Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d777fcbb-172a-3a40-a10d-f51fd828f583.roa
File:                     d777fcbb-172a-3a40-a10d-f51fd828f583.roa (raw, json)
Hash identifier:          496ukamr7+/9hESXMGL4qSoTJqn7qRzqJOvBs1v+AWg=
Subject key identifier:   28:F2:53:17:39:FC:AF:24:D6:4C:AB:EE:A6:FF:7F:D9:B9:18:19:7F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BD136CDB8BF50F9D6FD40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d777fcbb-172a-3a40-a10d-f51fd828f583.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     212955
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:d1:36:cd:b8:bf:50:f9:d6:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=b1389608-dfd4-489e-8071-f2e14d9c24b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:d9:37:12:20:0b:ba:9a:97:d0:af:70:b4:
                    88:c1:0b:4c:0b:31:5d:7d:ec:6b:f5:6e:f0:9a:ec:
                    a1:36:f4:8c:28:bd:46:5e:7b:7b:9f:0b:32:11:f0:
                    c0:32:51:e4:e4:f5:b8:1d:97:15:1d:de:7f:52:f7:
                    98:46:7e:6f:40:12:6c:a7:8c:7f:be:75:ab:0e:f8:
                    3a:70:eb:8d:af:0e:73:24:5b:86:39:ad:df:22:85:
                    12:24:0e:cf:9c:21:3c:bc:c9:47:87:28:80:a3:3e:
                    4d:46:81:ad:64:65:b7:44:f7:7e:c4:44:fb:17:77:
                    df:58:0d:16:03:2d:33:b4:aa:2c:f4:23:5a:12:3d:
                    bf:45:75:65:67:77:09:1e:86:62:c5:38:77:b8:9f:
                    3c:3c:3b:eb:d4:d7:df:25:ea:3c:48:fa:a9:9f:a9:
                    b4:46:0b:44:aa:37:d8:41:45:73:28:b2:43:e0:0e:
                    e0:7b:72:61:aa:32:5c:7b:d9:96:7b:63:cc:04:4d:
                    12:0f:65:1c:ca:1c:67:fc:8d:cc:6c:0a:d9:fc:fa:
                    e0:77:7a:a3:e1:9e:ab:01:f5:81:80:23:ed:21:2f:
                    ac:4e:b2:19:02:9f:f9:27:b0:dc:02:7c:f3:d4:5f:
                    11:4e:55:08:cb:96:3e:1c:58:41:98:f6:94:3f:44:
                    8e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F2:53:17:39:FC:AF:24:D6:4C:AB:EE:A6:FF:7F:D9:B9:18:19:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d777fcbb-172a-3a40-a10d-f51fd828f583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:10:c6:c0:01:c5:fa:3e:de:15:03:70:01:7c:f0:ea:b0:20:
         d7:1d:59:bc:12:c3:99:3f:88:49:61:ac:05:d4:4f:ed:15:72:
         96:7d:55:ab:99:4f:79:52:52:78:bb:88:ea:a4:1c:be:5f:b4:
         86:25:a4:ef:2c:91:69:c8:2a:d2:5a:ca:a5:d9:18:39:ba:75:
         9a:fd:fb:8a:18:97:f1:b1:30:58:d1:25:d5:a3:40:96:16:55:
         58:eb:41:a9:28:96:c6:51:a8:66:5e:c2:27:37:14:4b:e5:3b:
         ac:07:d9:08:f6:86:8e:21:48:e1:33:95:41:e0:cf:5c:75:23:
         93:03:1b:2f:c6:76:77:19:d7:58:60:ff:1d:8c:31:59:42:c8:
         18:8e:c5:ab:2b:a7:7f:b8:87:69:59:01:9e:77:f0:81:a1:f9:
         aa:23:b3:25:28:7d:29:72:69:f6:6c:ea:d8:05:c1:1f:1a:c3:
         fa:3b:d2:2e:e0:63:bf:f0:0b:4b:5a:fa:9e:da:7b:20:7c:46:
         43:15:c2:5f:18:08:f2:9d:a0:58:fc:60:26:29:38:03:d9:2d:
         88:42:36:2e:62:50:dd:9a:02:bb:c0:10:cf:a5:f0:4a:23:08:
         54:41:fb:1a:dc:a9:aa:e7:6a:df:fb:13:49:6f:9d:16:f6:a0:
         66:ac:bb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:49:46 2025 by rpki-client