Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27da4372-28cc-3f9f-a428-100dbb240185.roa
File:                     27da4372-28cc-3f9f-a428-100dbb240185.roa (raw, json)
Hash identifier:          YbBUxs7R1N4VAKmEVrXimQXsmBjuY4vgey5c8vzCkKI=
Subject key identifier:   3C:92:56:82:F3:CB:94:25:3C:65:61:E3:69:00:B6:2A:81:DE:4B:33
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A66C0951732D5235F4C238880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27da4372-28cc-3f9f-a428-100dbb240185.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     134346
IP address blocks:        2001:470:3fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:95:17:32:d5:23:5f:4c:23:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=9ef99a0b-c557-4f85-b92d-9024e8d62d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:59:84:64:39:35:ed:c5:48:9e:75:88:ce:
                    94:28:b0:9d:bf:7b:11:c2:92:1b:2b:6f:18:92:bc:
                    9e:76:d9:fc:c7:07:07:98:bc:8c:e5:fd:bd:10:5c:
                    a2:07:a1:8b:a6:53:50:dd:5d:30:3f:cc:97:2c:1f:
                    b7:b4:de:a9:02:dd:10:a3:5c:54:41:18:47:20:b9:
                    a4:64:83:76:f6:8e:b4:42:d4:3f:12:c8:b6:63:cb:
                    d4:29:ef:7d:c5:af:a0:f3:28:47:94:7d:ed:1b:1e:
                    08:64:48:12:d4:15:b1:5e:1a:1f:61:cc:0b:38:8c:
                    f0:46:16:03:7b:92:be:ad:ea:01:85:2f:b4:1a:3d:
                    41:a2:45:e9:72:04:27:ec:22:58:d2:a0:7a:ab:2d:
                    a7:c2:fd:4b:12:58:6c:1c:38:48:4b:1a:5f:15:55:
                    a0:e7:39:0b:2f:db:30:47:9c:60:1d:d4:01:20:cc:
                    d2:5f:08:14:d5:6d:a5:20:05:39:4a:f3:81:d0:ad:
                    e0:f6:4a:f6:b6:d1:b0:fb:ce:45:8d:43:5b:09:84:
                    9d:ad:f0:a8:e0:b9:44:6d:e4:cd:57:6c:21:f3:a6:
                    03:5f:84:5b:02:6c:63:b9:4b:f6:25:4a:83:20:4d:
                    e9:a7:74:b1:c3:e4:70:57:b7:ae:14:7d:bf:62:e5:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:92:56:82:F3:CB:94:25:3C:65:61:E3:69:00:B6:2A:81:DE:4B:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27da4372-28cc-3f9f-a428-100dbb240185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d8:4c:24:74:d3:fc:e7:d5:9b:43:4c:4a:7e:28:d3:75:93:
         58:e3:55:c4:36:d8:ab:60:66:7f:9b:68:02:25:42:b0:58:84:
         40:75:7c:d2:39:f8:e6:1c:7f:43:99:fd:77:64:89:b1:4d:23:
         31:33:f7:77:5c:ea:01:e3:34:54:15:c3:30:58:6f:30:3f:8e:
         a1:a9:1c:69:99:19:60:cf:80:46:0e:25:ae:8d:be:5e:dd:09:
         93:ad:3a:41:c2:f2:59:60:5b:82:cd:55:55:5e:40:c5:5e:f5:
         d9:cb:7d:28:a6:40:82:e0:0b:b2:e6:1e:7c:ff:2b:0d:2a:26:
         47:04:87:18:e3:07:94:37:e2:5a:83:62:0e:b6:f0:5a:ba:01:
         19:87:fc:ec:dd:94:ad:81:4f:72:09:10:ab:4c:f8:bd:3d:7d:
         f3:fe:5b:b8:46:c2:9d:31:be:03:ac:2a:42:a6:2a:f6:55:ac:
         41:b3:b3:3b:88:ec:f4:8c:cb:d3:b1:96:4c:fb:a2:2c:c9:10:
         7c:3c:0c:f1:32:61:54:95:c3:ea:d5:7b:32:5c:23:17:83:60:
         b5:7d:c4:be:1a:4e:6c:dc:03:b1:5c:d0:37:57:61:a5:1b:88:
         9b:fd:aa:f2:4b:78:1b:87:db:28:eb:80:f4:fd:fc:3c:41:76:
         02:b1:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:47:54 2025 by rpki-client