Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b73ebbc4-9d85-39ee-b155-c20191a35f7c.roa
File:                     b73ebbc4-9d85-39ee-b155-c20191a35f7c.roa (raw, json)
Hash identifier:          xZmpr6Mc5lRkgpgUXA3XGXvIemB5rcNDTTwCOJ+uBpg=
Subject key identifier:   F8:FC:45:86:6E:1E:31:DF:34:28:6C:F8:38:11:A3:D5:33:59:4F:87
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BD148AF595E3606A0AC40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b73ebbc4-9d85-39ee-b155-c20191a35f7c.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     30860
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:d1:48:af:59:5e:36:06:a0:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=de4c1169-1166-4fc0-97f7-df96c47c9b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:c1:14:23:56:ca:ad:fd:7b:90:9e:1f:e7:
                    15:15:45:4c:17:f7:9d:54:ff:0f:0d:9c:90:2e:66:
                    f7:58:f8:73:66:0e:9b:48:92:69:61:af:5d:b3:57:
                    bc:63:e5:39:d0:3c:4f:9a:24:2a:8a:7a:35:3b:8f:
                    4c:6b:fd:75:a8:ac:1d:1b:ef:1c:aa:80:32:8d:c2:
                    b1:e1:57:21:2d:c1:52:00:c5:f7:2e:0f:7b:8a:a8:
                    ed:e9:91:b9:1a:d0:53:ae:ae:36:08:39:04:57:c5:
                    28:2a:4f:68:45:c3:80:49:0f:49:2a:b0:39:e8:5a:
                    61:e6:a4:40:4f:3b:99:f6:07:c6:84:56:d1:7c:17:
                    11:67:ee:b2:b8:8d:3f:aa:c1:65:cd:0c:b6:30:55:
                    e7:27:78:68:1c:2e:27:8f:d6:81:b5:c2:87:f1:3d:
                    93:64:e8:c4:38:c9:4a:cc:0b:11:8e:f3:be:f3:a8:
                    9e:79:56:00:e9:fe:b1:8f:d7:5b:c2:7e:42:55:0f:
                    f1:ef:ff:e6:04:68:44:0f:01:66:27:cc:00:dd:71:
                    9c:e4:22:36:b9:a0:2c:66:fe:79:58:52:43:c3:05:
                    5d:be:de:60:64:a5:ba:52:90:8e:9b:0e:0e:0d:a0:
                    ba:67:cb:21:74:20:aa:ba:d6:53:59:a3:76:88:d7:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:45:86:6E:1E:31:DF:34:28:6C:F8:38:11:A3:D5:33:59:4F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b73ebbc4-9d85-39ee-b155-c20191a35f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:4f:d8:96:df:9d:cd:a5:b9:56:c3:42:9f:8d:59:0a:1e:d3:
         04:bd:db:59:c9:20:a5:f5:df:f3:2b:d4:8f:e5:38:78:7b:06:
         3d:22:32:46:b6:9a:f7:43:41:f6:0b:44:79:cd:31:87:b9:73:
         22:7f:ab:88:ea:bb:9c:1a:13:4d:f7:39:ec:74:45:7a:13:fc:
         12:2e:f7:4f:69:ed:fb:c7:0d:6c:ef:71:15:3a:26:0f:b6:57:
         02:f5:1a:3f:9c:68:5f:25:e7:ad:58:ab:3f:8c:a1:01:44:a9:
         d4:0d:1c:d5:1d:8d:0e:55:fa:f1:e0:62:bb:72:8f:5d:d0:23:
         01:3a:e0:0e:43:3b:19:f6:2c:aa:bb:5b:71:dc:79:c8:40:06:
         7b:b8:79:88:75:eb:3f:59:31:11:c3:fb:cd:39:08:7b:f5:00:
         0c:f8:95:b5:40:05:42:b7:7d:79:12:9c:d8:9f:75:f7:65:39:
         8e:03:60:fa:4c:61:49:c7:2f:e6:ca:8b:ee:74:5e:99:bd:8b:
         25:5b:0d:cd:b1:18:76:dc:b1:53:9a:ff:44:81:d1:47:4e:fc:
         20:25:f8:1d:6d:b0:2e:e5:db:af:cf:ee:3f:e7:1f:bd:2c:7f:
         c9:2d:a2:17:30:44:ee:ac:e0:6f:5a:b4:06:4e:13:dc:ac:56:
         ea:ef:50:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:22 2025 by rpki-client