Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/464a5ab2-e46a-3547-97cd-de15d28f0a35.roa
File:                     464a5ab2-e46a-3547-97cd-de15d28f0a35.roa (raw, json)
Hash identifier:          APRPdjXNYVj97N8Q5ISZ3VpROfnGzF/hqSdHDY+yEKQ=
Subject key identifier:   4C:11:0E:70:1C:50:A5:B6:35:34:AC:7A:FD:EC:0D:6F:51:2E:2F:CA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A3E45BC2D363F8C14455FC140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/464a5ab2-e46a-3547-97cd-de15d28f0a35.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     54408
IP address blocks:        2001:470:266::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:bc:2d:36:3f:8c:14:45:5f:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=ab0e0889-098e-49f9-ae34-c13dd7db1086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e5:39:e3:55:f3:5e:a5:f0:a7:8c:dd:f9:76:
                    17:5f:8a:29:b8:42:be:ea:78:68:9d:ab:57:2b:e4:
                    8c:35:14:23:34:40:92:3b:95:58:9d:c1:cf:61:5e:
                    62:c4:47:6a:e0:26:ac:71:63:e5:db:fd:47:5d:da:
                    67:1b:e8:af:d3:6f:5b:e2:23:48:b1:03:91:bd:bb:
                    f0:c9:c7:f8:8d:bb:ec:31:c9:be:3a:56:a1:b4:09:
                    2b:18:d2:24:91:59:f8:fc:08:67:ee:26:6e:da:4a:
                    98:8f:18:72:51:6a:65:7b:97:c7:7f:6d:bb:b0:a3:
                    2f:87:11:4e:3e:fb:8d:d8:2b:fb:20:1c:5e:bb:e1:
                    ea:bf:f8:9c:e5:20:ea:d4:03:21:6d:95:b1:cf:8a:
                    d1:ab:34:67:4a:2f:ba:97:5f:85:4f:0c:4c:8d:04:
                    7f:4c:69:7f:07:55:99:8c:51:56:b6:cf:16:b3:86:
                    8d:81:ed:3d:c1:4e:70:b9:fa:56:2c:36:72:85:56:
                    17:48:2c:a3:fd:9f:1e:a9:55:58:63:70:c6:58:3e:
                    3f:cd:fc:ec:07:34:37:79:87:6e:6c:a9:de:d7:0a:
                    47:48:55:28:74:24:8f:00:1f:c0:68:3c:88:a3:4c:
                    28:f9:85:a9:b1:81:df:d1:83:20:c2:f3:c9:ba:8b:
                    ad:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:11:0E:70:1C:50:A5:B6:35:34:AC:7A:FD:EC:0D:6F:51:2E:2F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/464a5ab2-e46a-3547-97cd-de15d28f0a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:266::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e7:b6:08:d7:aa:12:9b:5c:95:03:64:d4:bd:22:40:de:6a:
         7e:8e:63:08:dc:0b:65:2a:c4:d9:02:9b:d6:48:96:77:36:e8:
         57:e2:ca:be:8f:2c:93:1e:8c:26:a5:36:7a:aa:a7:1c:09:3c:
         9d:f2:6c:8f:c7:b6:cc:94:25:45:20:d6:f1:24:2b:82:40:70:
         e2:fa:b7:98:32:25:a0:50:22:db:bd:a7:3b:ab:c3:c5:18:eb:
         6f:d8:d7:03:2b:4b:96:3e:a3:a1:65:d5:8d:6e:94:66:c8:75:
         1b:2c:d6:09:9a:29:cd:da:4b:09:90:f8:58:94:d8:90:91:cd:
         54:26:d0:99:a6:16:df:07:e0:36:be:ac:08:0b:03:7a:f6:c6:
         b5:ad:74:82:53:cf:dd:3a:d6:42:45:7a:de:bf:33:15:f7:df:
         da:e8:a4:af:10:9b:e7:99:46:5b:80:9e:5b:9c:23:a4:74:da:
         32:1d:d1:ed:b0:a2:66:a8:8d:02:a9:00:51:93:23:c0:fe:84:
         f0:6d:75:93:bd:af:4a:6c:3a:76:05:67:44:18:be:07:50:19:
         63:e3:ac:6d:c2:96:a5:be:7c:79:32:d9:8e:7f:7c:a7:bf:25:
         85:c8:87:46:37:3c:7f:f5:56:dc:2c:96:25:53:05:d9:90:4d:
         0f:f7:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:13:20 2025 by rpki-client