Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1077b20-f23a-379c-a5af-a32c7c3b116c.roa
File:                     c1077b20-f23a-379c-a5af-a32c7c3b116c.roa (raw, json)
Hash identifier:          psv8lY/J1nBk5U1ey/SGF1P9qpFwsLP1I1iF4LN3SvY=
Subject key identifier:   7E:62:E1:47:BE:C4:29:BB:95:CA:23:D0:0E:FC:C1:08:0D:2B:2C:D7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AEF9A7963B77C33C20B66E100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1077b20-f23a-379c-a5af-a32c7c3b116c.roa
Signing time:             Fri 22 Aug 2025 01:30:12 +0000
ROA not before:           Fri 22 Aug 2025 01:30:12 +0000
ROA not after:            Thu 20 Nov 2025 02:30:12 +0000
asID:                     203760
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:9a:79:63:b7:7c:33:c2:0b:66:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 22 01:30:12 2025 GMT
            Not After : Nov 20 02:30:12 2025 GMT
        Subject: CN=317e63ac-6efa-46bd-8b80-3497accfe7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:ca:dd:91:bb:2a:29:a2:10:6e:38:af:83:
                    dc:3a:40:8b:28:f4:c8:a4:93:7f:9e:b6:6a:e4:b2:
                    82:5a:4d:a6:74:09:93:32:77:44:6d:a4:25:07:fc:
                    7b:c9:a2:cb:c0:f2:3c:96:11:60:14:8b:51:4f:12:
                    9e:fd:a4:56:22:f8:bc:82:29:40:a4:09:51:2b:df:
                    fc:86:fb:4e:d0:fe:43:00:b7:80:f1:2d:52:5b:f0:
                    82:08:dd:2a:87:e5:cc:c7:bb:95:5a:71:8b:12:24:
                    25:5a:f0:64:dc:31:f3:31:e4:ba:0f:06:b5:06:30:
                    8a:bb:70:89:25:bd:98:5b:cf:4d:cf:0d:d5:be:75:
                    77:a6:76:6d:5b:25:c9:ed:7b:96:8c:15:f1:69:22:
                    14:6a:15:a6:57:5f:8e:3c:b5:d1:b5:70:35:5c:82:
                    43:a6:67:66:79:c3:3d:d8:cb:1c:63:39:9b:b8:2d:
                    24:51:24:0d:68:15:47:16:36:37:e6:ed:f4:89:41:
                    84:84:38:0c:75:1d:d6:a4:85:87:06:36:ee:01:26:
                    5b:7a:7b:db:6d:27:e5:2c:7f:0b:e1:fc:bc:77:f2:
                    50:10:7a:01:db:9f:67:1f:6a:9e:c0:54:af:62:f2:
                    f4:07:de:44:02:77:b2:fd:b7:57:e6:f4:84:3b:ac:
                    35:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:62:E1:47:BE:C4:29:BB:95:CA:23:D0:0E:FC:C1:08:0D:2B:2C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1077b20-f23a-379c-a5af-a32c7c3b116c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:5e:aa:67:04:82:a7:4b:0b:44:f0:f1:38:11:0c:07:01:2d:
         43:e1:7c:7f:6a:56:65:6a:f0:a3:ff:71:ee:bf:11:4d:67:30:
         69:82:e7:ef:12:55:10:d3:1c:c8:b0:2e:bb:e0:e5:a2:70:bf:
         89:9f:c5:10:0c:8d:49:61:09:2e:64:45:5e:6d:4a:96:7e:f4:
         d1:89:d7:39:61:3e:9e:a7:3f:2d:2f:5f:12:e2:18:68:eb:db:
         7f:bd:a3:1f:fb:55:fc:4c:8a:ec:0d:b8:71:1f:56:24:a9:c1:
         92:93:47:f3:5b:a2:b1:e9:6d:44:87:86:2e:3f:82:51:52:40:
         83:ae:78:af:48:5a:a0:6a:60:8e:81:1d:46:83:ce:d6:d0:22:
         6b:11:94:17:c4:53:35:b3:e2:7d:66:50:a9:84:ef:9a:ef:4d:
         ec:6f:f8:a3:17:c4:2f:ae:0c:cb:99:5e:15:d2:15:29:ca:8f:
         c2:ca:ac:ca:90:88:b4:c9:84:88:4f:b2:5d:9f:3a:60:be:aa:
         af:46:4e:be:28:da:d7:19:2c:55:8a:47:c0:7e:fe:e9:e8:a1:
         eb:92:d4:ad:28:70:61:5d:96:41:6d:54:f7:c4:b3:cf:56:e2:
         79:f0:6f:e3:c4:40:1e:a0:e9:58:20:a9:ed:7f:cb:1e:8a:ba:
         ad:a8:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:09:05 2025 by rpki-client