Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/461dceed-c8eb-3e81-8666-d00b28808fb4.roa
File:                     461dceed-c8eb-3e81-8666-d00b28808fb4.roa (raw, json)
Hash identifier:          SvU78HQidPZOBbr+C/mh9ey3ldwd4Omst1IeNTdvWV0=
Subject key identifier:   8A:8D:DC:95:61:F7:16:50:F3:3B:7E:B5:91:C7:7E:B7:11:F3:1D:DC
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F4328584A7E7B5987D218944E660715C0
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/461dceed-c8eb-3e81-8666-d00b28808fb4.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     4186
IP address blocks:        2620:10f:b000::/48 maxlen: 48
                          2620:10f:b070::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:59:87:d2:18:94:4e:66:07:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=687daf1d-d3ab-4025-8f05-93b24567fd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:ac:f0:4e:ce:9b:f7:af:1a:d9:57:f2:63:
                    e5:5a:35:e6:64:3f:df:0f:9a:af:8b:0d:fe:14:1e:
                    06:98:d5:f5:90:cd:14:03:01:6b:77:99:62:bb:97:
                    3a:e8:c6:71:e5:fb:a4:e0:b7:6a:a7:95:55:38:4b:
                    48:c7:07:54:ed:4e:7a:79:36:6a:8d:35:35:39:cf:
                    d4:f7:b4:85:cc:0c:05:78:ce:fa:28:ec:4c:47:8b:
                    d8:87:5f:25:ef:42:42:b5:af:9a:04:9c:56:b4:88:
                    db:be:86:88:1a:53:e8:c4:e1:f6:24:71:23:8f:6d:
                    f1:45:bb:ce:dc:54:65:8f:44:d7:70:52:2a:80:41:
                    c4:af:d6:51:59:30:b7:2b:81:cc:6f:87:05:1b:69:
                    a2:33:8d:10:65:90:3a:71:cc:a8:cb:b2:dd:d6:a0:
                    40:5a:e2:50:54:cf:62:75:9d:c2:98:b2:a6:5f:aa:
                    8e:5c:43:5c:ab:dd:7b:af:c4:d8:5b:fc:9e:34:4e:
                    98:9f:b7:b9:dd:50:9d:33:08:71:03:16:e4:d6:d1:
                    86:a1:5a:be:48:52:9d:7e:f2:30:b0:ce:71:4b:e1:
                    5d:1d:c1:50:94:e2:7b:a7:35:f8:94:27:17:b1:79:
                    55:9c:f7:c3:10:ce:99:43:56:14:7e:96:d0:6f:22:
                    28:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8D:DC:95:61:F7:16:50:F3:3B:7E:B5:91:C7:7E:B7:11:F3:1D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/461dceed-c8eb-3e81-8666-d00b28808fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:b000::/48
                  2620:10f:b070::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:5c:36:53:eb:ef:8e:ce:56:f3:2e:71:b5:30:c2:b1:22:88:
         6a:39:c5:4e:fb:20:9b:c3:2a:65:21:8a:e0:f1:00:72:0d:4f:
         a2:6d:b6:a4:53:91:7b:48:e9:ab:4a:ee:78:b2:43:b6:52:22:
         0e:fa:e8:42:42:f9:92:05:82:c7:01:9e:14:b3:03:d8:48:a8:
         be:f6:4a:05:20:91:d5:36:ca:ec:69:d1:05:c5:0e:ee:b7:af:
         ae:30:77:7e:6a:76:c5:07:13:82:b0:27:18:4e:b7:b3:4f:9b:
         da:f4:2d:b0:04:af:a1:c3:5f:c0:04:01:6a:ac:63:9b:70:87:
         ab:1b:a7:de:7a:1c:01:a3:67:6e:8d:fe:bb:50:ef:51:7f:85:
         20:59:85:96:67:34:6f:e7:44:2b:98:e4:cb:87:53:1c:10:e7:
         97:7e:e6:24:db:dc:d9:7c:e4:e3:bf:fe:f3:87:8c:fa:d7:39:
         1f:53:c3:55:54:cd:99:84:5e:6d:c6:9e:d6:e8:f9:57:e7:e7:
         6b:d0:46:7d:72:8a:23:a5:24:02:e1:90:a0:36:93:3f:32:dc:
         8f:b7:56:b9:31:78:83:c9:4a:01:7d:cc:67:ad:16:7e:19:ea:
         bc:49:50:91:f0:be:f5:78:03:6a:aa:54:43:43:10:4f:cb:7b:
         c6:e4:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:09 2025 by rpki-client