Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9e10d5b-b8f0-3ebf-9fe7-701d2c98f961.roa
File:                     d9e10d5b-b8f0-3ebf-9fe7-701d2c98f961.roa (raw, json)
Hash identifier:          mUGIAWw1gUYGsjecnG70/QYr0jWqa82+RrRqJoa/D4g=
Subject key identifier:   04:37:6B:EC:E4:ED:FC:B4:49:FC:27:24:F3:2F:F4:2E:9A:63:AF:C4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AEF9A924709D3B1D73AE4FCC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9e10d5b-b8f0-3ebf-9fe7-701d2c98f961.roa
Signing time:             Fri 22 Aug 2025 01:30:24 +0000
ROA not before:           Fri 22 Aug 2025 01:30:24 +0000
ROA not after:            Thu 20 Nov 2025 02:30:24 +0000
asID:                     35688
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:9a:92:47:09:d3:b1:d7:3a:e4:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 22 01:30:24 2025 GMT
            Not After : Nov 20 02:30:24 2025 GMT
        Subject: CN=2407f78b-e23f-48b2-9ad6-c3c5c8eeb914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:4e:26:6f:bd:a9:24:33:32:d1:d9:cd:23:
                    b8:bc:85:af:00:3f:2e:a4:b0:39:b7:40:02:09:de:
                    de:23:1c:3a:0b:bd:0d:64:72:99:73:81:75:00:01:
                    c1:b6:83:f0:fa:58:ea:ae:f5:e6:82:c5:50:c2:3d:
                    1b:fe:33:01:aa:ef:be:b3:ec:ec:06:d2:87:58:c9:
                    41:8e:3d:01:fe:3c:3a:8a:7c:e7:e2:2d:a8:91:b5:
                    09:27:1c:5b:ef:d3:36:8a:9e:d7:a5:92:ba:47:9c:
                    f7:65:70:c4:34:2e:9c:7b:63:ac:d3:c4:cb:d0:f8:
                    1e:80:8d:1a:8a:02:d3:66:58:be:27:ae:0c:28:8d:
                    33:97:98:f2:85:58:44:2d:ec:9a:30:fe:67:e2:8d:
                    9d:41:02:bc:c5:03:f0:10:01:e6:5c:1e:96:c7:b5:
                    4d:d3:84:13:52:70:b6:ea:9e:07:76:15:c2:38:a4:
                    74:74:67:95:9d:35:52:2b:0c:1e:62:56:1a:e5:f2:
                    e9:b6:a9:db:b1:3f:c6:27:af:9f:0c:a9:c7:6c:19:
                    89:a3:39:fe:ae:f5:be:de:9f:ed:27:6f:d5:4e:96:
                    10:6b:1d:97:e4:af:4d:36:d5:9e:e0:e3:d9:1d:d9:
                    fc:a1:80:30:33:04:c1:62:c9:82:c5:b2:ba:36:be:
                    a0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:37:6B:EC:E4:ED:FC:B4:49:FC:27:24:F3:2F:F4:2E:9A:63:AF:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9e10d5b-b8f0-3ebf-9fe7-701d2c98f961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c7:70:95:70:86:f5:51:dc:48:5f:22:c1:cb:c2:41:f5:70:
         84:18:92:02:01:b0:9d:01:85:db:89:61:bd:2a:27:46:24:ae:
         58:1c:0e:33:e6:e6:df:e1:f5:30:67:28:d8:4a:6d:5e:6d:f9:
         60:84:3e:03:4c:35:cd:09:cf:01:cf:b6:a0:88:fc:ef:fa:94:
         dd:dc:40:cc:d4:b0:85:e0:b0:41:c9:e9:07:7b:9d:d7:1a:78:
         a5:cf:60:30:43:c9:11:ad:ed:ae:64:d1:56:09:bc:15:2f:3d:
         b2:2b:f5:8c:6d:11:aa:a6:f9:d5:73:4b:03:be:74:83:27:5c:
         82:f2:08:2b:d4:d8:47:e5:b8:ad:f6:3b:1c:af:25:65:a6:5a:
         c7:e3:bd:61:80:aa:aa:3e:da:27:0d:06:c7:fa:2d:48:5c:b0:
         2c:5f:66:23:6c:23:a0:d6:84:30:e7:0b:35:2a:0f:22:95:f2:
         8a:75:12:3f:15:1c:10:77:80:62:52:40:e5:30:94:ae:82:fd:
         aa:cc:c3:be:08:d9:53:26:63:93:72:bd:46:72:f7:35:42:48:
         f8:45:09:24:bb:fa:82:3f:2f:7a:f6:bc:b5:8f:f6:d4:d9:1e:
         3a:84:27:8f:d0:30:d1:44:c5:e7:c5:e0:1a:98:bf:cd:50:90:
         3b:4b:71:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:56:35 2025 by rpki-client