Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/510db98d-79d4-3449-9259-678dd8b40334.roa
File:                     510db98d-79d4-3449-9259-678dd8b40334.roa (raw, json)
Hash identifier:          MLsFjyic2t/9pCg8XR1IoFLSCDeDVlIVd3FNI32r88k=
Subject key identifier:   35:4D:29:B7:DD:AF:62:B8:3B:9C:78:F3:1F:43:B3:B2:A4:F4:B1:90
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584ACB40FD0F7071E03D99170700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/510db98d-79d4-3449-9259-678dd8b40334.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     395555
IP address blocks:        2001:470:319::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:fd:0f:70:71:e0:3d:99:17:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=72234726-f48a-4ac6-a8bc-baaa78b174f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:d2:4a:e2:4d:62:61:e4:a3:ab:a5:f0:9a:
                    f4:0f:f5:98:19:89:5d:91:cc:42:9d:ef:7d:e3:16:
                    79:b8:3f:cb:f7:65:09:87:9c:45:ec:83:a7:ce:3c:
                    ec:ed:15:71:a6:28:b2:eb:0c:1f:d4:48:c3:bc:36:
                    06:e3:97:36:63:66:30:56:7e:b7:fc:02:dd:c9:9f:
                    f1:88:35:a9:0c:b7:93:03:5f:a2:96:69:9c:32:1c:
                    63:45:b1:30:8e:9b:08:d5:33:db:5e:9a:16:c3:f5:
                    6e:ab:15:2c:c3:29:9b:ce:3c:8a:47:08:e8:8f:7d:
                    8a:41:ad:71:44:eb:82:49:71:e6:6a:96:18:49:44:
                    0f:e4:67:29:f0:f9:62:67:db:ab:d3:9f:d2:65:f9:
                    0c:ac:76:ff:c7:f1:28:1a:04:78:02:31:66:e7:33:
                    8f:74:f3:96:2c:43:8e:dc:9b:86:36:67:f1:f9:c7:
                    e2:d4:fe:15:82:bd:d0:a0:5d:15:55:05:4c:06:15:
                    81:17:37:eb:35:6e:27:4d:ad:37:9f:64:e9:27:1a:
                    b5:d8:e0:2a:b3:d2:37:c5:b7:87:07:0e:29:f1:ba:
                    e0:bb:28:59:78:31:1c:0e:22:ad:44:90:db:65:6b:
                    58:7e:28:ee:30:05:d2:10:76:c3:cf:e5:87:ca:09:
                    2f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4D:29:B7:DD:AF:62:B8:3B:9C:78:F3:1F:43:B3:B2:A4:F4:B1:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/510db98d-79d4-3449-9259-678dd8b40334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:319::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:98:8e:d7:2e:89:13:c2:fe:cf:74:62:3a:26:63:09:bb:03:
         de:2b:50:eb:a0:57:81:4d:89:b6:cf:7c:2e:9f:1e:48:fa:43:
         c7:c6:f4:ac:1c:b3:9e:f2:db:6b:8d:9b:4a:57:3a:73:26:17:
         57:19:87:8e:06:3e:fa:db:af:9d:36:dd:d3:4f:c8:a4:15:bd:
         3a:d8:25:1f:79:8e:fe:a7:06:ad:c6:8d:d5:f9:22:bd:79:aa:
         61:db:26:b0:c9:c1:a7:f2:f5:ea:80:c5:c7:94:29:15:86:1e:
         58:13:4b:f1:57:ae:37:80:d1:cc:b9:07:fd:5f:00:dd:a6:62:
         f5:21:3c:11:b2:19:8e:73:52:8a:81:33:0e:35:c8:af:4c:46:
         e3:aa:fa:28:c2:11:60:83:2f:97:ea:a8:19:4a:e5:75:e8:90:
         75:22:18:4c:af:6b:99:65:5d:43:30:0f:ed:2c:2b:98:0f:b5:
         81:04:a3:3f:5a:f8:6a:6e:79:2f:be:fc:d5:ad:8e:5b:cc:24:
         3a:56:43:15:91:04:d9:76:bd:d0:62:f4:22:46:59:69:92:72:
         80:85:63:db:2b:52:ae:5a:08:75:5d:82:e5:13:2f:a6:da:01:
         9d:9c:03:df:40:51:33:6e:49:7a:1a:bc:bb:02:b2:8e:d3:31:
         ac:8a:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:29 2025 by rpki-client