Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/179d0746-4c9b-3ca4-b300-217a5cd1c674.roa
File:                     179d0746-4c9b-3ca4-b300-217a5cd1c674.roa (raw, json)
Hash identifier:          9LDgd5MBYiw7EAUZWdCawNar2zdIfnz98+xvjBDo8zw=
Subject key identifier:   36:59:58:78:E9:2D:1D:DE:46:26:98:84:2D:45:47:31:4C:8A:AE:49
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BEB221BAF79B11C74A6C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/179d0746-4c9b-3ca4-b300-217a5cd1c674.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     26073
IP address blocks:        2001:470:10d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:eb:22:1b:af:79:b1:1c:74:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=d375aee1-9c97-4441-bb83-21e3c351c36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:85:b2:82:c5:ee:1b:7e:62:e5:73:39:30:b7:
                    db:bd:ba:53:8b:63:c8:f9:e7:39:93:24:f5:5c:8a:
                    85:6b:1f:fe:e4:93:c3:5e:ec:c5:98:2b:a7:60:64:
                    1e:92:0d:41:ce:67:ad:e9:a9:bb:2b:a3:f4:bd:2b:
                    ac:c8:69:79:ed:1b:b6:63:b3:f8:8c:92:b6:00:f6:
                    c8:7a:e2:26:5d:8f:05:04:9f:cd:6c:a8:7d:c8:03:
                    66:e8:57:68:e8:af:73:9c:b5:82:d3:df:89:ee:aa:
                    51:38:42:14:91:89:ad:da:42:31:90:3a:e5:85:bf:
                    02:67:6a:7f:09:0a:6c:7e:30:af:34:9a:5c:84:e3:
                    e4:76:46:87:40:7e:48:0d:0d:47:46:94:ec:73:bc:
                    2d:60:dc:7d:75:1a:3c:b9:74:1a:ba:22:09:c8:33:
                    24:35:cc:0c:3c:07:ba:9d:f5:e5:ba:45:57:94:11:
                    33:9b:0e:93:8f:7c:cf:a8:9c:66:ea:70:af:6e:03:
                    d8:21:53:62:06:be:ab:55:e6:10:4b:ff:da:02:58:
                    98:d1:02:6f:4b:89:c3:fa:a6:42:43:be:18:ec:dc:
                    47:c1:7f:3f:1b:c3:c0:a6:a4:1f:66:35:7e:09:87:
                    6a:d7:07:05:b4:6e:fd:71:33:99:b4:50:e1:a8:11:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:59:58:78:E9:2D:1D:DE:46:26:98:84:2D:45:47:31:4C:8A:AE:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/179d0746-4c9b-3ca4-b300-217a5cd1c674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:10d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:05:d4:23:75:a8:d7:c6:19:f9:c0:d4:43:72:03:e3:9a:4d:
         ec:95:9a:4c:02:18:fc:1d:c9:cd:c8:11:8c:6f:d8:ba:6c:2e:
         15:cd:03:a5:6d:16:7c:0d:d4:1c:31:83:13:c2:8c:af:92:68:
         46:ff:44:f5:24:a1:3d:6b:4e:18:8e:52:2f:2a:a6:32:06:b7:
         09:36:de:2f:a4:6d:ae:6f:54:7a:f5:34:9a:82:db:bd:e0:3e:
         be:6d:ae:50:bf:a4:a3:9a:d8:1b:6f:6b:8b:c8:85:65:fa:4d:
         67:1b:f5:2b:d9:fb:f2:71:ed:63:14:79:a5:71:22:7a:cc:8d:
         18:9a:b2:94:7b:82:ce:23:a9:90:17:48:c3:5b:ab:df:65:9f:
         cf:e7:04:87:1a:29:e7:ab:03:10:d1:89:c5:0a:80:82:6b:d9:
         d6:15:53:fd:f1:a6:f4:65:16:12:33:27:5b:3f:8f:4f:ce:dd:
         85:58:de:ff:e0:a7:d0:b6:5d:59:4c:49:40:54:d5:9e:b4:cd:
         fa:44:47:36:5f:f8:d1:6f:45:ce:56:66:66:7b:0e:38:79:d7:
         13:13:8b:3e:80:c2:8d:ab:1b:0a:6a:89:41:56:36:35:d3:72:
         d1:2d:1f:f7:60:4d:7e:62:ea:92:6c:e4:d5:fc:5a:34:fe:2e:
         2b:6c:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:59 2025 by rpki-client