Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7a5d10-250d-3abe-a9b9-2cff852e5361.roa
File:                     7c7a5d10-250d-3abe-a9b9-2cff852e5361.roa (raw, json)
Hash identifier:          WPTOfmTYR3H+ru/dccMxEKSWsEshxPHOiziZbUH5XKQ=
Subject key identifier:   DA:17:D0:ED:76:FF:EE:4D:F4:43:EC:97:26:86:58:59:ED:E9:85:84
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BF95687FBE4C74AAA5B40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7a5d10-250d-3abe-a9b9-2cff852e5361.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     53904
IP address blocks:        2001:470:229::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:f9:56:87:fb:e4:c7:4a:aa:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=49e1556d-8c34-4e86-8e49-fb53f6645579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:60:57:75:b7:28:99:82:14:40:11:13:18:
                    3c:9b:21:af:33:bb:3d:03:b7:a0:ca:08:47:27:56:
                    a0:2f:f1:7a:6c:da:20:83:83:51:87:55:1c:88:56:
                    94:09:a2:17:63:c0:ef:51:a7:02:14:c8:8d:7f:94:
                    64:01:b9:a3:21:c7:bd:78:49:e5:f4:8a:d5:6b:5d:
                    5b:37:21:21:54:ab:b0:c3:f3:c3:89:dd:68:9d:24:
                    5a:e7:93:82:b1:1d:f5:72:ad:6d:aa:5e:3a:1d:2c:
                    de:c6:15:67:da:6d:f0:ed:78:3b:b5:f9:27:5d:13:
                    0f:5d:a6:4f:5f:c1:da:cf:93:69:44:a9:d1:97:27:
                    bd:47:63:e8:20:b9:a2:b1:35:60:e5:8f:ba:76:dc:
                    29:4a:37:e4:cc:bd:b3:ed:8d:12:25:1d:d6:83:48:
                    b9:a4:97:e2:3e:b8:bf:6e:83:39:02:8a:d9:88:2b:
                    53:a3:4a:95:80:dc:50:84:69:76:61:97:93:2f:0e:
                    47:71:a2:36:fc:64:6c:10:9a:4c:0c:47:37:d2:5f:
                    b9:2c:c7:4a:43:6f:e8:ec:d5:92:13:75:ef:5b:74:
                    cc:44:5a:ea:fc:37:6b:46:85:b3:2f:fe:7a:a2:4e:
                    ca:41:eb:ff:9b:8d:02:af:da:31:d9:a6:0e:25:79:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:17:D0:ED:76:FF:EE:4D:F4:43:EC:97:26:86:58:59:ED:E9:85:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7a5d10-250d-3abe-a9b9-2cff852e5361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:229::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:97:7e:cd:57:8e:8e:f2:f8:e5:00:36:d2:a9:fe:1a:f2:9c:
         e0:5c:24:b6:8b:cf:4c:67:12:1c:c0:93:a5:72:c2:63:65:7f:
         9c:e2:a3:99:d6:0e:42:34:3f:65:8a:db:76:fd:68:a1:2f:47:
         e7:eb:e5:e1:81:d7:ea:06:a7:9f:18:1c:1a:06:32:36:20:68:
         f8:b4:f7:11:2c:d2:bf:89:7e:94:1d:21:6d:83:eb:ad:e3:7b:
         43:01:41:71:ce:95:6c:54:58:cf:d1:98:ae:ff:2f:ab:fb:bf:
         58:68:67:10:62:6d:a0:34:e1:25:07:49:19:d6:84:28:2b:3b:
         e9:fc:91:24:f4:b5:ca:f2:14:57:77:24:c5:87:c8:4e:03:fd:
         05:bc:ca:88:be:24:2b:82:7f:d6:d4:4a:87:8f:3a:4e:e1:d0:
         f9:17:3d:d7:4e:c8:86:23:90:83:ba:50:3b:90:fa:91:19:df:
         d4:ad:47:29:8f:3a:74:69:e3:51:ec:99:f5:2c:90:c2:30:8f:
         23:d3:14:47:a6:9f:55:82:f7:3c:e5:29:66:91:9a:b4:c3:49:
         39:f9:15:cb:04:dc:ee:d6:6d:ca:69:27:3c:a0:0d:7c:07:2c:
         66:d7:cf:ee:5c:c5:f8:a3:e4:e2:c3:84:5e:fa:ef:bb:aa:e9:
         68:b1:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:24 2025 by rpki-client