Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c830f48-aa9a-3553-9653-072921bdcde2.roa
File:                     6c830f48-aa9a-3553-9653-072921bdcde2.roa (raw, json)
Hash identifier:          ilX48GbJmTbD4qQcaxLIwaGMVrQP2JMGW6tnoQBaAdA=
Subject key identifier:   FC:17:D2:F9:6E:FA:09:C7:3F:11:BF:13:B1:E1:70:5C:C3:DC:D3:42
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A7E7B9FE5D58E70105599E8E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c830f48-aa9a-3553-9653-072921bdcde2.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     394728
IP address blocks:        2001:470:2e6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:9f:e5:d5:8e:70:10:55:99:e8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=9614cb10-c424-49da-8d98-6f9ea4113a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9a:7d:da:34:2a:de:d6:05:b6:1c:8d:85:11:
                    0e:38:9b:32:fb:c2:25:f5:53:4e:13:22:a6:bd:23:
                    00:2f:f7:8b:82:20:ee:9b:d2:f0:a2:f1:f3:23:2c:
                    19:4d:c5:c1:b6:bc:f6:0c:be:d8:ab:04:d4:b6:5e:
                    91:ea:c4:8c:36:4a:fa:d7:af:88:56:49:06:92:d5:
                    b9:39:a3:0c:67:f9:fb:fd:91:aa:07:65:9f:16:49:
                    38:69:dd:aa:a1:0a:5a:a1:f8:0a:3f:7d:03:be:e5:
                    c4:14:4c:29:25:21:dd:fe:13:b2:4c:a5:d7:8c:5c:
                    14:ee:08:9c:ec:a3:ca:27:ac:ba:c6:d9:67:12:f2:
                    e3:6e:c9:49:7c:03:e1:4c:84:d3:82:a1:5b:2a:4e:
                    aa:1b:af:68:bb:54:a1:37:5d:07:2e:46:20:67:56:
                    3a:d7:95:a4:b3:f0:91:4e:03:e1:9a:96:80:f7:91:
                    cc:78:06:e8:e5:f8:28:ed:6b:3c:3b:c9:f7:99:c3:
                    32:87:3a:d1:1c:d2:83:6b:f1:4b:f9:02:00:0a:7b:
                    43:24:61:c7:5e:1e:0f:39:bc:a1:6f:9e:38:88:67:
                    fd:ff:a3:ce:51:1e:cb:5e:a5:c8:93:ae:60:69:8a:
                    b4:75:1b:fb:98:d7:ed:6f:3f:e1:4c:2a:50:84:80:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:D2:F9:6E:FA:09:C7:3F:11:BF:13:B1:E1:70:5C:C3:DC:D3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c830f48-aa9a-3553-9653-072921bdcde2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:fb:51:90:ec:fe:0e:d5:83:0e:d6:ff:79:6c:ca:af:06:29:
         8b:3e:51:5b:02:4d:5a:68:95:8f:34:38:4f:62:8d:2e:d6:25:
         b8:3f:63:0c:86:fe:08:11:e2:16:2c:be:9f:87:a9:a3:10:fe:
         55:77:27:a1:42:58:14:b3:53:4a:51:7f:f6:6c:0b:99:39:07:
         9f:ff:23:08:34:3b:5e:a7:87:b0:6f:c9:a0:79:32:79:7e:07:
         73:51:8b:c6:34:0e:af:a8:91:28:82:28:a4:0f:bc:3f:9b:fa:
         ff:05:08:39:40:8f:22:67:ad:8e:81:26:10:e9:a7:c2:52:6a:
         62:be:49:8f:cc:32:ea:13:36:56:61:4f:a0:5b:21:a5:98:5a:
         73:a9:e8:6f:7c:eb:05:a8:8f:e4:13:c0:83:3e:b7:8b:99:82:
         48:7a:5f:ad:92:0f:1f:77:b5:e2:f7:fd:95:8d:c5:11:f1:ca:
         5d:90:af:e9:75:59:e4:81:bd:5c:5c:d7:cc:ed:c7:c6:3e:fb:
         7b:17:b3:44:ed:3d:b6:d2:28:b6:45:82:8c:05:1e:22:39:3c:
         57:1e:57:7e:36:7c:19:a6:ae:a0:6a:1a:3f:ce:10:d2:71:c4:
         da:26:00:29:68:85:f7:01:a3:6f:05:3b:67:af:27:0d:fd:e3:
         c7:e7:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:22 2025 by rpki-client