Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/791dd6ee-7acf-3859-8bf2-683da4f42c4e.roa
File:                     791dd6ee-7acf-3859-8bf2-683da4f42c4e.roa (raw, json)
Hash identifier:          igEzaAQOF1Busg5kH4XprVLDXafL7F0YGPW7Q2ab/eI=
Subject key identifier:   37:10:9C:4B:C3:54:CA:34:9A:6B:6E:F6:77:F2:BC:E6:16:47:E7:96
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BD17D4A380E5CFFE61180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/791dd6ee-7acf-3859-8bf2-683da4f42c4e.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     48082
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:d1:7d:4a:38:0e:5c:ff:e6:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=1edfba1a-6a70-436d-a448-bab8be58054f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:22:b5:50:5b:a3:a0:e8:04:78:5e:77:9f:cd:
                    d6:65:6b:5e:f2:b3:ab:48:ac:10:75:a3:7f:a9:db:
                    93:fb:11:68:8f:30:cc:f4:9a:69:04:ff:02:ff:7e:
                    a3:91:6b:3f:d3:32:e9:1b:de:ae:95:76:9c:de:70:
                    c3:de:82:f5:83:e4:27:42:eb:4b:d1:e7:49:be:34:
                    b6:2b:a3:92:e7:95:41:33:cd:08:b0:7b:4b:48:30:
                    30:3b:01:39:87:a0:c8:d0:91:d6:2c:36:73:45:20:
                    87:09:ef:fc:c6:8d:67:2f:e5:46:5c:79:34:d3:ef:
                    d8:2a:ba:f2:76:e6:e2:2c:3c:ae:93:e7:b9:db:5c:
                    8e:10:c3:61:33:7f:e1:fb:a8:86:f7:0a:ba:26:f7:
                    49:a5:02:88:98:93:cb:df:04:8f:24:0a:14:d9:9d:
                    26:df:61:c6:a7:87:36:f1:36:8f:0a:b3:aa:ee:1f:
                    0b:f6:96:8f:ee:e6:5b:55:81:2a:43:8f:72:ea:99:
                    76:7c:80:4e:46:08:fc:f8:7d:91:a1:32:e7:88:54:
                    12:27:38:1b:b1:9c:06:fb:3a:f7:2f:3b:ef:5c:d2:
                    af:c6:f9:68:bb:e2:aa:1e:2f:5d:04:91:c9:58:68:
                    6a:3f:69:ed:4a:64:ed:7d:30:e8:33:36:ab:ba:79:
                    15:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:10:9C:4B:C3:54:CA:34:9A:6B:6E:F6:77:F2:BC:E6:16:47:E7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/791dd6ee-7acf-3859-8bf2-683da4f42c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:96:fb:b4:d5:19:18:f5:49:06:3d:4d:f4:29:d3:57:8d:a9:
         92:58:3a:fe:71:7b:5e:6e:88:38:09:12:52:7f:b6:59:64:3f:
         d4:65:bf:70:19:85:a3:78:df:3a:bc:ca:65:aa:e3:66:0b:3d:
         9f:49:1b:db:1b:5d:8e:a2:5d:7a:02:a5:fd:ac:da:d9:b4:bf:
         bd:ef:e3:23:0a:db:8e:6d:fa:9d:42:3d:eb:25:8e:db:bc:54:
         c4:4a:53:ac:4c:b7:8d:76:5e:c4:0d:55:89:66:ff:b0:6b:72:
         8b:8c:dd:b1:7a:3c:7b:43:ba:67:5f:d8:00:89:c9:02:b7:d5:
         79:4b:b8:9c:0d:df:9f:79:80:c0:d2:5d:c2:5f:f1:33:37:f1:
         e5:f4:f1:3f:1e:09:e9:5d:44:4e:d6:b8:17:f7:f9:9b:e4:ed:
         a1:e5:db:f4:06:70:05:f9:62:a1:cf:32:d2:e3:ab:cf:59:ad:
         b2:4c:e2:ab:45:01:db:65:2c:2b:10:c1:bf:4d:de:23:86:f7:
         1b:72:f8:bf:de:dd:94:c1:71:cd:63:00:a4:fd:fe:ca:dd:99:
         19:c4:52:6f:bd:c5:78:2a:a0:51:c0:72:41:84:22:61:0f:64:
         e7:66:81:b6:e7:f9:1c:cc:87:cb:f7:62:2b:ee:f3:f7:1a:af:
         92:20:e0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:24 2025 by rpki-client