Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/134d0ff8-6e52-393f-b894-86cf8081f6d3.roa
File:                     134d0ff8-6e52-393f-b894-86cf8081f6d3.roa (raw, json)
Hash identifier:          JMeaC/n8dEkbCwyTNE2crj+y79lP+kmiQOwxn6HgkpU=
Subject key identifier:   00:D0:05:D5:2A:B5:63:2B:3B:00:C3:E4:BA:5C:B7:FA:45:8A:0B:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BDA2FAD7B1167094A8980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/134d0ff8-6e52-393f-b894-86cf8081f6d3.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     30900
IP address blocks:        2001:470:2d9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:da:2f:ad:7b:11:67:09:4a:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=7328b8bf-88f5-431e-82b5-5a781261974e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b1:55:23:01:18:87:ab:f8:73:73:22:7a:66:
                    d9:b3:ed:e6:1f:a4:f6:a6:a5:86:75:fd:58:52:5d:
                    f8:be:d5:4f:b4:d4:06:02:45:b9:a5:fc:9b:ee:18:
                    f0:20:70:55:e7:77:3b:8c:ac:48:f2:b1:e5:c8:19:
                    e1:cd:ba:76:b2:dd:75:06:01:89:cd:6c:16:55:5e:
                    cc:fe:ac:9b:b3:8d:81:ed:86:bd:3d:9d:d8:db:79:
                    f8:e3:d0:7f:c1:a6:eb:c9:59:25:9e:ad:c6:14:55:
                    6b:17:85:61:d8:e1:03:10:ba:14:32:1e:7a:cf:66:
                    36:af:42:b4:e6:19:3e:39:b9:3b:25:14:7c:2c:ec:
                    fa:b2:20:b4:ea:f5:1d:7a:9e:ab:fe:be:10:9f:23:
                    93:e8:8d:d9:09:2f:e7:f5:05:7f:e0:d9:a6:73:88:
                    56:ba:47:6b:27:ec:14:94:52:f5:ed:21:fc:8c:08:
                    f2:b3:46:f6:23:b1:82:1e:b2:69:1e:11:0c:55:a0:
                    c1:d2:8a:49:5a:4d:4e:82:93:cf:9c:90:30:af:be:
                    a5:45:f5:d9:d0:f1:73:19:40:12:5c:55:42:4b:5d:
                    57:4f:b5:8f:07:29:66:29:98:82:50:e7:67:b2:5f:
                    5b:ce:02:a9:f2:c8:44:49:63:e8:15:d1:a9:e3:4f:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D0:05:D5:2A:B5:63:2B:3B:00:C3:E4:BA:5C:B7:FA:45:8A:0B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/134d0ff8-6e52-393f-b894-86cf8081f6d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2d9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:db:4d:58:33:2f:33:16:b9:7b:73:a3:0d:b1:66:57:ee:b9:
         a8:62:cd:5f:82:3a:a0:d5:e8:58:94:74:5b:c8:d5:3d:94:a2:
         8a:09:cd:4f:52:1a:60:31:ad:93:4a:01:55:e8:43:64:f8:58:
         8b:04:a2:18:dc:9c:ae:65:22:1f:c0:0c:93:88:1a:e9:57:87:
         09:2b:a7:48:44:ca:2f:8b:95:3a:5e:cd:1f:d3:45:4b:79:e7:
         c1:ed:75:e9:e6:d4:29:99:0b:df:f3:63:f2:fd:52:33:28:17:
         58:cd:de:be:74:e6:9d:a1:ca:b4:47:25:01:63:52:32:ed:85:
         bf:79:0b:b2:b4:b3:1b:9e:98:79:18:b0:07:3b:82:52:7e:67:
         b8:bd:91:b4:15:49:f8:57:31:0d:ac:02:0d:15:5d:af:c8:aa:
         53:79:55:a6:87:a0:44:d6:92:38:8e:fe:1c:e6:96:53:ec:5a:
         cf:2f:46:80:da:be:49:e1:a5:cd:81:93:be:2f:c0:c1:bc:b6:
         e4:a2:2a:a3:8c:36:0d:08:37:3a:fe:87:88:01:a3:00:06:cc:
         63:21:11:b6:8e:db:bc:ed:26:60:ea:9e:e7:9b:8c:d4:52:7e:
         4a:2b:01:4c:fd:b9:46:2b:10:23:d3:96:07:c2:43:5d:9f:3c:
         6f:06:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:22 2025 by rpki-client