Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a865aec0-36a4-324b-9ef5-a5dfab5291bd.roa
File:                     a865aec0-36a4-324b-9ef5-a5dfab5291bd.roa (raw, json)
Hash identifier:          hrwao2zowWJ68C7bRyEoBwY6guoUS+Yk/rA3M2R049I=
Subject key identifier:   2F:43:F4:D0:AA:C7:0A:2D:5F:CD:F2:FD:13:53:BD:10:F3:AE:4C:9A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A41104696D94DFC9CAC9F0500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a865aec0-36a4-324b-9ef5-a5dfab5291bd.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     135330
IP address blocks:        2001:470:433::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:46:96:d9:4d:fc:9c:ac:9f:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=a4d06ffe-152a-455d-a255-25ee83a58c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:53:d4:93:80:d3:5a:04:4d:40:1f:ab:df:
                    ff:18:c1:0d:05:5f:b2:8c:c4:d6:5e:4d:32:a0:b4:
                    41:d4:3f:c2:dc:23:d1:91:72:40:a0:ab:17:5d:31:
                    9d:aa:c5:b3:ab:e1:3d:11:1f:f5:14:ea:3b:d9:b4:
                    66:67:39:47:d7:09:f9:66:cb:ab:b7:ba:da:19:1f:
                    c9:f1:c5:4c:99:eb:e3:7d:cf:e5:3b:e5:78:a9:7f:
                    c2:a8:56:60:48:cd:90:b7:fe:11:14:0e:48:07:b0:
                    ff:b1:cd:39:0f:88:9f:72:42:c8:e1:7c:65:4e:8e:
                    f8:c2:f3:3d:8f:53:4b:4b:53:3e:a7:b4:c9:22:90:
                    65:8c:c8:d6:c5:90:7e:a2:fb:a4:2d:d8:16:36:35:
                    2a:a7:3c:50:0c:b3:72:b9:94:0e:1a:cf:73:3e:95:
                    75:8a:7e:e0:ee:99:e3:3d:d2:58:a6:42:37:3c:fc:
                    36:21:6d:47:08:2e:9f:bc:6f:23:95:7b:19:c6:2f:
                    75:f5:39:61:29:26:83:0f:c8:62:57:bf:d4:52:dd:
                    f0:af:43:4b:63:fd:26:ee:3e:85:a0:5a:f7:bd:17:
                    a5:79:20:79:8d:ca:3b:de:82:91:cf:26:38:2b:ce:
                    23:65:8f:3d:9f:7b:3a:e2:b3:45:5c:ef:cf:dc:df:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:43:F4:D0:AA:C7:0A:2D:5F:CD:F2:FD:13:53:BD:10:F3:AE:4C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a865aec0-36a4-324b-9ef5-a5dfab5291bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:433::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:bb:6a:78:a5:a2:50:f8:3a:96:72:77:ba:0f:16:c1:09:
         20:cc:b5:f2:6f:7b:ea:5a:ea:27:38:3d:9c:c4:6c:7a:ab:87:
         a9:de:a1:df:85:87:01:29:6f:4c:91:cc:cc:1f:38:14:6a:d0:
         b3:88:f9:4e:f0:de:b1:66:69:af:ea:13:48:db:28:7b:fa:99:
         d8:51:d4:26:c8:cc:ab:c3:8b:b4:0f:79:a4:01:ab:ad:de:94:
         d6:5c:5c:98:11:3e:ad:22:68:0f:3f:99:71:b3:01:f3:f7:56:
         46:34:57:1d:11:48:ef:e3:2b:52:8d:fc:57:a0:1d:cc:2f:0b:
         bd:b1:6a:13:23:1c:9b:82:1c:27:32:a1:3e:23:6c:ad:38:68:
         83:a9:ee:de:c5:94:2c:d4:73:aa:f1:59:de:cd:ba:3c:78:14:
         9f:ad:f5:2f:05:84:42:6c:2e:41:87:fd:77:96:8b:a8:e5:62:
         da:e5:1b:53:9c:32:f6:b3:df:90:18:a2:fc:8c:6d:f3:05:fd:
         9e:1a:b4:77:43:62:37:d0:88:ee:c4:e1:fd:04:6a:91:93:66:
         ac:7c:a8:10:4d:1d:c2:be:21:f0:97:1b:1e:4c:d8:0f:d2:aa:
         3f:11:1a:85:15:f6:d5:1d:80:cc:31:9e:3c:67:3b:5b:c6:2f:
         a0:4c:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:04:29 2025 by rpki-client