Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/781342a3-d311-35a3-9167-b0e1912f5f3b.roa
File:                     781342a3-d311-35a3-9167-b0e1912f5f3b.roa (raw, json)
Hash identifier:          T16f+N+3wxuqCvl6HOZzhEoWRPJtVwkN4G2Vsn4S21c=
Subject key identifier:   15:3F:21:94:27:05:4A:95:BD:D7:68:DC:95:BE:43:73:3B:D9:B3:ED
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BD6D3E5E910F1124F5200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/781342a3-d311-35a3-9167-b0e1912f5f3b.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     198493
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:d6:d3:e5:e9:10:f1:12:4f:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=14d1dcad-3a74-489d-ba07-eab4f7f4afce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:ff:ec:53:16:59:f9:a4:11:fd:90:94:aa:
                    69:7e:0a:7b:49:fc:ff:a4:67:78:b6:b7:36:19:1b:
                    2e:09:77:95:8e:1c:a0:3b:65:7f:fd:8c:81:3a:1a:
                    fc:10:0c:f1:10:c2:ab:d2:d4:6a:49:b6:1c:fd:0a:
                    72:17:00:2e:8f:14:06:8f:78:ba:dd:73:2c:2d:0d:
                    1d:be:4b:72:ea:63:e4:6c:99:f3:fd:41:f5:fb:3b:
                    36:87:99:29:04:49:79:f5:13:cb:c1:3f:f2:3f:95:
                    9a:c9:0d:9e:0a:91:23:e6:ca:6e:fc:83:2c:8f:07:
                    f2:de:be:f9:0f:4f:79:59:5e:33:7b:34:91:ec:aa:
                    78:a3:27:e7:4a:a5:40:d8:00:d7:93:d9:77:6a:89:
                    24:c1:b9:32:72:6b:5a:12:c1:93:8e:56:49:00:10:
                    7d:3b:05:0b:64:da:10:72:5a:d6:f8:4b:06:ad:03:
                    f8:c6:35:25:d6:bd:1c:b9:ce:88:11:ca:d0:7d:d3:
                    81:75:31:aa:3c:9a:4a:7b:ba:a6:ea:34:b7:9d:7e:
                    56:ca:d0:bd:50:08:64:1c:f3:45:4d:c4:b4:58:cd:
                    64:3e:e9:81:f9:ec:3c:fc:c4:ae:e3:2a:aa:cd:36:
                    58:fe:1d:8d:5b:0c:04:bd:b8:9a:dc:38:8f:e3:92:
                    7d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3F:21:94:27:05:4A:95:BD:D7:68:DC:95:BE:43:73:3B:D9:B3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/781342a3-d311-35a3-9167-b0e1912f5f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e5:54:4e:53:05:df:d8:2d:28:16:0d:99:91:8a:cd:98:3f:
         80:0b:96:c8:a8:6a:e9:d8:9e:9e:38:ba:d9:9b:93:49:b7:a3:
         64:7e:5e:7b:38:fa:e7:63:85:88:f5:b6:44:ab:1f:e4:52:61:
         c5:a2:13:bd:f1:c9:19:e3:c5:65:1b:25:69:91:93:73:b3:94:
         23:ef:72:e4:85:b1:ab:b5:ef:1b:a5:f9:61:00:2e:4f:90:ed:
         e7:bf:2c:5e:ab:52:ef:00:94:40:a3:87:95:38:2c:df:e8:cf:
         e4:e8:27:5e:39:d9:34:90:49:8e:88:5d:0f:b4:f7:7f:dc:53:
         d7:3b:e1:cc:d8:75:16:bb:68:b2:43:93:f6:11:ca:b4:a5:91:
         66:fd:93:65:a1:b9:60:fe:e8:ad:e3:c1:f8:75:1e:0c:e7:d0:
         ea:53:26:a7:31:32:ae:cd:50:02:7c:5b:3c:b2:e3:b2:e0:b9:
         31:80:7f:a0:4f:55:43:ef:f3:22:44:cc:52:5a:11:ea:09:ff:
         be:0d:47:6d:d3:d4:57:a5:07:f6:a9:18:d5:62:ab:e3:91:f5:
         cb:71:51:90:37:24:0f:80:8b:a0:99:a1:de:38:4b:33:34:3c:
         f6:29:06:8e:e3:77:9f:01:9f:18:30:5f:73:45:d2:c2:aa:d4:
         23:90:67:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:19 2025 by rpki-client