Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa
File:                     4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa (raw, json)
Hash identifier:          jcwhMHwYtsLmD3YhJdolNsPpm6ACCweGn+CiKGFzGp8=
Subject key identifier:   DE:7F:60:57:05:4C:F4:4A:DD:43:1D:2F:E6:AF:A8:8B:AB:81:D0:4F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BD251C3F4C5CBD58D87C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     140577
IP address blocks:        2001:470:24a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:d2:51:c3:f4:c5:cb:d5:8d:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=96ca2a9f-6efa-4341-b3bb-dd2671637c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:ac:f3:01:f6:fc:77:8e:d5:5e:be:a8:fa:
                    eb:36:8d:56:11:6d:85:5f:74:02:ac:2f:af:36:21:
                    27:aa:59:93:7c:08:63:65:4f:03:70:11:74:f8:f2:
                    62:ff:88:e9:8d:23:7a:6e:de:a7:0f:db:d3:a0:bb:
                    d6:08:0f:0f:94:ce:7e:7c:f3:46:26:e1:d1:07:20:
                    d5:e4:53:00:6f:f8:22:06:a5:f8:b3:13:df:cb:ec:
                    ff:5d:5c:fa:71:4e:3c:30:62:f1:04:4e:bb:64:91:
                    2b:bd:31:1b:22:84:6c:c3:d3:44:cf:20:b0:68:4a:
                    9a:77:ff:84:f8:d4:d8:07:67:f7:c6:43:7c:89:2a:
                    75:56:8e:f0:9f:50:5f:c3:ec:f9:79:6c:56:9b:49:
                    b1:3a:38:85:1f:fb:8f:d1:75:f4:61:f4:58:59:c9:
                    72:e5:f7:39:3f:54:4e:bf:70:1d:a3:f2:1a:6d:9c:
                    e5:49:3b:83:76:b2:e2:10:c6:4f:a1:a5:c8:3c:6d:
                    fe:be:2d:42:b5:79:d1:32:a7:1f:14:ac:39:84:65:
                    2a:ad:70:6f:2a:54:0c:26:36:8e:c6:2a:34:5f:44:
                    d1:03:83:8d:0a:66:c3:6d:34:12:7a:a9:9c:19:a7:
                    50:52:d0:21:7c:93:cd:b4:bc:95:1d:8f:3c:db:f6:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7F:60:57:05:4C:F4:4A:DD:43:1D:2F:E6:AF:A8:8B:AB:81:D0:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fbddf9b-22eb-3977-b6bb-5014481ed6c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:24a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:21:05:22:cd:1c:e7:4d:07:d6:25:75:72:5a:6c:59:01:5b:
         2e:fd:3c:a5:71:78:56:49:6c:93:ba:41:03:b0:8a:4a:b5:f8:
         44:02:d4:e1:d2:dc:4d:58:23:bc:cd:5c:8f:d8:b1:08:46:9c:
         25:f0:23:92:ec:9d:87:90:67:67:84:0d:09:f0:4f:6a:f7:c9:
         f3:03:ba:3f:e7:7c:fe:5b:a1:a0:9a:ab:1c:be:62:59:94:53:
         30:63:a2:2a:d0:9b:9d:9b:33:5d:cf:c0:10:79:b9:52:fb:c5:
         53:18:46:d0:91:d6:bd:83:4b:9a:15:93:c3:b0:53:53:ef:f5:
         a7:e6:af:39:f2:83:a7:be:34:43:65:f4:e5:39:f3:4a:54:d0:
         c6:af:d7:38:de:81:75:59:37:f4:4c:1b:2a:93:3f:91:ed:bc:
         06:b8:25:7e:cc:54:20:b5:e6:d8:df:a5:fe:d3:44:8d:50:49:
         e4:53:3b:f8:b5:50:4f:3a:e4:f6:84:e9:cf:69:e5:e2:3f:00:
         dd:f8:da:b3:62:e8:fb:8a:2b:2d:21:d7:49:80:df:80:b1:65:
         3b:30:99:2a:2f:79:26:0a:67:fc:c3:79:18:3b:86:f4:d4:f0:
         89:63:8e:96:f4:da:1a:44:15:17:fe:15:ec:87:85:77:a6:9b:
         a8:80:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:22 2025 by rpki-client