Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa
File:                     d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa (raw, json)
Hash identifier:          ZBA01xzhqkiP13MPL9wBgSMSTdRlqRL3jiKb7SFtz/M=
Subject key identifier:   27:5C:FA:FC:02:A9:EB:9C:5A:AB:44:7D:66:84:7A:17:7B:E5:82:E4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AD3A11DDCB76982FF6ACFBB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     394740
IP address blocks:        2001:470:391::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:1d:dc:b7:69:82:ff:6a:cf:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=7ded1b9b-a8e1-44a5-b740-1e84c79807b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:dd:db:27:4c:c3:a0:c1:1d:be:12:0e:5b:
                    5c:4e:df:c2:50:94:8e:88:fc:56:c1:1d:c3:c9:9a:
                    5e:ab:dd:b7:75:57:a4:64:f4:b8:a4:09:8d:1b:0f:
                    8d:c4:c4:65:a0:e5:e9:6e:92:fc:ee:a8:4b:e1:98:
                    ce:a1:b4:57:26:2d:04:f0:07:61:6d:30:8d:15:95:
                    dc:67:e3:40:3a:45:1a:84:48:aa:c1:65:19:67:a0:
                    c2:9f:9c:96:80:9d:d2:f3:5b:18:69:a7:f8:62:d8:
                    e2:55:73:79:99:a0:6a:46:9d:d3:13:9b:79:1d:a1:
                    8b:d8:84:78:d3:bb:c6:f3:59:4c:35:1e:fb:e4:75:
                    07:4b:2f:77:73:b5:ba:9e:68:aa:ab:5a:3a:04:18:
                    f4:3f:3e:d4:3f:11:43:c9:c2:86:86:08:3e:49:de:
                    d6:cd:ce:fb:d1:83:91:3c:dc:f2:7a:91:20:d9:2a:
                    08:eb:aa:95:aa:d4:08:b5:c9:67:a9:73:80:e1:3e:
                    a9:87:ad:7a:23:d6:9d:f5:41:e0:38:44:70:45:46:
                    5d:0d:ae:fe:71:d4:f6:9e:5d:25:53:b7:fb:64:7c:
                    36:47:2f:76:d9:a0:55:95:d2:7f:e4:82:6d:46:d7:
                    60:0d:2f:c1:2d:6e:9d:f6:df:af:66:fd:49:ce:0a:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5C:FA:FC:02:A9:EB:9C:5A:AB:44:7D:66:84:7A:17:7B:E5:82:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:4e:fd:3b:b6:bb:b7:bd:fa:6b:d1:32:9f:f8:1c:ef:88:
         68:42:04:d0:8d:57:7e:b7:b4:d3:8e:7a:08:71:bb:39:4e:ba:
         db:c7:a1:52:2c:a0:14:6d:90:c3:95:43:69:5d:83:2e:7c:bb:
         12:3c:fd:31:8d:68:79:00:dc:0d:e5:c0:9b:6a:17:ec:ac:92:
         49:ca:00:b1:9b:52:02:15:0c:d4:c5:6d:35:46:35:07:61:77:
         9b:c4:77:53:08:2c:44:b3:ed:7d:15:f7:aa:53:f2:0c:ee:74:
         36:1f:42:d4:2a:2d:2f:7e:a3:37:d5:f6:76:bb:a7:e8:75:53:
         f5:d3:48:d7:c2:f5:34:b2:8c:7b:3b:d4:8a:2f:b2:23:a5:be:
         14:ef:ef:d6:a6:72:91:82:91:c0:aa:e7:dd:03:df:12:75:9d:
         49:9d:89:de:3a:d3:40:d9:f5:cd:50:88:bc:fb:87:76:24:7d:
         41:be:cc:25:bd:78:4a:9d:bd:fc:8a:a7:d2:5b:a2:2e:e9:9f:
         65:b5:c2:c7:52:c3:e0:df:e1:9b:94:11:2a:96:09:95:73:ea:
         28:cf:78:34:86:f7:71:3f:17:73:b7:da:dc:1a:f2:c8:07:5c:
         0f:4b:42:84:a5:f8:7d:b3:cf:55:5a:f8:76:f5:17:96:50:8f:
         e7:b6:81:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:51:01 2025 by rpki-client