Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa
File:                     d005338b-0108-318a-9989-f9d35f20ee23.roa (raw, json)
Hash identifier:          +FjLJr0VjtIic5tL0vGVthaUR9wPW9FJYV9Ji5fKgvA=
Subject key identifier:   84:51:CE:F3:7A:52:02:17:2A:3A:18:05:D3:14:3C:27:07:FE:CC:47
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BBABB492255AC90C74557
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     11255
IP address blocks:        2001:470:b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ba:bb:49:22:55:ac:90:c7:45:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=cbc750d3-9bc8-4720-bd89-ecef1ee97220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:e1:f9:76:09:94:9e:32:e5:b8:08:f1:4e:
                    df:13:f5:24:48:0f:5e:05:3c:c5:ef:8f:73:86:17:
                    9a:3b:69:ef:50:28:d4:6b:cc:62:47:cf:4a:f1:8a:
                    95:08:a4:c3:75:f3:c4:a7:2b:75:f6:9f:74:9d:60:
                    c3:36:5c:47:52:fb:02:d5:40:fe:f8:92:b1:c4:10:
                    41:fe:ef:e9:26:29:de:89:38:43:e5:30:f0:a2:d6:
                    cc:c8:e7:ce:aa:49:ab:4c:5b:48:9e:6c:f5:52:b1:
                    9c:1c:5a:9b:be:bb:63:66:40:3d:24:a4:7b:81:48:
                    5d:60:5c:d3:b2:af:80:67:a2:71:48:8b:46:71:23:
                    34:c3:b6:88:56:6c:83:79:8b:62:74:73:3d:34:9c:
                    2a:db:a5:26:3f:b4:cc:b9:2f:99:db:a3:e5:94:a3:
                    3d:45:0c:f1:8e:a0:2d:71:5e:47:7f:8d:62:8b:0e:
                    18:ae:56:d9:c6:09:b5:d0:2a:26:27:8b:50:f5:8d:
                    01:da:d8:19:22:3a:d4:ea:39:37:38:04:49:c9:d5:
                    9e:34:b1:44:d0:34:45:53:c6:66:79:cf:86:51:02:
                    e2:3d:15:da:34:c8:4f:43:57:62:0a:d5:2b:0d:85:
                    59:69:bc:99:f9:51:63:48:28:6a:72:aa:2d:32:ef:
                    94:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:51:CE:F3:7A:52:02:17:2A:3A:18:05:D3:14:3C:27:07:FE:CC:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:23:a4:2c:f1:41:bd:50:9c:23:87:45:81:a8:db:1a:8a:
         86:ff:e4:b3:54:ca:4a:33:21:3d:73:41:5b:50:3c:45:6f:9f:
         64:bf:6e:db:68:e7:59:ee:7f:80:0a:83:60:35:bd:89:b9:cd:
         a6:de:3b:5c:16:9b:e9:93:49:3a:7b:00:fa:0e:37:77:71:65:
         19:7f:84:d5:d7:e3:39:53:73:19:94:4f:66:3c:bf:35:f6:59:
         ae:08:b5:e3:63:21:c7:4d:49:f8:79:dd:45:4e:be:5b:82:98:
         bc:25:7a:4b:bd:a7:33:02:2e:44:a6:b8:2b:f1:43:90:c6:ec:
         6d:cc:44:11:40:dd:80:15:f7:0e:dc:d3:30:d3:10:1d:b9:3f:
         de:a0:c0:0d:c1:64:09:f3:04:73:e1:dc:2b:d2:cb:49:b3:f1:
         0f:0b:f5:87:ba:26:e2:72:6b:59:da:90:e0:54:0a:49:f0:a6:
         2b:f2:b4:97:be:17:8d:44:41:f1:54:0f:dc:42:72:2b:e2:ac:
         33:25:21:5c:a1:50:74:77:7e:bc:17:92:1b:4b:02:25:9a:a0:
         3b:4e:6a:02:99:ad:3b:45:f5:96:9f:ab:7e:4a:31:fa:5a:0a:
         0a:26:e5:c0:56:30:61:e0:b5:6b:cd:7f:f9:cc:a3:94:9d:40:
         5d:76:f2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:51:27 2025 by rpki-client