Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa
File:                     4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa (raw, json)
Hash identifier:          KL5tKoGPnyaVGAvZWLon6VTcc5tXcMBZ35NtpbEDUUo=
Subject key identifier:   28:41:8D:31:C5:55:36:EB:B9:FC:00:C8:70:C8:34:88:02:B3:EE:64
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584ACB4114BED1E9D6AA1325F800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     395517
IP address blocks:        2001:470:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:14:be:d1:e9:d6:aa:13:25:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=598702c3-20d3-4837-b016-b98cf2fccd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:5c:dd:32:86:ed:7a:7e:3c:0d:ce:7b:54:
                    df:d5:47:61:f3:80:7e:7e:5c:50:56:da:08:13:52:
                    23:a9:32:e9:db:7f:52:6d:74:47:25:68:51:c5:87:
                    b0:3f:80:a4:a1:9f:4e:1a:d6:01:51:af:e7:dd:d9:
                    a8:6e:bf:f9:70:ed:dc:c1:e5:30:d4:45:32:89:ce:
                    08:a9:2b:dd:d7:b2:03:fb:60:d5:16:b3:b5:a3:f3:
                    84:ce:a7:dd:41:cf:5e:63:93:37:9f:96:4a:66:f4:
                    a9:25:23:90:42:45:e5:6c:7f:05:fa:c8:9f:13:b1:
                    3a:08:f5:37:ea:2f:6e:dc:d1:71:e1:d9:11:f1:14:
                    ac:0e:b8:87:eb:fe:a6:07:c9:87:b8:71:86:86:c9:
                    ca:fc:a3:c7:47:86:ba:71:a1:b8:ea:74:95:86:6d:
                    2b:0b:d2:d7:af:c6:96:1f:37:d2:b2:7a:54:1f:ea:
                    d8:6f:dc:e4:7d:db:9f:18:55:72:ba:49:ca:b3:7b:
                    b7:b9:d9:eb:09:4a:ef:30:58:4c:01:5e:87:f7:e5:
                    17:8e:27:93:35:6a:65:56:d9:55:93:f7:57:80:d8:
                    ac:67:a7:be:aa:30:44:75:32:73:79:39:ce:2f:44:
                    44:31:c6:72:5e:6e:a3:cb:00:95:19:ea:9f:d4:ed:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:41:8D:31:C5:55:36:EB:B9:FC:00:C8:70:C8:34:88:02:B3:EE:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4bc8ba73-8e29-38d5-b46f-7a6a4b988d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:57::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:8b:2c:47:b5:a8:2a:a9:5c:04:2a:99:22:59:ad:fe:85:1d:
         78:d1:67:77:d2:f9:aa:52:84:10:e0:7a:d1:78:11:8d:c8:93:
         46:b0:0e:a4:0b:18:07:c0:f3:da:be:59:2a:1b:c5:c4:1f:27:
         d0:71:17:3b:1c:7b:37:1c:46:2d:8d:de:f3:4a:50:21:89:17:
         49:7f:79:58:e0:a6:ab:c0:1b:f3:3b:df:0c:f0:23:36:c4:6b:
         b2:bd:3b:a4:7d:cf:11:55:f7:c9:af:ec:25:85:6a:8b:37:1b:
         85:bf:30:44:ab:d1:74:a3:53:59:37:9b:9c:93:ab:a6:3a:c5:
         6a:ad:51:a2:20:0c:bd:aa:27:f9:e1:44:b5:0b:ad:e0:f4:1d:
         67:8e:a3:65:60:0b:f8:c2:fc:0d:f2:6c:e9:b1:36:8a:50:5f:
         d6:d2:cf:da:5f:73:0a:ff:11:20:42:fc:c5:74:af:a7:15:39:
         62:8b:e7:1c:cd:57:71:2e:a4:4b:69:89:10:05:c4:f7:97:25:
         43:27:8a:a1:21:46:c9:03:b0:f4:d5:c2:82:24:76:d6:dd:3d:
         bc:91:29:a4:74:df:32:ba:b8:0b:cd:fc:8a:40:80:23:7f:2d:
         e6:9b:ce:7c:60:d0:f7:6d:f7:e5:54:d7:d1:b5:ea:a8:a8:17:
         a1:2e:6e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:35:17 2025 by rpki-client