Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7b19aa5-115f-3c00-a6f5-84529a8f79bf.roa
File:                     a7b19aa5-115f-3c00-a6f5-84529a8f79bf.roa (raw, json)
Hash identifier:          iak067NXFLyDJcmZkMuQSxYkCTDiNcjG+HE8xa+Olv8=
Subject key identifier:   1D:7E:1C:B4:19:03:48:F4:C4:97:56:FD:9A:83:6F:3B:B2:A4:BD:38
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A8DE48211E1C0973434AEA5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7b19aa5-115f-3c00-a6f5-84529a8f79bf.roa
Signing time:             Fri 18 Jul 2025 01:30:09 +0000
ROA not before:           Fri 18 Jul 2025 01:30:09 +0000
ROA not after:            Thu 16 Oct 2025 01:30:09 +0000
asID:                     26857
IP address blocks:        2001:470:490::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:e4:82:11:e1:c0:97:34:34:ae:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 18 01:30:09 2025 GMT
            Not After : Oct 16 01:30:09 2025 GMT
        Subject: CN=f9d74275-4d22-44b4-aa95-bde5ea89213f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:a1:cd:09:94:b6:d1:c9:60:b0:d0:16:d9:
                    ad:64:0f:02:83:47:1b:6b:dc:a6:0b:bf:92:bd:52:
                    b0:c3:39:b6:35:d5:7f:a9:ee:5f:92:ce:bc:8d:0e:
                    83:03:38:72:eb:ce:74:63:47:cb:e8:b4:74:91:6e:
                    bb:f4:b6:12:26:81:be:97:10:de:13:45:d3:b0:1c:
                    7f:03:7c:c2:26:f1:83:c0:45:33:6c:79:13:23:d4:
                    5f:e0:3b:85:e4:0b:bb:40:58:ea:a3:f8:b7:bd:fe:
                    39:16:06:78:f4:51:af:6b:be:e1:3b:11:ea:e6:76:
                    d3:d7:bd:2b:b1:65:a3:c9:40:59:fd:ab:5e:7f:dc:
                    0f:91:60:2d:bb:11:66:0e:18:d0:e8:b8:5c:c7:e4:
                    b6:61:68:f9:f2:d4:19:05:df:1f:0c:4a:d9:f3:d8:
                    1a:33:91:2b:f0:42:b5:36:79:48:fa:73:94:1f:02:
                    6b:4a:71:f0:2e:f7:2a:1d:80:bf:a0:4f:35:57:55:
                    1c:5d:58:42:25:3e:78:f6:e9:1b:91:bf:bc:60:19:
                    5b:08:ce:8c:51:ca:f4:16:98:cb:b5:ea:1f:f0:42:
                    ad:43:f8:73:23:97:e3:f3:96:c8:5e:d8:64:19:0a:
                    e8:29:b7:71:42:cb:b5:43:28:b7:c6:4c:d8:c8:d6:
                    c9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7E:1C:B4:19:03:48:F4:C4:97:56:FD:9A:83:6F:3B:B2:A4:BD:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7b19aa5-115f-3c00-a6f5-84529a8f79bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:490::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:22:9d:d3:a1:18:a4:d0:ff:8a:88:1e:d3:97:86:14:50:9f:
         8a:d4:87:06:29:30:97:cd:95:8f:3d:3b:52:b4:91:b8:08:75:
         8a:22:85:ea:9e:79:ff:08:67:0c:f8:0e:46:2a:03:9d:be:f0:
         42:f2:14:70:89:22:92:45:32:e3:fe:37:cd:ce:69:e2:9f:96:
         16:30:00:b2:01:7a:79:1d:d7:6b:7d:e3:52:fb:1a:02:ac:1a:
         64:a0:56:f9:12:50:07:99:07:1f:b2:3d:2b:46:94:3d:78:34:
         3c:28:73:ce:63:b9:b9:e8:96:36:c5:2d:a4:7d:d7:f1:6c:c4:
         17:d3:33:12:bc:b9:1b:c5:b7:76:10:b0:b6:d8:cd:d8:f1:37:
         83:a0:eb:0b:8a:15:c2:e0:c6:2c:3a:00:38:bb:41:dc:78:68:
         0c:f6:55:f5:0c:db:c6:55:ff:66:6b:83:79:bb:eb:5d:2f:99:
         7b:f1:45:91:b9:e2:b0:23:ab:c4:3a:13:53:eb:51:2b:aa:93:
         d9:91:a3:07:88:45:4f:80:09:43:a1:0a:18:a7:75:02:cf:fb:
         8f:24:3d:70:8f:b0:b0:41:d8:b6:e8:e4:61:a1:6a:00:9c:34:
         3c:99:70:20:f1:a9:7c:92:43:f4:9b:51:ec:67:cb:70:7b:31:
         19:d8:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:40:23 2025 by rpki-client