Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ededcf91-95dc-3def-b5bb-79c761de5885.roa
File:                     ededcf91-95dc-3def-b5bb-79c761de5885.roa (raw, json)
Hash identifier:          H92p4M9I0HA1gj+1fKsRUI0Q+IdH0kPy9lRwLL5IWSI=
Subject key identifier:   5C:88:E2:CD:E0:75:63:78:95:0F:58:EA:EA:64:87:D1:56:4D:98:70
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AAF64BA3CA29ED215B2EC8140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ededcf91-95dc-3def-b5bb-79c761de5885.roa
Signing time:             Wed 30 Jul 2025 01:30:11 +0000
ROA not before:           Wed 30 Jul 2025 01:30:11 +0000
ROA not after:            Tue 28 Oct 2025 01:30:11 +0000
asID:                     198167
IP address blocks:        2001:470:4a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:64:ba:3c:a2:9e:d2:15:b2:ec:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 30 01:30:11 2025 GMT
            Not After : Oct 28 01:30:11 2025 GMT
        Subject: CN=d0a91df5-bc4a-4671-a67b-281f6d2f14ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:db:35:20:43:43:79:11:fd:ff:38:d2:e4:
                    1b:d6:df:e9:ad:8a:dd:55:11:b8:db:74:cc:2c:77:
                    a0:5c:b5:0f:74:86:4b:fd:71:17:10:1e:66:ce:53:
                    b2:6e:61:7b:ea:2a:08:8d:ac:41:98:a2:60:9d:8a:
                    32:ac:4f:65:bd:6f:66:05:5b:a3:58:8a:41:37:fc:
                    77:a1:9c:ba:77:5e:b8:b4:75:95:67:ba:7d:77:e3:
                    c2:0c:48:2d:4b:d1:18:56:4f:d5:5b:89:13:32:a5:
                    b4:91:5e:a3:00:ec:b2:e1:b4:0f:28:91:68:af:7e:
                    ec:df:6d:78:20:a5:55:76:1d:62:45:5f:8e:0e:34:
                    6a:fc:90:93:3e:f9:aa:5f:4b:59:4c:b1:68:eb:3d:
                    e7:86:37:26:79:14:fe:8b:c5:16:76:89:9f:73:51:
                    da:6c:fd:f2:aa:6d:3b:10:aa:6d:4a:b9:83:7f:cf:
                    3e:42:42:05:8b:c2:df:63:f8:51:07:d6:d9:b1:8b:
                    ea:f2:2f:f4:43:82:a9:cf:63:e6:89:0a:00:ef:8a:
                    a3:e5:51:02:af:1f:02:4d:1a:7a:98:42:29:2e:60:
                    05:5d:a1:33:01:7a:73:a6:de:b3:09:79:40:27:82:
                    51:11:96:8f:c2:8a:eb:2f:be:4e:cd:77:32:9c:a8:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:88:E2:CD:E0:75:63:78:95:0F:58:EA:EA:64:87:D1:56:4D:98:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ededcf91-95dc-3def-b5bb-79c761de5885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:43:e2:18:cb:7b:89:7f:82:2d:0a:c8:18:1a:fa:ce:7d:ea:
         05:c8:a6:48:02:73:cd:d5:3e:26:16:03:b5:19:0f:da:c9:e9:
         5b:d2:83:04:4c:21:3a:20:a8:a6:78:f4:0e:f1:0a:59:9e:5f:
         81:14:94:49:05:cd:17:89:52:6f:91:cc:72:27:e7:9b:14:3c:
         ba:e1:9b:a6:0f:b9:06:52:48:16:4d:9d:a2:69:ec:7a:bd:41:
         30:79:09:54:30:d5:14:0b:b2:ff:94:5e:d3:bc:26:9a:f4:22:
         d6:1d:01:53:5b:ba:08:4a:5b:da:07:5d:d5:05:c6:66:30:5e:
         b7:e1:68:b5:96:f7:26:93:e1:6d:5c:96:e6:f3:cb:39:6c:40:
         ac:e5:ba:f7:b1:fb:2d:c2:90:fc:58:73:78:f9:2e:6f:e6:8c:
         03:81:3f:4b:98:51:4d:2b:40:32:bb:51:2a:8f:2d:5b:a2:03:
         46:91:28:4d:d8:fd:ec:e8:19:6b:0d:ef:ff:e1:00:e5:d4:6e:
         e8:df:ff:8e:42:c3:c8:2f:f4:22:dd:f1:5c:87:1c:01:93:dc:
         c9:00:26:56:bf:5e:3f:ec:04:af:a3:81:b4:ba:a6:a0:dc:2d:
         ff:ae:75:29:b1:f0:75:45:48:dc:d2:ef:e7:9f:c3:91:b7:ab:
         01:83:b2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:53:40 2025 by rpki-client