Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa
File:                     a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa (raw, json)
Hash identifier:          6+gq6wiUYWxWfyqmiOjiZ6tbg9K/jMnQbw7yyyt1ZHY=
Subject key identifier:   81:30:73:D1:8C:7F:45:C9:C3:08:83:E1:F8:68:6E:BD:AC:0F:89:D6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BFB7F74D972D9BAFE6280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     43633
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:fb:7f:74:d9:72:d9:ba:fe:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=b0ee60c5-32cd-4a57-90d4-343339ca227c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:f2:f6:e4:23:ee:5f:4b:e8:bc:0a:40:14:
                    5c:55:63:5b:85:78:8f:6f:93:f5:f1:58:ba:41:f0:
                    17:d3:5b:20:2e:7f:14:7f:68:eb:7e:dc:24:29:d0:
                    a2:61:8a:68:e0:73:12:78:43:0e:8b:53:25:7a:1e:
                    a0:05:23:0b:7a:8a:57:62:d3:a6:0a:1b:b0:78:85:
                    07:b8:e2:b4:ae:81:dc:ab:d2:91:33:21:b4:52:ec:
                    29:8f:61:f0:20:42:5d:27:bb:55:0e:a2:b7:f9:de:
                    98:2d:86:1c:14:4a:e4:3b:8d:b5:f6:6c:8f:f1:09:
                    f5:ed:8c:e8:47:68:9f:65:44:f0:4b:0d:a1:0d:5e:
                    b9:14:15:6e:a8:70:7f:52:75:d0:c5:94:99:e1:01:
                    dc:da:f4:6e:43:dc:ba:47:27:70:9a:d3:fb:85:1b:
                    77:7f:4c:7a:70:2a:36:8c:b0:61:d8:52:d4:ef:88:
                    76:cb:51:db:8c:88:d1:7e:8a:83:43:79:b0:d3:53:
                    7f:f1:ec:7c:22:30:d3:f8:43:9e:ee:87:67:7e:3c:
                    ab:33:bb:3f:7e:a7:d0:e1:b4:43:73:23:ec:fb:3d:
                    9c:00:5a:d6:c2:ed:ce:88:48:cb:b2:76:4b:c9:6a:
                    99:b5:58:4b:c6:f1:56:1c:60:24:fd:82:5a:93:22:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:30:73:D1:8C:7F:45:C9:C3:08:83:E1:F8:68:6E:BD:AC:0F:89:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2fa7185-3748-3bef-ac3f-c86bd7b5e9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:38:5a:8b:47:5b:d9:59:ff:45:c9:ea:a7:53:28:a4:b4:79:
         cf:e3:df:0e:f9:1f:f8:7c:f6:2f:1a:dd:ca:ec:5c:04:ba:4a:
         02:69:2e:2d:93:c9:0d:91:01:54:79:47:92:79:8c:2f:65:ff:
         b1:1e:4d:64:6e:53:28:9b:d9:92:ed:b4:64:8a:b4:86:40:58:
         ea:ba:e7:4f:0d:2a:91:c4:bb:cc:ba:44:cb:46:98:e8:f1:fc:
         4f:6c:40:e2:0e:66:4b:4a:14:4c:26:49:7f:cd:e7:ba:71:71:
         90:77:53:48:0c:06:1e:99:e6:ee:30:c5:43:b9:5d:3f:5a:ce:
         5a:57:3f:5c:88:93:55:81:d4:f9:74:a9:b8:ba:86:52:a7:1c:
         1e:7c:41:cc:46:2c:fa:21:04:4a:f5:99:4d:45:98:da:14:86:
         40:c0:b5:be:27:f1:0a:99:7e:f9:f5:07:28:55:8e:05:62:51:
         46:75:ad:1f:1c:22:89:03:66:24:a9:42:4a:36:47:80:57:93:
         fa:f1:04:a5:32:c5:16:62:b5:3c:b2:4d:b2:f1:89:8b:2c:5a:
         35:08:63:d0:2b:12:e7:ee:ad:70:a9:f8:49:31:02:20:a3:4c:
         9a:79:d0:b6:1e:94:89:4d:1c:90:0b:33:22:96:92:82:a1:25:
         7f:02:7e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:08 2025 by rpki-client