6B:5F:52:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0da4feca-118b-3171-aba5-b6769d45ee02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:70:08:d9:5e:be:0d:26:14:7a:d9:ff:3d:49:53:08:25:e4:
         17:00:3f:d7:63:46:af:0d:92:cf:b1:9b:f8:bb:dc:5b:1c:e2:
         07:0d:c1:23:b2:cf:ca:1c:90:da:3b:d5:c0:30:6b:8c:d2:6c:
         79:7a:fc:73:9c:4b:44:39:dd:2c:44:79:6d:f2:ca:c4:d2:c4:
         9d:d1:12:43:4f:f3:01:4b:b6:ad:04:92:cb:87:2f:57:b1:3f:
         3b:3c:db:22:65:8e:5d:f9:39:3d:50:2a:62:f9:b6:35:df:ef:
         4f:3a:8e:81:57:c1:c0:69:c9:0d:cb:9e:d2:73:7d:6b:ca:28:
         09:14:5c:a6:79:41:17:53:98:f7:10:8e:7c:5c:6f:9b:06:32:
         f3:cf:05:96:dd:30:73:26:c6:bc:e1:56:5a:88:7c:48:50:53:
         68:e7:6c:c5:a3:fd:30:f9:e3:c0:6a:af:2f:ab:1b:80:c4:13:
         c7:cd:b3:0e:88:55:12:34:34:dc:ad:56:5d:03:5e:85:cd:93:
         f4:a7:95:21:88:11:fb:9d:70:19:75:46:ed:dd:a1:f4:e4:e0:
         da:75:62:47:87:f6:6d:8f:6c:fb:24:be:fb:25:52:d5:05:9b:
         f9:02:cc:10:86:fd:52:2d:b4:cc:58:7b:a3:f8:ea:4b:df:a2:
         7a:4d:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:20 2025 by rpki-client