Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/622aeb41-0c05-3106-ab4f-4fa4647dd726.roa
File:                     622aeb41-0c05-3106-ab4f-4fa4647dd726.roa (raw, json)
Hash identifier:          iydKeOqS4M25pcKKY0NaV85Q3n91lKE0l2TxI34EMoI=
Subject key identifier:   72:67:4A:9D:E8:4F:A8:B2:AC:52:4E:24:37:DA:09:C1:F6:11:DC:73
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BDB0F8DD5EF2F8514F400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/622aeb41-0c05-3106-ab4f-4fa4647dd726.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     33302
IP address blocks:        2001:470:19b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:db:0f:8d:d5:ef:2f:85:14:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=2fc78348-bad1-40de-8658-a427f9fddc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:cb:68:bc:75:f3:19:39:67:27:84:ec:64:
                    20:16:8e:7c:1a:32:61:26:cf:1c:e0:6d:fc:40:9c:
                    54:cd:cf:6c:5e:a9:47:56:11:32:06:c6:7c:68:1b:
                    a8:e5:a8:e7:a5:a2:dc:3e:44:18:cf:d1:48:c2:87:
                    f0:be:b4:f6:4b:ee:0c:71:40:39:f4:d8:0a:c2:76:
                    21:c6:76:af:73:fb:71:62:56:f3:21:19:fb:45:98:
                    0c:36:1e:1e:cd:84:95:be:4a:bb:5d:01:fd:61:5b:
                    35:9a:9d:56:e8:19:a9:83:af:a1:07:2b:59:a5:9f:
                    e4:cb:5d:0e:87:95:05:d1:bf:ac:c6:b4:55:19:87:
                    27:95:95:80:2b:8f:dc:2f:70:7a:29:ad:25:03:3d:
                    f1:a3:d4:74:ac:0d:31:0a:84:ef:86:99:9d:4c:48:
                    71:4e:9a:78:fd:a6:9a:9f:c6:ff:27:5e:f3:81:df:
                    b5:ad:9f:39:e5:45:c2:ce:f0:cb:28:fe:1c:50:4c:
                    71:5a:2b:1a:1c:ba:13:e9:07:b1:32:2d:b0:b3:62:
                    a5:af:a3:c2:c1:1c:14:fd:26:94:98:ec:6e:54:5a:
                    85:19:a0:65:7f:80:73:72:e3:5a:45:be:03:44:f9:
                    bc:d3:1a:20:9b:84:7b:f0:96:c9:6c:28:2c:c3:81:
                    11:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:67:4A:9D:E8:4F:A8:B2:AC:52:4E:24:37:DA:09:C1:F6:11:DC:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/622aeb41-0c05-3106-ab4f-4fa4647dd726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:19b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:9a:cf:a8:24:d3:d1:fc:81:b1:c7:1c:bb:c1:f5:45:e5:e1:
         4c:19:8c:93:b9:a0:ef:c9:4f:40:b4:0f:bd:08:b3:52:d6:42:
         c8:bc:4a:e3:8b:95:90:a7:c3:57:3d:13:f5:27:91:62:e5:44:
         c5:12:4a:b5:46:61:4f:52:3b:14:24:a7:15:ec:2c:e8:4f:42:
         80:29:40:27:1c:00:26:5f:41:68:bd:ba:1c:e6:a4:71:1c:03:
         c1:22:07:10:bd:74:8f:57:44:ab:8f:ca:7a:ec:dc:c2:d9:3a:
         3b:2f:58:3e:13:0a:ca:14:40:f0:90:83:e6:75:8d:a7:fa:1d:
         8b:1c:4e:e1:45:f2:03:5b:30:b5:1e:c5:5c:ea:bf:d1:d9:f5:
         bc:2f:7d:9f:ad:49:39:22:70:66:73:4e:e6:33:77:4f:9a:71:
         7b:f1:16:9c:17:fc:b8:92:e5:f6:6a:95:c0:45:ae:ed:a6:33:
         61:60:18:e4:a4:9f:91:7a:cb:37:d8:67:6c:24:a5:e5:69:d2:
         66:ce:f7:6f:68:b1:13:0e:11:c5:95:b1:d5:f4:d5:8e:17:04:
         87:35:28:c8:c3:fa:53:e4:d2:e4:09:44:5d:48:f8:d9:68:29:
         f2:bd:77:97:ff:ae:a7:b9:dc:35:1a:d2:0e:cd:3e:11:c2:dc:
         78:3d:ec:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:45 2025 by rpki-client