Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7561d938-274d-3b86-85c6-62e39a0917c4.roa
File:                     7561d938-274d-3b86-85c6-62e39a0917c4.roa (raw, json)
Hash identifier:          bSVBoh9LWZs9MflED3xd28m1G/He4W0BXx6RnE6ZYHg=
Subject key identifier:   A4:E4:7B:E9:E3:BF:D7:10:79:B0:82:72:E2:94:38:B0:91:B4:CF:1F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BF3E557255409874F8C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7561d938-274d-3b86-85c6-62e39a0917c4.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     58299
IP address blocks:        2001:470:15f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:f3:e5:57:25:54:09:87:4f:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=cf44965f-496b-44e7-acff-e0cdec0233a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3a:c2:cd:1c:8a:5d:78:b1:df:52:29:24:35:
                    2e:0c:11:12:85:38:32:31:fa:7d:5c:da:97:ec:b9:
                    b7:54:c0:ce:02:f7:34:39:9e:17:52:33:f0:2b:f5:
                    99:3c:38:67:c8:bc:90:1e:f1:6c:b2:43:b9:04:70:
                    3a:0a:67:c9:d5:4b:87:a4:61:97:64:a1:5b:d6:2d:
                    ba:3d:49:3b:fb:10:54:5d:6c:fe:fa:6b:55:f0:78:
                    8f:7d:22:65:30:0c:95:0e:f0:4f:22:91:2a:58:12:
                    f6:75:d6:6a:a1:2d:af:b5:55:eb:19:07:27:a8:f4:
                    0f:7d:0a:10:e6:50:c8:71:18:bc:53:97:83:0f:cd:
                    3b:c5:db:63:1f:ef:2e:91:90:7e:c3:65:75:f6:b6:
                    b8:ff:76:d2:79:ed:26:d5:aa:34:16:b3:87:e4:69:
                    b0:7a:13:0f:db:5d:08:88:45:84:75:1a:df:4c:f4:
                    1a:ec:3c:09:4f:37:ab:86:64:f0:cb:78:09:14:63:
                    6d:ca:54:60:8e:35:0e:29:f1:6c:e8:6a:11:35:bb:
                    6a:98:1f:1e:5c:d7:24:1c:ef:4a:04:60:30:4b:aa:
                    b7:9c:9d:c8:aa:c0:22:67:a2:ff:d2:f4:da:7b:1a:
                    53:a7:26:0a:29:0e:c1:31:93:9a:b4:18:e5:f1:e8:
                    7e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E4:7B:E9:E3:BF:D7:10:79:B0:82:72:E2:94:38:B0:91:B4:CF:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7561d938-274d-3b86-85c6-62e39a0917c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:15f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a7:39:3f:e9:53:6b:a6:5f:a3:50:4b:0c:35:76:b2:42:61:
         33:1f:d3:61:35:e0:84:b9:23:5e:aa:3e:50:72:07:70:a3:91:
         38:df:07:90:95:1f:a5:88:40:28:15:5c:50:88:54:fe:34:c4:
         99:7b:7c:ef:c7:9b:30:dc:f6:e5:e8:bc:f9:55:85:a7:7f:cf:
         57:d9:f5:2d:ce:bc:e9:ff:88:7f:70:60:d4:15:76:85:c5:84:
         f0:bf:ed:a4:3e:7f:a0:4f:6c:35:db:e0:68:a1:4c:8d:ab:e0:
         91:2f:2a:2d:e3:92:ee:fa:a7:36:33:43:87:fc:b2:0b:04:1c:
         67:7e:7a:96:4e:ff:b9:65:dc:49:ef:19:4f:d7:a8:a0:eb:26:
         55:58:2d:94:ec:53:04:69:ff:49:d2:dc:2a:27:f1:e6:6c:5c:
         b8:f3:59:fc:db:28:7e:27:81:e9:95:87:37:93:42:92:6d:22:
         29:32:9e:d2:66:30:71:41:8f:8c:dc:48:d1:88:26:f9:cb:9e:
         84:8a:d7:dd:8b:6e:1d:04:93:21:6b:01:17:a2:a9:e2:d0:d1:
         92:58:11:31:15:56:1a:7c:66:37:0c:d5:89:62:6f:a2:ba:ce:
         4c:09:81:e4:29:44:73:0e:cb:cd:9d:89:d3:e5:eb:52:69:78:
         04:6d:ee:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:54 2025 by rpki-client