Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88b97648-5110-3f0c-b3ba-b97205d47e7d.roa
File:                     88b97648-5110-3f0c-b3ba-b97205d47e7d.roa (raw, json)
Hash identifier:          v/IWpN+Fb+jYbGQIS9YRO1ter7IVhnRMTSXItKvFVIQ=
Subject key identifier:   7A:E2:AC:9A:55:42:48:AF:4E:71:AA:51:AE:A0:7B:D2:64:6B:3F:C9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BFE862296D8DB87674EC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88b97648-5110-3f0c-b3ba-b97205d47e7d.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     28773
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:fe:86:22:96:d8:db:87:67:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=04a9a512-0364-4d88-a70a-109068cdf13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:ef:82:eb:9d:f9:81:70:f1:5a:a4:e2:79:
                    ae:2b:7a:d5:2f:20:55:2b:c2:d0:81:71:7b:70:fe:
                    f6:fa:63:27:26:28:4e:49:12:de:5d:75:8e:40:1e:
                    46:6e:6e:63:0e:d8:49:93:11:e6:6e:6f:48:92:15:
                    fa:bc:ce:66:58:9c:ac:61:3c:28:d5:de:09:c8:24:
                    2c:86:50:46:a4:cf:41:f8:48:1d:c2:b5:fe:60:35:
                    a6:40:0a:9a:0e:bd:1f:ae:b1:01:32:dc:6e:62:b7:
                    b1:bf:38:f5:12:6e:7a:93:33:e8:21:94:ab:5c:6f:
                    24:63:89:00:d1:9a:d1:96:d7:b6:b7:b9:56:b3:ca:
                    3f:27:8c:a4:8c:60:a4:1d:a9:2d:cc:8d:5e:c3:be:
                    d0:ab:b7:38:6d:76:55:ff:bc:f6:2a:97:f0:5d:8f:
                    a9:82:42:0b:80:a7:ac:2c:d9:71:af:91:19:e0:7d:
                    7f:19:4a:91:b1:20:41:d6:fd:8f:02:56:c5:0b:66:
                    8b:02:3c:8e:7d:fa:1d:ba:1a:f6:e0:4c:01:51:21:
                    c9:c1:8c:7e:d7:d6:5b:ac:92:f8:85:b0:c6:2d:69:
                    60:ac:a6:a1:b9:3d:99:59:ae:88:53:8a:c6:0e:ca:
                    b8:17:6f:c5:0a:41:b5:cd:2c:db:3b:72:dd:48:c2:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:AC:9A:55:42:48:AF:4E:71:AA:51:AE:A0:7B:D2:64:6B:3F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88b97648-5110-3f0c-b3ba-b97205d47e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:3a:bd:e0:8f:05:79:5b:c7:29:4c:80:76:a5:f8:21:06:6b:
         7f:e2:1b:48:38:6e:44:56:4c:32:be:af:8c:29:1c:36:86:6b:
         a8:6d:5a:23:cf:d0:0b:12:da:dd:4c:9b:af:77:0b:b9:12:d5:
         1a:2b:69:fd:e6:1e:91:05:c2:89:c7:6a:b3:b4:af:ff:12:6e:
         09:f4:ff:99:af:82:aa:f4:7c:47:8a:86:ce:a3:b0:6c:62:9a:
         57:26:4a:5e:bf:35:ca:8a:50:1e:44:02:81:01:a9:f3:0f:fc:
         49:e9:ba:e6:42:50:36:26:33:d0:ae:80:e4:d3:d4:d9:7e:37:
         7f:6a:ed:51:82:f0:d4:1d:74:8b:93:f0:28:34:74:5b:5c:d2:
         2f:9a:98:05:90:7a:2b:f0:bb:79:ca:f8:a5:3f:ad:16:42:b2:
         48:de:7c:bc:ca:36:b5:16:30:ae:d5:09:28:11:6c:76:d5:48:
         27:61:67:64:27:d6:75:1a:c6:ba:e1:17:68:ff:12:1a:9f:6d:
         55:a1:bd:ba:9b:34:d0:d2:ac:b4:01:e2:21:d6:f8:fe:f3:2c:
         e6:b1:30:38:4c:5d:2a:d2:3d:3e:db:23:90:d6:9d:5d:38:00:
         3d:b2:c0:bd:c7:9b:84:2d:06:39:5f:06:a7:04:b1:a3:2e:a1:
         1c:71:53:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:46:55 2025 by rpki-client