Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7464238-df40-3cec-856b-1eddd83f5760.roa
File:                     b7464238-df40-3cec-856b-1eddd83f5760.roa (raw, json)
Hash identifier:          Av9X2WYFt9Hf5F/r9Fd7lD460kkItXQOJGTsvw20ZPs=
Subject key identifier:   D3:44:27:E1:14:95:B2:2D:FF:11:4A:E0:BD:DE:40:E0:60:23:0B:00
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AF0F150E3BAF69AA9FDCF3A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7464238-df40-3cec-856b-1eddd83f5760.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     34867
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:50:e3:ba:f6:9a:a9:fd:cf:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=c6e52909-67f3-4547-b583-63d771e515aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:2f:04:06:78:33:ec:3a:72:50:53:98:98:
                    b1:db:bd:eb:32:28:67:bf:cb:9a:13:b2:5a:e2:88:
                    46:62:65:a8:df:c9:a3:bd:5d:b2:ff:81:cd:87:97:
                    0e:f2:fa:bd:21:eb:a8:40:87:71:81:96:3f:d0:08:
                    41:5e:4e:e2:cd:7e:13:82:72:24:c7:23:6d:a0:48:
                    e5:71:77:65:aa:99:8b:36:19:1c:a0:c1:a9:11:68:
                    bf:2a:5d:2a:7a:5e:fd:82:7c:32:b7:3a:d0:d3:3e:
                    42:2f:30:89:80:7e:9d:66:fe:4c:1b:49:6e:a6:af:
                    6d:b0:0d:0b:4a:ef:ad:ab:ea:b3:6a:6a:93:25:24:
                    d6:3a:84:a9:b4:5d:1f:ae:b4:1e:ed:2e:4f:74:20:
                    68:ae:b0:53:6e:1d:cb:4e:34:f2:c9:d1:fb:5f:81:
                    86:bc:dd:12:84:6d:57:9a:e1:0e:8a:04:72:85:2f:
                    73:38:f6:89:d0:b5:4a:9d:67:36:54:fe:b1:74:e5:
                    a5:ff:5a:63:b2:3a:78:33:4e:da:dd:6c:f4:ce:81:
                    56:a8:c3:67:12:60:24:91:25:5e:2a:c1:97:35:10:
                    03:8d:7f:7d:11:17:86:13:db:1e:ef:2e:5e:90:09:
                    ba:d2:21:b8:2a:f6:6d:ec:03:fa:bf:83:2f:f5:74:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:44:27:E1:14:95:B2:2D:FF:11:4A:E0:BD:DE:40:E0:60:23:0B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7464238-df40-3cec-856b-1eddd83f5760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fe:73:fb:be:2d:76:81:42:f8:e7:b0:96:92:6e:32:a8:b9:
         9f:f1:2a:c3:77:c6:51:60:54:8c:04:d1:80:3d:35:93:17:c3:
         4a:13:0a:93:a7:29:17:f2:30:d7:55:93:59:e5:e4:b3:e3:8c:
         fd:64:0d:b7:f0:ea:dd:ab:d7:68:aa:1a:fd:9b:34:02:1d:48:
         57:22:e8:7b:22:ed:e1:8b:e2:74:31:8c:f9:09:e6:71:83:56:
         27:f5:72:a8:ed:2d:b4:46:56:80:63:1a:09:6d:98:8a:eb:18:
         76:e8:f6:7c:17:c3:b6:37:d3:a6:3e:96:c7:fa:70:e1:14:53:
         86:d7:ec:d9:af:5b:e9:7b:30:57:d3:86:b6:32:1b:9f:65:c5:
         8d:46:73:be:60:8c:24:6f:ba:34:5e:d6:75:3b:7a:39:e7:93:
         74:81:46:23:4a:7b:e9:56:c0:6b:db:31:3d:7e:d6:b0:b5:71:
         e4:82:6e:a2:74:49:d3:5f:22:ae:38:d5:d2:20:38:a3:b4:66:
         51:a6:31:df:70:fc:4d:25:c0:00:66:5d:8c:e4:cb:99:18:22:
         f9:b3:cf:9b:a2:ad:a5:9a:df:c5:cd:eb:20:7d:e6:c0:90:67:
         12:8f:f2:b4:c0:17:c1:d7:62:02:51:5f:55:96:2b:58:06:f4:
         72:f0:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:54 2025 by rpki-client