Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d727262-1bb0-3afb-9aee-5b0284aa0434.roa
File:                     0d727262-1bb0-3afb-9aee-5b0284aa0434.roa (raw, json)
Hash identifier:          XjPmi+Z8mC1vXyd11AWsUYNEJ1IruZjP0hjNxfkVp7k=
Subject key identifier:   07:F3:D2:7E:27:D1:1B:DA:3B:CE:A1:77:45:62:FC:08:6F:62:32:9C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BF91FC7B1B331C20E1500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d727262-1bb0-3afb-9aee-5b0284aa0434.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     1008
IP address blocks:        2001:470:222::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:f9:1f:c7:b1:b3:31:c2:0e:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=66b53e85-e46d-46b4-943e-6f84ef19b8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:94:f1:8e:a0:89:1d:49:90:bd:ca:a6:53:
                    28:1f:15:7a:1e:ba:49:58:90:c1:97:f8:84:71:f4:
                    96:a3:ab:08:eb:d1:30:7e:6f:de:91:6b:1f:15:c7:
                    ce:c0:48:73:29:83:9e:b4:77:e9:0e:37:92:c2:c7:
                    fc:5b:10:b9:3f:9f:e8:fe:c9:71:6e:05:df:7e:cc:
                    55:b1:ea:c1:cb:e0:24:9e:77:ab:e6:20:d5:ed:ff:
                    bf:87:af:de:2d:81:43:04:7c:b8:b2:cd:f5:dd:fd:
                    c3:90:96:f0:ad:ed:7d:f8:a9:21:96:f5:9a:ec:3b:
                    43:e6:32:27:81:65:c0:0b:60:67:8a:81:0a:6e:ba:
                    de:f4:fc:fa:64:d9:3a:a7:dc:55:91:76:73:da:a2:
                    ff:fc:56:3a:74:1a:47:c8:33:42:fe:12:b5:6b:cf:
                    1e:35:a8:bb:da:4a:2c:4b:eb:a3:e0:1e:f6:c8:49:
                    a0:b9:1e:5c:83:8b:1f:1f:a9:ff:84:f3:74:15:cc:
                    05:de:7e:4d:a3:cd:aa:b7:23:97:1f:96:8b:cc:30:
                    ed:5b:56:11:23:13:48:8d:33:49:26:ea:7c:14:1b:
                    ee:ba:39:24:ce:a8:74:0e:a5:84:30:35:05:68:7a:
                    75:86:a8:c4:72:a8:7b:da:89:17:75:ed:7d:58:60:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:D2:7E:27:D1:1B:DA:3B:CE:A1:77:45:62:FC:08:6F:62:32:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d727262-1bb0-3afb-9aee-5b0284aa0434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:222::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:ad:38:7a:b7:3f:31:f3:2e:6a:9b:b3:a9:eb:7e:20:3d:
         df:98:b5:ad:1a:a2:f7:bf:63:c3:01:46:ce:3f:43:56:43:15:
         fc:0d:71:c7:e1:33:5a:37:b5:e7:ff:a6:7e:ff:90:b7:f3:56:
         f5:ae:da:82:bb:14:80:24:71:4e:5a:dd:b0:34:3f:99:0b:d3:
         71:47:0d:5d:42:db:e6:7d:ad:c0:21:0f:8d:0b:86:e1:e5:af:
         b7:7b:80:e1:c6:fd:a2:17:fe:2a:55:46:e1:5e:16:4e:94:15:
         d6:d6:7e:cf:b6:00:e2:d3:b8:6e:25:e0:5d:e9:5b:d8:6b:2f:
         8e:9e:3d:79:4b:68:5c:58:a6:17:60:7d:53:cf:e7:3c:b1:57:
         6f:c9:ad:5c:c5:2e:a1:71:24:a4:5c:5b:bb:13:36:c1:f3:3b:
         54:1f:cd:7d:82:27:f6:af:22:e8:be:df:87:2e:a4:f4:e1:74:
         41:30:24:6e:3c:33:e3:79:7d:a8:41:0c:3e:80:c6:09:70:fe:
         12:d5:54:67:03:3d:23:3c:1a:63:81:30:f7:73:08:02:e9:b5:
         2b:83:92:87:d7:67:a3:40:d1:44:98:8b:bf:09:55:95:18:60:
         7f:e2:c4:4d:3b:89:b4:7f:70:6c:bd:d1:30:77:bf:63:5b:1c:
         9a:b3:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:26 2025 by rpki-client