Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d4b3a6a-33de-3e67-a7a4-7e3467c7c835.roa
File:                     6d4b3a6a-33de-3e67-a7a4-7e3467c7c835.roa (raw, json)
Hash identifier:          sBKHIcvTZRb5Sk8H8x4RDcXLTu1CPs7FF4pcK19HurQ=
Subject key identifier:   B3:8B:2C:C9:72:15:80:A2:77:39:1E:C6:56:D2:BC:41:53:02:61:16
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BCFAD35861A68C1888330
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d4b3a6a-33de-3e67-a7a4-7e3467c7c835.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     6204
IP address blocks:        2001:470:1d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:cf:ad:35:86:1a:68:c1:88:83:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=60e77c1d-f8fb-4f53-9743-8d7a63239f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:a7:f8:2d:2b:eb:f2:39:46:59:2c:86:5c:
                    00:58:c3:fb:92:d8:c5:b2:6b:0d:da:e6:1a:c0:79:
                    4a:df:d3:33:b4:60:96:63:89:41:df:cf:ed:0e:33:
                    d1:3d:2e:33:fe:ac:f2:65:40:14:8a:20:69:3c:a5:
                    51:93:60:6b:26:83:e8:bb:b4:09:6e:97:18:e2:34:
                    a7:6e:00:75:85:7e:c3:be:8b:4f:6a:69:07:e5:c2:
                    84:f2:23:87:77:78:a8:96:e4:1f:b8:37:e7:8b:3e:
                    fc:05:81:f0:a3:b5:68:75:69:ed:d2:b6:59:3c:70:
                    6a:df:bd:f8:4d:fe:00:46:6d:44:ea:d9:f2:21:ca:
                    36:06:ad:93:9b:a6:87:dc:fe:ac:d4:7e:76:f0:e5:
                    4e:a9:23:3f:74:98:95:f1:99:5f:62:71:fe:02:8b:
                    ac:93:21:05:1e:9e:7d:b4:9b:de:7f:2e:60:bd:ab:
                    d8:2f:a0:40:9e:00:1a:0d:95:9d:cc:43:41:e6:85:
                    49:52:0f:66:8e:60:28:54:6d:c7:c7:2f:83:02:e6:
                    ac:67:06:73:ff:25:b7:51:8a:a2:02:fc:4f:4b:85:
                    62:6b:c7:f2:bd:20:8f:fb:3b:bb:1d:5c:a4:b2:3b:
                    26:dd:49:f5:87:14:9e:86:7a:1e:a6:2b:87:1b:57:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8B:2C:C9:72:15:80:A2:77:39:1E:C6:56:D2:BC:41:53:02:61:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d4b3a6a-33de-3e67-a7a4-7e3467c7c835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bc:69:42:01:59:17:13:6e:dc:b6:5f:1f:68:9a:b0:71:ea:
         00:c6:cd:bf:b6:d4:11:62:b3:90:83:ed:2f:81:80:a5:8c:3f:
         21:2c:f4:98:49:8d:02:66:58:36:f3:4d:b4:e3:1f:68:1b:51:
         67:2a:ee:56:f5:fd:a4:ad:a1:a2:94:01:c1:74:34:73:4e:d6:
         1e:e3:f6:84:1e:a1:5c:12:a6:57:fd:60:4c:42:1c:87:82:2e:
         ba:c2:75:15:cc:d4:53:bb:ed:85:71:ec:8a:8c:d7:e5:9b:50:
         20:ee:50:36:ee:01:56:70:e7:fc:2d:39:f3:81:e1:fd:d0:14:
         98:ef:dc:e8:86:1c:26:55:32:39:ca:3e:61:60:8e:f5:e9:00:
         e5:bd:84:5c:c3:71:1d:7f:a3:3e:df:f0:a3:86:01:e8:e1:37:
         98:d6:a5:8e:ec:25:2f:2a:02:e5:79:65:75:0d:f9:97:40:e7:
         c9:b2:a3:e3:cd:2c:49:9f:ac:bc:75:56:40:3e:f6:ad:fc:4a:
         e7:f8:cb:9f:d0:13:66:75:68:09:8f:d6:63:dd:b6:07:19:8b:
         55:d1:59:35:d3:8b:8d:66:75:66:47:f0:4c:8a:dc:9a:09:e4:
         5a:56:6b:b9:88:8a:67:df:6f:c9:4a:e3:e1:92:c7:c8:c8:50:
         24:a3:a9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:57 2025 by rpki-client