Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9184852-d10f-3081-9e7b-69c41b7808d7.roa
File:                     d9184852-d10f-3081-9e7b-69c41b7808d7.roa (raw, json)
Hash identifier:          8K3utruMJokKFKnANDI9UNE0eA0+goU01a0Aj1D7ne8=
Subject key identifier:   47:3E:6C:11:E4:84:B5:FA:46:EC:1C:73:05:5A:EC:F3:19:10:5B:25
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A51D07AC6B275A572C8E3FC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9184852-d10f-3081-9e7b-69c41b7808d7.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     214618
IP address blocks:        2001:470:3b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:7a:c6:b2:75:a5:72:c8:e3:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=7e649bc0-f5ef-47ba-834c-96f68197ea40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:db:03:27:4e:ca:a6:e4:30:c0:ff:49:96:
                    67:97:6c:99:3c:2f:b4:21:44:65:40:86:b7:39:43:
                    d0:7e:7d:c1:27:2e:39:ef:2c:33:f3:f0:f0:bc:a1:
                    c0:f3:ee:88:5a:35:62:11:30:90:47:59:45:47:68:
                    bc:b7:52:16:4e:e5:3a:3f:31:3e:53:11:c8:77:63:
                    27:1c:b3:2c:61:af:3f:d6:6d:3e:4e:96:bd:84:c9:
                    a2:18:1c:13:40:8e:d3:6e:ad:71:a6:82:20:12:b1:
                    6c:20:07:42:62:db:c6:99:a5:3c:10:8b:bd:a5:04:
                    e0:90:bd:78:a6:16:8e:a1:91:fa:77:de:50:bc:55:
                    fe:1a:81:1a:01:d5:96:42:ea:7c:65:d4:1a:3b:c3:
                    9d:f7:9b:bd:d9:7a:09:d4:aa:6c:5d:09:a0:c6:09:
                    b6:c7:e5:5b:d7:4a:cf:d2:21:49:02:bc:95:ae:37:
                    64:d0:2d:eb:db:ee:61:6e:ba:3f:2f:e9:54:9a:8c:
                    c3:57:1f:f5:4d:f8:d5:fd:78:0b:13:ed:8d:6b:4b:
                    5e:10:51:38:07:54:ef:bd:db:f4:0c:ec:65:2a:d1:
                    ca:63:6b:01:14:e0:92:30:39:9c:0f:49:bd:07:4e:
                    64:67:a6:b3:d6:fe:94:42:7d:81:5e:26:a3:86:45:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3E:6C:11:E4:84:B5:FA:46:EC:1C:73:05:5A:EC:F3:19:10:5B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9184852-d10f-3081-9e7b-69c41b7808d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:f3:3d:39:db:b1:75:f6:cb:ff:69:81:79:b3:8f:12:24:57:
         03:d6:32:91:aa:59:d1:3e:68:3a:35:e0:3c:21:7f:7e:73:1d:
         86:d4:28:e3:35:11:34:c9:ba:bc:8f:16:6e:df:3f:2d:0e:21:
         b3:38:3d:a6:b5:37:f6:88:be:42:0b:2c:0a:20:a0:56:1c:66:
         c6:10:df:fb:21:ba:71:bc:14:27:9c:63:5a:d1:1f:3c:3e:8e:
         ab:0b:8c:c9:42:93:05:60:44:4e:fd:40:f4:d4:eb:a0:9e:be:
         7e:31:da:7c:9b:50:4e:7f:03:15:d5:83:0a:0c:a9:73:08:02:
         e7:8f:fd:a4:80:21:61:55:cf:69:78:29:52:83:e8:a6:e2:1a:
         26:e0:ab:a0:1f:35:fb:d7:ef:13:06:98:37:3f:fe:52:70:4e:
         ea:44:5c:f1:65:d0:94:26:04:14:c0:e3:31:3f:19:44:d8:61:
         f5:1e:30:1e:0c:eb:7d:b0:9c:72:b7:1d:93:52:4a:47:ae:91:
         59:4f:f9:84:bf:55:d0:d4:14:16:25:4f:8e:2d:2b:19:0f:a2:
         29:13:96:d4:94:f1:70:10:30:fd:4e:a1:46:14:e6:29:49:61:
         6e:99:3d:71:d5:78:5a:6f:18:6a:98:70:6d:30:fd:39:7e:34:
         d2:84:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:34:44 2025 by rpki-client