Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd241593-b7b5-32c8-9de4-2dee6ae2713b.roa
File:                     cd241593-b7b5-32c8-9de4-2dee6ae2713b.roa (raw, json)
Hash identifier:          rl32DyE6eQj+rO3l6eAXU6Q2mCL494CUQ74XVexqhGY=
Subject key identifier:   4F:3A:59:76:FA:0E:FF:D9:7A:A1:37:74:AD:83:5B:23:84:4F:A1:B5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BC1B83DACA96DE9747A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd241593-b7b5-32c8-9de4-2dee6ae2713b.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     46886
IP address blocks:        2001:470:3f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:c1:b8:3d:ac:a9:6d:e9:74:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=e514abf7-a7de-438b-af1d-77734dd59f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:46:49:b3:55:ec:80:c5:75:7c:10:98:7d:
                    f0:d7:08:55:4f:25:23:e2:64:18:04:3b:e4:60:6c:
                    36:94:80:19:d9:59:06:07:f5:5c:0d:cb:ff:ca:ef:
                    f5:0b:c7:29:d1:c6:29:a5:6b:0e:1c:0f:87:6c:de:
                    c2:72:1b:b1:7c:9c:82:cc:1b:55:39:6f:f9:fa:a5:
                    fc:7e:0c:5f:8c:9f:ab:2c:72:f2:95:d2:b5:ab:31:
                    cb:9d:23:68:75:cd:43:2d:ef:9c:f9:d5:f5:e9:fc:
                    e4:40:a9:b9:af:40:36:b0:96:b3:4e:b6:41:fd:e0:
                    ff:c8:50:c9:6c:7e:31:e7:03:46:20:6a:60:69:77:
                    08:87:a1:00:df:82:d9:ed:5e:f7:48:bb:9e:fe:70:
                    cd:a8:ad:88:14:ab:78:ee:91:0b:2e:ca:b8:34:d4:
                    c1:b2:d6:74:00:09:3d:21:c6:c9:b7:af:db:fa:88:
                    3f:47:85:b4:c7:ea:01:34:be:c7:c0:76:17:c3:10:
                    f1:70:75:88:a6:83:5f:2a:92:a4:91:85:e2:06:f2:
                    1f:c8:29:b3:10:b1:5a:86:67:5e:d8:76:27:31:85:
                    23:02:f3:3b:ba:c9:9e:7f:55:70:91:43:23:ef:22:
                    8f:eb:7b:fc:0d:eb:15:f0:8b:61:eb:95:b3:9c:d9:
                    2b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3A:59:76:FA:0E:FF:D9:7A:A1:37:74:AD:83:5B:23:84:4F:A1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cd241593-b7b5-32c8-9de4-2dee6ae2713b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:95:c6:f8:11:70:ee:a5:af:47:ea:7f:99:33:46:18:f1:d3:
         6f:63:72:87:df:fe:9f:82:07:e5:9b:89:be:9d:cb:92:c3:d7:
         6b:2f:7f:2f:1a:a2:0a:8a:55:3b:e6:b5:79:87:cd:45:31:67:
         2a:19:d4:81:d8:24:1c:35:a1:5e:8d:f8:c0:00:af:76:24:61:
         c8:eb:db:dc:38:36:aa:8d:1d:6a:94:98:54:8a:ca:ba:d9:75:
         3c:ec:bb:4a:b5:8e:f1:09:5f:94:1c:24:ee:6b:16:b7:5c:5f:
         f6:5f:8d:fb:af:3d:cd:b3:96:50:a6:e7:a9:eb:59:7b:ab:9e:
         5f:7e:8d:f5:fb:c7:91:07:98:b1:03:47:55:a9:93:66:e1:2b:
         48:03:71:bf:84:20:71:51:90:33:37:bd:31:06:97:bc:a4:a0:
         56:87:6e:b2:28:35:dc:50:86:43:bf:de:44:b5:97:62:49:3c:
         f3:81:bf:cb:05:8b:5f:40:84:f1:ac:be:6d:e3:54:a1:cb:01:
         ba:95:c2:e8:17:5e:bd:58:60:d5:b1:24:e5:2d:da:46:f7:15:
         5b:e7:6d:4e:85:48:09:ca:39:97:0b:d4:a8:d7:b1:b2:92:8a:
         6b:79:65:8a:a4:81:54:4d:6c:f0:68:57:d6:61:5c:e2:b5:0e:
         1e:3b:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:52 2025 by rpki-client