Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4be2201a-ffa9-354a-8dc1-50b8fedb9a01.roa
File:                     4be2201a-ffa9-354a-8dc1-50b8fedb9a01.roa (raw, json)
Hash identifier:          BaLK5KBU6R4VfcsRIUMbyhfDJ767dRte60BpFXtPSzU=
Subject key identifier:   58:A0:E8:15:48:DA:44:87:27:CF:BD:99:83:4C:70:C2:1C:49:D7:60
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91C03D6CE9C2B3F75051A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4be2201a-ffa9-354a-8dc1-50b8fedb9a01.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     22890
IP address blocks:        2001:470:30f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1c:03:d6:ce:9c:2b:3f:75:05:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=64c629b4-24fb-4caf-ae9d-a787cad5ef40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0c:1a:7d:64:e6:e0:39:21:83:a4:41:a9:a7:
                    83:71:ef:c7:4e:ca:b0:b1:2e:64:33:95:a3:cf:d4:
                    59:cd:9c:82:2c:2e:07:87:cd:28:2e:89:3a:78:32:
                    f6:6f:86:5c:1c:e0:3f:88:a3:05:b5:63:77:5a:b1:
                    e4:ca:a6:2a:b6:7a:5f:36:40:ce:fd:b7:9e:21:82:
                    45:9f:df:d5:16:93:2c:58:42:bf:d8:48:ab:cd:ee:
                    7c:2a:34:f1:da:97:e7:2b:26:78:45:0b:0e:51:d2:
                    db:75:b5:ba:25:b8:9d:06:42:84:90:60:00:2a:78:
                    23:dc:5d:d3:f0:e8:a4:d3:ae:18:3a:3c:15:51:e1:
                    13:ee:cb:23:1e:2c:bc:e0:47:74:2a:84:74:98:cf:
                    79:65:99:f9:ec:9b:97:ed:4b:37:28:1b:06:55:aa:
                    61:47:e0:e6:26:3b:2f:85:41:e9:bd:b2:14:9b:e5:
                    56:83:3d:eb:85:7f:ee:17:17:2a:9c:af:57:77:b6:
                    7a:f1:c6:72:6f:0f:6b:32:f4:8f:e8:48:51:1e:fe:
                    eb:e9:26:56:cb:b5:02:93:b2:48:fb:01:a0:46:98:
                    f4:82:01:69:38:f3:57:07:42:96:28:dd:92:c0:82:
                    5b:45:c5:e4:73:84:57:88:01:8d:48:da:be:58:96:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:E8:15:48:DA:44:87:27:CF:BD:99:83:4C:70:C2:1C:49:D7:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4be2201a-ffa9-354a-8dc1-50b8fedb9a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:30f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:56:30:72:59:9e:5e:48:66:f3:b8:45:e4:26:bc:5f:f5:c1:
         d6:5e:fb:35:1d:93:e2:4a:d2:7d:1d:82:df:34:29:ea:2f:9b:
         af:9a:4b:ea:14:9e:d3:9c:35:cf:54:74:ce:72:9e:04:c7:2a:
         3c:76:49:ef:94:9d:63:54:ef:d2:2d:a5:81:fe:45:96:ff:08:
         37:6e:e4:7b:b5:fb:b7:d8:22:c8:af:4f:98:c0:f2:b6:34:22:
         00:44:73:1d:09:17:f3:b2:96:98:63:85:36:48:83:b7:9c:cf:
         dd:7a:02:0d:4a:b6:d1:3b:88:33:92:c0:bb:86:84:32:a5:4c:
         43:f3:d4:9a:73:c8:e0:33:5e:0e:94:f9:83:a0:49:d9:31:b3:
         7c:b1:e5:63:53:e9:82:85:d6:2b:7d:80:01:3c:f9:44:ed:4d:
         61:28:dd:b8:ec:19:bb:3c:7f:b1:02:54:9b:92:43:e6:55:eb:
         11:ef:0a:5f:79:20:3d:1c:b3:49:12:88:39:e8:eb:5e:fc:70:
         00:6b:03:cf:70:e2:e5:54:56:ae:16:8a:93:3c:2e:52:88:4e:
         34:d7:fc:16:cc:9c:b5:fd:41:97:75:a6:39:0d:c1:a0:f5:6e:
         06:d5:a3:68:bd:63:e4:b3:ec:42:f9:d8:6e:5a:c5:43:9b:c7:
         fe:78:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:44:56 2025 by rpki-client