Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0910ae04-ace7-3cee-aaae-b31c480dae14.roa
File:                     0910ae04-ace7-3cee-aaae-b31c480dae14.roa (raw, json)
Hash identifier:          gdHk6/OFqgITZ9Eiml4Ie4W99LBram5DtX0saYR+Xms=
Subject key identifier:   65:68:4C:03:AF:A4:7D:92:20:F3:66:BD:15:53:D4:89:4C:5C:E9:D4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BBAE1CC122296F9A44940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0910ae04-ace7-3cee-aaae-b31c480dae14.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     394330
IP address blocks:        2001:470:b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ba:e1:cc:12:22:96:f9:a4:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=adb31954-0dc6-4848-a776-02772a041db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:26:44:5b:11:5a:ad:7e:1e:c4:7b:33:85:
                    b1:11:a2:5c:73:74:fc:ad:6a:2a:42:f2:18:90:80:
                    84:2f:60:90:ff:63:49:61:09:cf:70:64:48:ee:fc:
                    8f:7d:35:fa:70:f9:5d:e7:1b:09:31:df:df:0f:d9:
                    85:86:90:8d:44:92:08:4d:7c:41:06:c1:92:ee:14:
                    a6:61:24:90:a1:c8:b4:2a:ba:aa:aa:31:49:d0:d8:
                    d2:71:eb:8c:15:08:df:ba:35:85:4f:5d:37:66:0a:
                    cf:73:5d:5f:85:ae:1e:dd:b5:c1:78:f3:b6:4c:e2:
                    5c:6f:b8:e2:61:e9:39:d8:95:cf:fc:d3:82:63:e0:
                    da:0c:c4:a5:f0:9f:34:6b:dc:78:94:53:a6:5c:18:
                    b0:c3:80:f4:47:9d:55:d6:c3:d2:4b:69:cb:19:5c:
                    d5:16:c8:2c:be:26:a8:a8:cd:c3:03:3c:e9:3f:93:
                    c3:03:d9:60:a5:5f:b3:b9:13:69:ec:da:b8:73:3f:
                    c5:4b:c6:ef:13:af:2a:56:9e:87:33:f2:8e:80:c6:
                    36:07:10:93:ea:a9:6a:3f:93:7e:03:af:df:98:3f:
                    cc:65:3f:d3:db:85:4d:fa:69:ae:cb:2f:ea:6f:bf:
                    3b:e6:33:4e:67:a7:31:91:62:02:b1:fd:03:dd:6d:
                    11:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:68:4C:03:AF:A4:7D:92:20:F3:66:BD:15:53:D4:89:4C:5C:E9:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0910ae04-ace7-3cee-aaae-b31c480dae14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d8:57:13:48:4f:80:63:c8:60:b9:f3:29:ef:e0:26:2a:68:
         87:3e:e2:3d:1b:be:64:ff:96:9c:bd:35:93:74:55:09:2d:94:
         cb:6a:54:cd:c9:f6:62:ed:97:09:5c:a1:de:1d:f2:c3:32:c9:
         16:05:7b:d3:f4:43:16:d4:cf:b7:bc:91:1c:11:2d:26:29:a1:
         0e:49:2e:9d:09:21:22:58:50:fb:3d:63:7d:96:38:05:7b:7a:
         90:fa:9d:ee:3b:f3:d3:e3:16:ab:8b:2d:3c:27:ad:75:f0:22:
         ac:78:bd:62:8d:c4:c5:50:6d:7b:82:60:ef:8e:fc:58:86:ea:
         d9:8b:1b:bf:5c:da:04:71:3f:b7:53:2f:72:41:1b:ac:9f:98:
         df:4c:eb:ae:ae:90:8f:21:9b:d4:21:97:63:6c:64:df:5d:a2:
         c9:bf:65:71:d6:1c:c4:f8:69:f9:3b:c7:15:d8:83:e5:e8:14:
         69:67:5a:de:b9:26:9c:ea:eb:37:b6:5c:d1:c7:3e:f3:36:23:
         19:91:5f:76:8a:e8:cc:a7:8c:a2:9e:a8:bc:05:ca:b3:73:80:
         99:71:a6:0c:a3:26:27:22:55:c1:90:1f:c9:12:89:03:8f:a1:
         a6:5c:74:8f:1e:19:b5:d2:d0:ce:df:ce:c1:18:f8:8d:05:27:
         2a:0a:7d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:46:10 2025 by rpki-client