Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c7438b6-78e6-32a6-84e2-24f3c12ae19d.roa
File:                     5c7438b6-78e6-32a6-84e2-24f3c12ae19d.roa (raw, json)
Hash identifier:          6K9homWNrt1OKpRF0T/M/A7qYlaQ7zdQLxg9R0jjwaI=
Subject key identifier:   A9:6F:45:08:35:7E:A2:E0:9B:D7:CC:CD:41:2D:03:34:E3:9A:B0:CD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91C0348C7791C8FF4815600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c7438b6-78e6-32a6-84e2-24f3c12ae19d.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     10111
IP address blocks:        2001:470:302::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1c:03:48:c7:79:1c:8f:f4:81:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=9b37ac1c-46e5-4049-8c1f-189dcbba010c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9c:09:97:b5:a1:37:5e:17:97:07:0a:36:e3:
                    00:3c:46:81:b0:71:ad:1e:76:6d:94:02:32:6f:1d:
                    b1:ae:3d:ce:09:f5:9c:46:f2:05:2a:0f:94:e6:3d:
                    43:da:34:f2:9f:a9:69:24:d2:46:4a:f2:c9:c3:48:
                    7a:30:24:03:79:7b:ca:81:e4:ff:d4:d6:c6:76:e3:
                    dd:20:8f:a6:93:47:35:eb:78:89:f3:d3:28:d1:37:
                    97:60:80:0b:46:62:db:7a:bd:5b:12:16:da:33:0b:
                    36:6c:62:f0:13:fd:e2:95:08:c9:f4:13:38:06:cc:
                    1a:85:49:66:a2:06:cb:c3:ba:16:2b:54:e6:47:3e:
                    7b:60:f0:b4:bb:9a:12:5d:8e:75:be:6a:7f:f9:4b:
                    4c:09:b5:e9:bd:1c:21:ee:68:cb:f4:c8:73:92:2d:
                    9b:a9:3e:f9:60:a6:5e:8b:f4:f4:8c:79:ef:3f:92:
                    96:03:ed:13:6d:80:c0:bb:8f:c4:ca:da:93:fb:c5:
                    05:e5:9d:35:7d:5c:4d:38:8b:96:98:81:ba:41:1b:
                    4a:f2:f5:bb:e4:71:c0:62:3a:f0:c8:c9:96:8f:b1:
                    f5:d2:c6:19:95:90:57:04:c2:dd:df:66:95:5f:b0:
                    c2:83:58:ea:07:1f:17:04:cc:aa:b9:dd:59:88:9c:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6F:45:08:35:7E:A2:E0:9B:D7:CC:CD:41:2D:03:34:E3:9A:B0:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c7438b6-78e6-32a6-84e2-24f3c12ae19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:302::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:eb:6a:2a:de:9b:23:8e:d8:90:c5:f3:f1:ca:88:49:9a:38:
         36:35:47:d7:9c:45:fb:e0:65:cc:5d:9e:ca:a6:6c:cb:c5:fa:
         99:fa:c1:ea:b6:69:f7:64:b7:05:15:70:3b:8f:03:b0:4f:77:
         e9:41:18:ca:ad:5d:27:1a:d7:c1:ef:fe:39:85:07:0c:98:14:
         05:f1:75:3c:3b:6e:a4:c5:6b:07:2d:c9:83:e6:f1:d9:c2:1a:
         38:e9:b8:3b:ff:ff:bd:e2:6d:55:06:27:e3:41:0e:df:67:1e:
         5e:6a:fe:2b:11:d2:39:45:ae:29:50:52:dd:49:5b:0d:11:8f:
         91:cd:a3:2c:8f:dc:7a:54:a1:4d:9c:dc:60:b6:1c:d1:ff:6b:
         cc:56:e9:88:44:66:af:d7:95:38:6d:63:af:1c:39:62:1b:63:
         8e:4b:8a:7d:e6:00:e6:30:39:63:d1:41:26:65:08:13:76:08:
         1e:5e:7d:db:9b:dc:c2:46:8b:d6:b7:0d:09:1d:02:4a:78:66:
         7e:28:cf:b8:ad:7f:8a:85:e9:22:da:f8:31:45:4a:77:62:d7:
         60:f0:61:2c:89:2c:ae:48:b9:bc:28:cd:c5:c7:db:82:ff:5f:
         e0:10:a8:24:23:e4:01:50:eb:3f:a1:9f:e2:db:2c:ec:17:06:
         1b:93:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:40 2025 by rpki-client