Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397d9e7b-2f32-324f-aa57-89d6ca9ab42c.roa
File:                     397d9e7b-2f32-324f-aa57-89d6ca9ab42c.roa (raw, json)
Hash identifier:          lC0jNH91V1ix6e5aCiGD2IEwD9kTP9lD1zNNrBjqYLM=
Subject key identifier:   E1:58:E7:6D:00:85:FC:27:CD:66:13:12:CA:1F:1A:CA:A1:DB:53:ED
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584ABD4BAD124EF79C19F00A4880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397d9e7b-2f32-324f-aa57-89d6ca9ab42c.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     216361
IP address blocks:        2001:470:37f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:ad:12:4e:f7:9c:19:f0:0a:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=c9b9ed75-52f8-4c52-9aa3-6b3b3b2e0f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ef:fe:f8:26:80:79:5f:9d:71:4d:2e:84:92:
                    e5:6d:5c:6a:97:f6:1c:d7:35:f3:7b:4f:6c:51:80:
                    7d:2d:fb:34:34:c5:6f:36:00:e9:f1:d2:e2:3d:3d:
                    9d:e1:55:66:f2:65:56:ca:65:bf:08:bb:eb:2b:58:
                    04:49:6c:cd:19:27:1e:c6:46:77:4a:15:51:a7:c2:
                    2f:97:21:33:72:b1:9f:28:30:8f:4b:99:db:98:39:
                    99:be:e7:f5:dd:9e:5d:a4:23:aa:03:01:a3:f6:7a:
                    eb:b5:7c:dc:ed:fc:8e:20:d6:a1:35:aa:a7:d1:a3:
                    7a:c8:b1:95:c6:be:0e:7b:da:44:0b:84:39:7c:54:
                    53:af:d7:e6:bc:de:dd:e5:f5:54:e2:7e:5d:06:f3:
                    85:3d:f8:53:d7:e7:45:16:3e:ed:e7:61:37:c1:00:
                    c1:b5:70:c4:3d:df:ad:cc:30:ab:2b:9b:e9:10:26:
                    38:18:a5:f2:2c:b7:0a:ff:f6:5e:89:f3:37:4e:db:
                    01:55:cf:43:2d:1a:5c:6b:73:69:f7:35:15:b7:68:
                    fa:f9:be:2a:79:78:9a:5a:e6:3f:0e:3c:58:71:f8:
                    55:b0:ec:c8:6e:a9:d4:06:2f:01:55:f2:18:55:58:
                    de:6d:b7:94:57:d5:c9:01:6d:18:aa:1c:4d:84:6b:
                    fb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:58:E7:6D:00:85:FC:27:CD:66:13:12:CA:1F:1A:CA:A1:DB:53:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397d9e7b-2f32-324f-aa57-89d6ca9ab42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:37f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:4d:03:b0:70:a0:52:31:45:79:bf:38:78:5b:9d:75:f8:21:
         fa:7c:29:45:fa:7e:8e:0f:aa:8e:73:b1:95:70:6c:5d:de:64:
         3f:26:df:94:88:12:c4:7a:e2:a5:67:32:5c:17:e2:0e:27:b7:
         8c:63:ec:bc:88:e1:a2:8b:48:09:28:68:f5:b8:5e:ee:64:9a:
         65:4d:06:fc:53:2b:55:40:ca:09:c7:c8:22:b0:e8:1b:c9:6d:
         9f:b0:f1:de:b3:17:a9:e7:16:4e:28:e8:7a:ab:5d:72:37:a4:
         3a:96:72:72:45:02:e3:a2:16:c0:eb:2e:ad:b8:1a:02:71:42:
         fc:d1:74:31:36:91:4b:cb:ab:f6:52:89:76:2c:f3:6f:38:7a:
         e1:09:32:22:05:c7:e2:23:d2:1e:a9:8d:fb:ab:48:75:70:2b:
         95:41:45:ff:68:66:27:c0:af:35:d5:d3:de:96:bc:ca:ae:47:
         ae:7f:87:ba:6b:93:eb:cd:75:20:ac:f3:39:da:79:6e:34:96:
         e3:6c:8e:21:84:90:da:5f:b6:e7:1f:05:2d:69:14:24:85:37:
         0a:99:fc:52:ef:ba:51:b1:20:f1:e9:cf:82:1b:15:66:f5:d0:
         3a:0b:74:67:f2:13:37:a3:59:ba:27:41:54:49:44:c6:c1:64:
         dc:93:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:10 2025 by rpki-client