Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6bab9d46-da69-3ba6-97a3-fd19a4844b87.roa
File:                     6bab9d46-da69-3ba6-97a3-fd19a4844b87.roa (raw, json)
Hash identifier:          eif+IqtnB5L5AhZZQS4fZJwrby0/Epw6REI8o5r/OpA=
Subject key identifier:   03:A9:B5:93:43:29:41:6E:70:DE:2F:7A:9A:BA:74:2C:94:19:F8:8C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BF140CCC4EFBB778F8D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6bab9d46-da69-3ba6-97a3-fd19a4844b87.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     19844
IP address blocks:        2001:470:12d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:f1:40:cc:c4:ef:bb:77:8f:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=2cd9eea7-11c0-4e05-bcdd-292966889250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5c:19:cc:6a:6a:53:68:a4:46:16:4f:4c:4a:
                    eb:9a:84:e7:1b:f9:17:b8:ed:bc:45:f5:ad:27:e5:
                    13:d5:1e:1e:1a:2c:b3:38:74:5f:1a:9c:42:f4:f2:
                    18:a1:4f:85:5c:86:00:11:c2:ab:a6:ed:ff:c7:68:
                    d5:ac:54:e8:73:1f:6a:ad:20:99:0a:5a:d6:96:44:
                    ed:c7:20:80:c5:7c:b6:17:4e:fc:00:09:05:b2:de:
                    87:25:5a:79:88:58:e7:cf:0a:49:64:b0:fc:25:09:
                    42:46:0f:f5:90:db:0e:da:4a:de:c7:67:04:fd:ad:
                    48:dd:12:a8:52:c9:c4:6a:21:cf:82:4d:a0:33:d0:
                    97:27:3f:83:11:45:34:66:42:3b:f1:16:4c:34:15:
                    3e:27:08:92:63:a3:03:02:79:df:93:d6:74:0d:7e:
                    64:bb:57:a2:17:91:b8:1c:9c:1d:c3:b4:f7:a3:aa:
                    fc:56:d7:a8:b3:53:f5:c5:eb:2b:f6:d7:fd:06:37:
                    39:9e:cb:30:c5:e1:47:53:a0:27:ef:bb:52:94:76:
                    15:67:24:71:a6:0e:9d:93:07:e4:3a:fe:1b:e3:d3:
                    b3:c4:2f:d1:41:21:8c:94:24:c7:67:13:a3:a1:95:
                    a2:db:48:91:97:20:ab:f0:03:64:99:5c:d7:39:9b:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:B5:93:43:29:41:6E:70:DE:2F:7A:9A:BA:74:2C:94:19:F8:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6bab9d46-da69-3ba6-97a3-fd19a4844b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:12d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:74:e5:11:16:9c:18:bc:c2:a3:e8:db:bb:be:f4:67:dd:58:
         8a:84:0f:66:b3:be:15:41:b1:51:05:6d:8c:f0:00:17:e3:68:
         3d:81:63:a7:d9:0c:d0:03:d2:bf:27:c8:99:09:db:26:9c:43:
         6c:91:65:a3:54:fc:ae:56:85:5e:cb:43:b0:b7:60:d1:3d:0f:
         e2:36:25:2b:04:9c:3b:88:5c:53:f8:b1:04:01:f3:de:2d:ce:
         67:ed:86:4b:52:a4:bd:39:75:b3:75:40:dd:d9:50:0d:6f:93:
         d7:75:3c:2d:44:9f:8c:35:c7:52:60:7b:5f:c4:30:e5:c7:3a:
         e9:51:c7:d2:df:ee:60:cf:05:85:27:70:06:5c:1c:2b:02:e8:
         4b:e9:89:aa:95:44:a1:b2:4f:63:9f:bb:49:28:68:46:2e:09:
         b9:0f:93:04:9a:29:b9:65:0d:39:be:e0:6e:7e:0a:f6:ba:d3:
         70:00:17:73:e2:3d:e8:07:cf:c5:3f:bb:d3:93:44:c1:7e:21:
         40:a6:7b:88:a1:88:33:9b:ba:d7:82:57:3a:47:5a:af:35:23:
         db:0e:4b:5d:64:7e:4d:87:ec:7a:bf:a7:4a:ab:b5:a7:01:71:
         ba:10:78:3c:45:b4:00:ec:74:71:eb:5e:ad:6d:cb:ce:98:06:
         d9:cd:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:22 2025 by rpki-client