Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7818efff-995d-3b36-a092-c6e640d7ec51.roa
File:                     7818efff-995d-3b36-a092-c6e640d7ec51.roa (raw, json)
Hash identifier:          okWCUXCLe7vTrF35k3JBI0IXjpjfdzzJyelGoGxNncA=
Subject key identifier:   2F:D0:A9:26:3A:E3:C2:57:4A:D3:5E:6B:AF:09:83:7D:BD:B0:61:65
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AD944FBE423C8AF95BA4663C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7818efff-995d-3b36-a092-c6e640d7ec51.roa
Signing time:             Thu 14 Aug 2025 01:30:10 +0000
ROA not before:           Thu 14 Aug 2025 01:30:10 +0000
ROA not after:            Wed 12 Nov 2025 02:30:10 +0000
asID:                     64107
IP address blocks:        2001:470:473::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:44:fb:e4:23:c8:af:95:ba:46:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 14 01:30:10 2025 GMT
            Not After : Nov 12 02:30:10 2025 GMT
        Subject: CN=4a5f06d5-3f69-431f-af5e-1cad6ca518b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:50:0e:70:3d:f4:99:5a:9c:db:40:18:89:c9:
                    e8:7b:ce:67:66:db:dd:96:2b:69:eb:e0:2d:2f:31:
                    48:e9:08:16:7b:17:35:f9:1e:09:da:d6:eb:12:12:
                    e9:72:e2:87:48:20:10:78:c6:7e:90:0d:f2:53:06:
                    fc:61:d1:55:7f:b1:9f:69:23:71:8d:2d:cd:45:ea:
                    bb:34:59:ce:78:44:eb:a9:20:f3:5b:12:e1:e0:d4:
                    5f:91:e0:31:88:36:49:47:23:e8:29:6a:08:4b:28:
                    ef:4c:ef:37:97:62:81:8b:4b:b5:47:b1:ad:61:17:
                    87:7a:7d:fb:6b:62:c4:f3:51:95:97:fb:42:42:6c:
                    1f:d6:67:f4:6b:3a:76:58:00:d2:39:eb:28:19:03:
                    0d:50:99:bd:d6:75:9e:c7:de:1b:1b:f6:4e:e2:38:
                    01:81:76:d3:f7:1e:11:81:34:f9:08:e3:e6:cd:ac:
                    b5:77:4d:9c:cf:32:cf:fc:fd:fb:c5:44:a0:8d:ab:
                    9d:7d:e2:aa:4d:bf:9f:48:25:8d:68:0f:25:dc:81:
                    2c:1b:45:81:b3:9c:7c:a8:9a:29:24:b1:38:c2:7b:
                    0c:c8:2f:71:58:8e:6c:82:12:c3:3d:69:cd:cf:cb:
                    20:51:95:a1:60:78:b2:41:65:93:ce:01:b8:c7:9b:
                    a4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D0:A9:26:3A:E3:C2:57:4A:D3:5E:6B:AF:09:83:7D:BD:B0:61:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7818efff-995d-3b36-a092-c6e640d7ec51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:473::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b7:0d:f3:bf:b0:e6:07:ee:e2:6e:99:79:85:bc:45:c0:ca:
         af:ad:b4:98:a5:85:d9:d2:a6:98:2a:f5:83:16:61:0b:a9:1e:
         97:76:17:5f:37:b9:b6:c1:ee:e0:58:26:24:fa:bc:36:21:13:
         49:56:b2:e6:2d:cc:23:d9:82:00:1d:ad:4e:c4:3f:3a:cf:7e:
         94:6b:b6:4b:c9:99:e1:de:2e:72:c9:11:82:d4:79:da:79:70:
         ee:b8:0b:83:33:49:2c:f9:cb:25:6a:65:01:37:73:bf:08:57:
         bd:a5:1d:ba:40:4b:23:15:2c:a0:52:ea:40:b3:2e:11:aa:21:
         f1:f1:89:7e:43:26:39:dc:6f:fb:fc:5c:45:dc:24:67:75:f7:
         30:fc:27:e9:f2:6b:d1:50:08:a7:04:3a:e0:7c:84:d1:b3:02:
         07:e0:01:10:45:af:55:31:17:bf:37:ca:4d:42:06:cf:b8:e2:
         36:5a:95:ff:62:91:2f:37:64:a9:6e:81:bc:db:61:20:7e:9a:
         e1:d8:ea:7e:7a:9c:30:12:aa:4f:54:d8:58:76:7d:37:43:42:
         70:b5:68:0e:e6:7a:cf:39:c9:7a:b1:8d:ed:c5:0b:b2:3a:de:
         d1:97:a2:fb:c9:3c:07:cc:b4:bb:18:1e:df:3f:11:40:14:bd:
         61:fe:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:03 2025 by rpki-client