Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65c7f006-5bf5-3a13-8a8b-664cb75a3df8.roa
File:                     65c7f006-5bf5-3a13-8a8b-664cb75a3df8.roa (raw, json)
Hash identifier:          KlmKwFlFnMbsjtcZKn2ROf8Agyb9OhR3RsAZ3CReays=
Subject key identifier:   CF:B1:98:0C:C7:98:1C:5C:A8:E5:C6:77:F4:6A:F2:E9:D2:FF:F1:63
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A3FB95B5B00F91DD4BD994E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65c7f006-5bf5-3a13-8a8b-664cb75a3df8.roa
Signing time:             Fri 20 Jun 2025 01:30:10 +0000
ROA not before:           Fri 20 Jun 2025 01:30:10 +0000
ROA not after:            Thu 18 Sep 2025 01:30:10 +0000
asID:                     62838
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:b9:5b:5b:00:f9:1d:d4:bd:99:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 20 01:30:10 2025 GMT
            Not After : Sep 18 01:30:10 2025 GMT
        Subject: CN=6e0a885e-a0f5-47f4-8095-46dfb504b1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:2c:54:9a:eb:e5:aa:7a:89:c0:73:f9:ae:
                    42:e1:33:99:6c:ff:45:8d:15:8d:43:dc:33:0f:cc:
                    31:1a:03:95:a1:fd:8b:71:ee:a7:68:09:35:1d:d3:
                    e4:cf:23:bd:f7:39:b3:49:52:48:d3:c8:80:03:a0:
                    d9:73:03:49:86:bc:92:4e:f4:30:35:d2:07:ef:d3:
                    d8:55:ab:08:98:23:70:e1:58:3d:cd:1a:1d:7f:98:
                    b2:2c:7b:0d:33:21:ea:24:30:37:57:f5:1c:85:0e:
                    83:c5:e0:6b:8a:d7:2e:c3:81:e0:d2:b5:3e:7a:af:
                    77:f5:4f:b0:7f:4e:9c:8d:53:ea:1c:a7:22:86:cc:
                    36:25:7b:db:53:fe:0f:1c:f6:79:b8:41:22:c0:44:
                    73:f4:dc:6f:fd:bc:a5:4e:bc:c8:61:08:38:64:c4:
                    13:a2:14:9e:70:16:c8:14:3d:1f:2f:76:0b:c9:c2:
                    8a:bd:43:38:ad:a7:a1:67:3c:a5:44:61:a0:cb:21:
                    1f:c4:60:32:ba:7a:90:bf:89:ee:9a:24:53:24:9d:
                    39:c9:1c:5e:69:66:c7:b4:10:08:cf:ba:92:c7:f6:
                    73:46:74:23:65:f9:ac:b6:08:2e:b3:35:8e:38:6a:
                    5b:ac:26:05:1d:ab:83:d4:91:af:ff:1c:06:eb:b2:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B1:98:0C:C7:98:1C:5C:A8:E5:C6:77:F4:6A:F2:E9:D2:FF:F1:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65c7f006-5bf5-3a13-8a8b-664cb75a3df8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:dc:ee:a9:4f:67:5c:fc:6a:51:c0:e0:95:89:1a:35:df:b7:
         60:53:73:22:07:35:d1:f9:d9:17:66:11:96:7b:36:08:f1:35:
         80:ca:ba:7e:e2:cf:55:eb:ab:f5:07:82:4f:97:78:1c:9a:90:
         8c:72:aa:ad:62:81:ee:c9:a0:97:52:94:f8:1f:72:b1:bd:8c:
         89:c6:02:5f:4e:c7:a0:7b:52:79:67:27:07:b2:8b:78:86:5d:
         8e:d0:78:cd:89:3e:cf:ac:9a:e0:ac:ec:45:a5:73:68:39:98:
         fe:22:22:14:92:a7:cd:32:24:35:ed:24:5e:3a:35:bd:3a:9c:
         59:ff:f1:e8:49:ce:a7:c2:f3:bc:91:9d:cc:d6:13:9b:ed:fe:
         70:68:a7:60:9c:e6:81:15:40:52:9e:0e:0c:e8:7e:c3:ba:d8:
         60:2d:86:66:61:db:f3:19:33:80:5d:0b:26:22:86:af:ef:0f:
         ae:92:c2:69:1c:09:d0:a9:10:3a:7f:5e:4c:42:b7:40:6a:2e:
         1c:23:0f:4a:04:f7:59:40:fc:24:ba:ca:bd:1c:0c:f1:2d:17:
         25:9a:38:1f:4a:55:24:ab:8c:d2:60:83:dc:e2:db:af:14:e3:
         be:71:79:7b:10:75:c8:58:3e:08:8e:7a:e9:aa:94:a1:41:63:
         88:b5:98:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:26:37 2025 by rpki-client