Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/202587e8-32c1-3589-8005-763b84c582ec.roa
File:                     202587e8-32c1-3589-8005-763b84c582ec.roa (raw, json)
Hash identifier:          TaM4rPy/FMkNy2pUwDL13l3t1q3S/wh/0bFCoMifANc=
Subject key identifier:   C2:7A:13:DF:F3:6E:BB:3E:7B:31:0B:83:8B:34:BC:78:8B:77:DE:4F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BDCBA38E510159E932A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/202587e8-32c1-3589-8005-763b84c582ec.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     54804
IP address blocks:        2001:470:30b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:dc:ba:38:e5:10:15:9e:93:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=823182b1-4431-4136-af6d-b0d9ed1a386c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:98:cc:8c:b4:3d:93:fc:b3:f6:af:fd:7d:
                    c8:34:6c:1d:4d:ac:65:1f:f6:e0:f0:68:91:5b:ab:
                    b6:0a:39:29:53:a0:ab:9c:05:e3:f7:5f:1b:37:70:
                    f0:9d:0a:f6:8b:a6:07:bc:c0:29:78:eb:03:13:91:
                    b1:4f:8a:a0:ee:23:f6:86:d1:e2:b1:9e:a3:c2:e5:
                    0f:c5:11:dd:3c:af:45:9e:fa:0c:55:2f:b9:b8:50:
                    09:92:99:2c:78:ea:ce:25:d6:1c:02:85:82:16:6e:
                    9d:15:ed:e7:13:33:c4:d6:26:d0:92:4a:9d:32:26:
                    c9:55:3b:6e:70:81:12:f0:99:92:03:a9:3f:0f:8a:
                    9c:cb:92:a3:cb:87:58:73:6d:e6:5d:e4:12:e8:31:
                    81:d2:3c:cc:23:81:f1:87:d5:5e:37:1e:1f:43:60:
                    fd:65:f6:38:84:54:99:7d:f0:8c:1e:ab:47:7f:82:
                    34:a9:75:be:37:7d:cc:92:1b:4d:53:69:bf:c3:e1:
                    cd:dc:96:27:a3:c8:7e:20:7d:a8:64:99:64:af:23:
                    ee:29:4e:f0:04:ca:25:85:fd:6d:9e:9b:1b:07:87:
                    b9:2e:e4:01:39:61:19:4e:3e:b1:65:0e:fc:34:ff:
                    25:e3:1f:81:40:ae:9f:46:3f:ca:1b:5c:71:e3:04:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7A:13:DF:F3:6E:BB:3E:7B:31:0B:83:8B:34:BC:78:8B:77:DE:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/202587e8-32c1-3589-8005-763b84c582ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:30b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:37:55:a9:47:19:a3:c1:eb:83:a5:f5:e1:cf:c1:9f:5d:d2:
         6c:08:eb:47:3d:86:cb:f1:d1:76:e4:41:47:35:26:ea:f9:d5:
         ba:84:e1:1f:97:02:18:cf:21:d4:81:8e:b6:45:9a:b8:d2:f1:
         8e:30:14:2d:d5:40:f5:ff:1e:21:87:a8:fc:e5:01:c3:59:44:
         66:6d:5f:7f:d4:42:98:c4:d0:4d:62:4b:84:47:5e:82:af:ec:
         d6:2c:2b:63:11:ce:64:29:d7:77:f9:96:be:76:71:5a:06:b0:
         e1:d7:5a:cc:3c:60:bc:b2:60:8b:2f:c0:fd:49:fe:f6:35:65:
         10:1b:54:45:45:0c:18:e3:c9:8b:01:83:29:44:0e:a4:3e:01:
         0f:9c:45:fe:24:8f:dc:9f:16:6d:72:21:b5:16:bd:de:85:a7:
         6a:20:e5:0c:c7:8a:2c:79:fb:ab:d2:ce:28:5b:f4:13:f7:e1:
         7a:18:4c:84:4d:75:a3:2b:d6:7f:27:99:14:b7:5f:42:be:97:
         5f:2a:d2:3c:d9:d5:36:42:1d:3b:40:38:b1:ad:fb:fd:7f:78:
         33:59:c0:34:8d:89:8a:03:cb:dc:a0:0e:74:0a:1d:e2:2f:9a:
         57:60:7b:eb:63:85:cd:11:aa:5e:4e:80:0c:b8:f5:24:75:85:
         fa:79:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:44 2025 by rpki-client