Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3aefd595-846f-396c-b594-07c14e248ae5.roa
File:                     3aefd595-846f-396c-b594-07c14e248ae5.roa (raw, json)
Hash identifier:          n5YJuZ72NZPFcAXpB7AuuFwlt9hq7RkK1M/GfPFXCq8=
Subject key identifier:   25:9B:51:89:1E:41:D8:E0:52:CA:8C:B9:13:A2:2E:42:B8:24:B8:66
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AE72BB5C93BCFCEF2E4BFDE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3aefd595-846f-396c-b594-07c14e248ae5.roa
Signing time:             Tue 19 Aug 2025 01:00:32 +0000
ROA not before:           Tue 19 Aug 2025 01:00:32 +0000
ROA not after:            Mon 17 Nov 2025 02:00:32 +0000
asID:                     30150
IP address blocks:        2001:470:423::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e7:2b:b5:c9:3b:cf:ce:f2:e4:bf:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 19 01:00:32 2025 GMT
            Not After : Nov 17 02:00:32 2025 GMT
        Subject: CN=18564ba6-39cc-4aab-b9b0-248a6a6b1284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:b5:bf:95:fe:83:aa:0a:c0:60:d5:0e:07:
                    07:1b:bf:e1:f0:aa:f1:d7:33:53:e6:d4:57:af:74:
                    f1:45:a9:01:1d:d5:04:26:fe:8f:a4:07:03:f3:20:
                    ed:00:82:9a:45:52:44:3f:7c:05:c6:6a:63:50:97:
                    0b:40:9f:b6:85:43:e6:5c:f0:ed:33:1e:a1:86:ec:
                    ee:af:06:9d:f0:ad:91:55:17:d5:55:63:00:03:b6:
                    10:c3:68:f2:b5:a7:c7:ab:e6:52:d9:28:1a:80:47:
                    0a:f0:31:0a:9f:9d:ad:89:f4:f8:61:ca:c6:95:67:
                    94:57:36:7c:e1:8c:b1:46:10:73:f7:30:19:f3:56:
                    ce:57:93:5b:07:ff:03:bf:b8:ce:39:49:e1:02:a7:
                    53:b1:2d:05:50:52:79:55:be:a7:a9:c7:49:70:90:
                    0c:86:df:0b:73:64:c3:af:b6:5a:d6:59:09:e3:b4:
                    a7:c7:9c:53:6f:12:47:18:7b:cb:68:58:66:8f:02:
                    7c:f5:a9:d4:17:f3:32:40:16:52:4c:ee:4d:14:aa:
                    ef:22:d3:b8:0a:f9:60:63:f9:16:94:53:be:57:b2:
                    19:96:21:85:7d:92:4d:95:39:97:59:5a:9d:d2:54:
                    33:9b:8d:e0:23:86:73:da:89:4e:8e:5d:55:5e:af:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9B:51:89:1E:41:D8:E0:52:CA:8C:B9:13:A2:2E:42:B8:24:B8:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3aefd595-846f-396c-b594-07c14e248ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:423::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:9d:77:a2:cf:50:a3:69:e8:1f:a7:78:89:2c:86:ad:0c:43:
         cf:8c:4e:6a:05:ed:c6:bc:7d:04:58:1e:46:ec:f8:1f:a0:7d:
         6a:4a:92:53:53:70:1f:0f:0d:b3:01:4a:e4:52:a1:76:21:2a:
         52:1e:69:ed:1a:f1:13:bc:c0:e8:49:1b:4a:7c:a3:ff:3e:f0:
         1b:19:7b:ed:2c:fd:c2:81:fc:c8:82:9a:e8:d0:0f:94:c8:24:
         47:67:b2:a2:15:06:54:0f:58:77:d1:a9:42:42:c3:0c:bb:d6:
         0f:c5:28:aa:5e:b1:cd:87:07:f8:29:a9:de:99:32:53:f4:f9:
         b9:ca:9c:38:2b:6e:6a:5e:48:41:07:c5:49:39:1b:7b:40:3c:
         48:20:92:f9:f7:fc:02:ff:61:27:14:98:ba:aa:6e:25:4c:e6:
         f4:9d:06:0e:2e:0b:ba:20:a4:b6:ce:77:ac:2e:a7:6b:b7:be:
         1d:fc:8f:13:d4:40:98:fa:96:1d:2b:bb:dc:03:8f:10:bf:a1:
         a4:75:51:b7:75:dc:77:a5:ff:71:39:5e:11:c9:c1:23:ff:5d:
         fd:c3:18:d0:53:29:81:f1:d4:36:dc:fa:5a:26:9b:ce:65:f3:
         67:49:8a:66:88:a0:a9:6f:2d:de:a1:2c:83:80:f3:11:3e:4f:
         c6:60:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:23 2025 by rpki-client