Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa
File:                     40c0a776-c145-3a93-b32c-e24909188dcc.roa (raw, json)
Hash identifier:          rfaLqhW6bdSv3NERn86FKEzYGIIe1oXQSdxi1rokXQ0=
Subject key identifier:   64:89:8A:93:8E:B6:D2:B9:01:72:5C:21:6E:8F:DD:24:D9:5C:20:DC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BCA242AEFF382CA17CB60
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     22296
IP address blocks:        2001:470:8f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ca:24:2a:ef:f3:82:ca:17:cb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=97bcd4c0-fc10-43bb-ba1c-6b82a976cf1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:d7:fb:9a:1d:bf:5d:b0:ad:41:5a:1f:b6:
                    1c:51:dd:1b:a5:97:1a:3f:54:8d:85:41:ff:a0:cd:
                    83:2a:33:58:2b:f9:e7:a2:e1:88:f5:15:7c:3a:d1:
                    67:f4:35:79:97:aa:e2:46:6b:87:1f:2f:15:45:a1:
                    ca:06:f4:05:15:f3:df:0b:d0:5b:f3:00:f8:4a:d7:
                    80:a9:46:f8:cd:4e:eb:4c:09:8a:0c:5e:2a:39:81:
                    73:9a:d1:a6:e2:12:21:c5:ee:2a:45:d8:cd:b6:67:
                    86:2b:dc:21:36:26:98:18:03:3e:58:8e:fa:6e:e7:
                    7a:b4:c2:53:d3:f9:20:42:00:b5:7f:e4:3b:6b:06:
                    84:a6:0e:94:49:44:89:51:01:15:69:56:4c:4c:24:
                    b8:46:7f:ff:aa:b1:d0:7e:6b:0b:ff:05:87:d7:10:
                    57:8b:81:75:20:21:7f:94:f4:e6:1c:f3:d6:45:3b:
                    17:dd:cd:99:a2:e3:7e:cf:97:96:8a:c5:32:18:83:
                    1b:22:6c:47:d3:93:79:e1:97:1f:a5:56:fc:3d:8e:
                    cd:cb:d0:ee:bf:5d:5e:3e:2c:1a:56:f3:c8:39:0d:
                    9b:64:66:f4:05:27:42:24:56:8a:bc:69:df:75:68:
                    c4:a7:52:87:6b:01:36:51:cb:52:8c:47:a1:3c:b1:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:89:8A:93:8E:B6:D2:B9:01:72:5C:21:6E:8F:DD:24:D9:5C:20:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:8f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a1:63:3b:dd:be:6a:16:01:2f:86:dc:53:2a:84:09:dc:24:
         47:d1:e6:b2:bc:c6:a9:f9:57:7c:c2:cd:95:49:73:6e:98:12:
         99:56:9e:21:21:a1:92:ca:f6:45:99:ca:fa:92:fc:6a:cf:ee:
         0f:ff:79:20:1b:b8:35:aa:5d:6a:be:26:53:f4:05:be:49:d5:
         a8:4c:07:f9:79:fd:e1:72:52:e9:8e:86:53:db:d3:2f:62:f8:
         24:8b:0f:f3:6e:91:e0:e2:66:d0:31:e8:fa:e9:ff:c2:a0:d6:
         49:db:7b:01:07:dd:47:40:eb:fd:eb:a7:7e:86:f1:c1:ea:b8:
         a3:c6:11:d6:fe:46:f9:8c:48:6d:e2:ba:9c:28:7a:e6:90:36:
         d1:19:6b:0f:ef:95:03:82:01:b0:16:aa:a3:fe:fb:ed:25:26:
         27:2c:8e:b5:bb:98:91:7a:90:8b:d8:6f:21:7f:ec:3a:44:81:
         a7:f3:e3:c2:44:29:e4:aa:c7:0b:4b:f2:b1:cf:55:dc:d3:c3:
         2f:e6:3e:18:e1:12:ad:09:6a:f0:08:d4:76:0a:7b:58:92:64:
         71:62:5b:0b:fb:25:95:33:e1:14:67:a3:ae:af:bd:bd:56:94:
         e9:b2:68:84:dd:93:91:53:3a:b4:bd:5c:ab:a9:97:95:ae:e3:
         fc:fa:37:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:31:08 2025 by rpki-client