Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e7fa28f-4c7c-3a79-8256-af53431d9e76.roa
File:                     4e7fa28f-4c7c-3a79-8256-af53431d9e76.roa (raw, json)
Hash identifier:          Bv9J+TYeWdVmpdtucwtwhRSH9pVK5wtkGUuKwo/e7VA=
Subject key identifier:   F8:C8:A0:3F:5D:20:10:33:7D:A4:C0:B5:15:8E:F3:D5:AE:FB:13:BF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584ADEDA582618DECB7F776DB680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e7fa28f-4c7c-3a79-8256-af53431d9e76.roa
Signing time:             Sat 16 Aug 2025 01:30:09 +0000
ROA not before:           Sat 16 Aug 2025 01:30:09 +0000
ROA not after:            Fri 14 Nov 2025 02:30:09 +0000
asID:                     210872
IP address blocks:        2001:470:c7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:da:58:26:18:de:cb:7f:77:6d:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 16 01:30:09 2025 GMT
            Not After : Nov 14 02:30:09 2025 GMT
        Subject: CN=0b8babf6-c7b7-42c0-a6f1-64e6097bef37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:fb:e9:f3:10:9a:71:bb:f8:33:64:9d:c2:
                    9b:30:3f:64:7c:3d:59:2e:56:1a:09:23:8d:c4:4c:
                    4b:21:68:db:36:74:af:b0:33:f4:4c:52:09:d3:9a:
                    99:c6:dc:59:a9:7b:d5:e5:bc:33:57:79:7f:84:fc:
                    8e:f2:c5:52:46:fc:dd:9b:b9:59:e9:b0:01:ef:c4:
                    72:04:52:bd:0e:5d:b4:0c:65:b4:48:ee:e2:39:21:
                    7d:e1:97:d1:ee:a1:21:b2:69:6d:92:94:a3:ec:8a:
                    8d:18:4c:9b:fa:54:37:77:24:e5:79:f1:c7:49:e8:
                    7c:34:4b:5e:87:1e:d9:10:d0:e4:f9:1b:8c:d5:7a:
                    97:7b:01:9c:90:50:a9:c2:55:98:0b:aa:4a:57:77:
                    21:c4:c1:64:4b:8c:95:6e:e9:4e:1b:c0:19:1d:2a:
                    32:d7:56:f6:c8:bd:59:78:4d:d1:a5:2d:f0:ff:1f:
                    7d:cf:a4:d9:38:9a:b1:b5:98:19:09:2a:68:19:70:
                    25:8a:d4:1e:b3:aa:a6:ee:9b:53:08:51:79:67:ea:
                    c5:a3:0d:24:89:30:f1:5e:ce:b9:48:27:30:67:c2:
                    6b:59:69:9f:10:68:ad:1b:1e:b6:50:8b:7a:53:85:
                    06:4d:66:e9:d8:49:21:a3:e4:a8:96:4e:19:a2:d8:
                    18:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C8:A0:3F:5D:20:10:33:7D:A4:C0:B5:15:8E:F3:D5:AE:FB:13:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e7fa28f-4c7c-3a79-8256-af53431d9e76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:ca:c7:1b:66:05:9f:c4:ba:b1:87:95:7a:a4:b9:94:50:
         68:79:56:5c:64:cb:1f:c9:ef:f6:ab:db:05:f5:40:46:e5:bf:
         c1:0e:94:d6:e4:1f:11:33:6c:6b:3b:76:22:53:f1:22:5a:6d:
         d4:7b:86:f8:e6:c1:76:c9:51:56:59:a9:94:5a:d0:c8:66:65:
         4d:67:75:bc:3c:fb:22:dc:bd:45:c9:42:5e:26:c6:d5:9d:67:
         eb:72:51:a3:43:a8:87:00:6b:7f:f1:13:50:fc:9e:12:98:cb:
         82:3c:70:32:3f:29:da:2f:aa:b3:99:f9:87:20:5f:f6:19:66:
         95:75:98:9a:ea:b7:65:39:6d:91:ee:e4:a6:98:c1:1a:1a:f6:
         8f:ee:32:9f:e9:f6:15:a6:d3:0d:c8:19:30:e9:4f:55:a0:be:
         0a:01:70:05:5c:c3:f6:84:1a:16:7e:bf:7b:5f:35:be:3f:88:
         8d:3b:72:a6:9f:b5:37:6e:01:9c:10:dc:85:2d:00:f5:27:fe:
         4c:28:26:51:42:ef:63:65:21:5d:3f:c1:07:28:01:4b:7b:0e:
         7f:ad:12:61:f3:27:9d:91:9a:47:4e:b0:f4:e8:07:dd:b1:60:
         4b:86:8f:2b:e8:63:f8:c8:1f:8b:1a:a1:20:8b:0e:0d:bb:85:
         d2:58:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:55:21 2025 by rpki-client