Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6142388-e8df-3153-ae91-c8e66d3117bf.roa
File:                     f6142388-e8df-3153-ae91-c8e66d3117bf.roa (raw, json)
Hash identifier:          rOgSs3zLxs2401zTG2KpBLMwq8Im8tOKemEp4TWXPjc=
Subject key identifier:   BC:39:BE:28:3A:43:A6:FA:81:A6:4E:B4:A0:36:9B:08:C5:C6:2F:AC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB221249A33C5E7984D2D9C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6142388-e8df-3153-ae91-c8e66d3117bf.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     62371
IP address blocks:        2001:470:aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:24:9a:33:c5:e7:98:4d:2d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=e7cb2c79-1937-4dcc-90bb-7d5266d2a375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:32:9b:5f:83:9f:58:63:b2:69:a8:6c:a1:
                    57:41:a2:af:b9:19:7d:d4:79:09:95:16:a6:0a:7b:
                    67:e4:72:cb:f1:3d:d5:29:50:8e:27:01:8c:d7:2a:
                    a2:ab:fc:87:a7:dd:60:a2:d7:6b:ce:8c:af:2c:db:
                    40:6b:84:87:46:f8:f2:e7:93:b8:04:37:27:e4:8e:
                    69:76:59:bc:73:b7:9c:f1:da:c4:24:90:c7:9c:6a:
                    fb:dd:e3:ae:33:2f:0f:65:19:e1:b0:58:5c:f8:21:
                    96:61:ac:48:49:bf:21:bf:23:cc:be:ab:6a:6f:0e:
                    c0:54:ba:22:a9:4e:6a:93:97:06:db:b0:9a:c3:37:
                    94:4c:0a:60:5c:dc:0f:79:51:48:ee:21:aa:8c:20:
                    f2:5d:0d:b8:e9:3e:20:a8:5e:fb:42:65:79:0b:4c:
                    cf:82:ed:c6:2d:e9:f5:0b:af:1f:a2:71:17:45:aa:
                    78:b4:95:ec:f3:76:3b:19:16:f4:b6:e9:79:8b:2e:
                    b7:ce:de:3b:56:f8:37:37:ad:64:51:48:c4:b8:89:
                    c1:a6:45:c2:03:d6:15:fd:4e:12:16:ab:76:1b:eb:
                    16:64:7a:19:ba:03:da:32:a2:6d:53:b6:be:9a:1b:
                    8d:b6:2c:3b:59:f1:17:1f:5e:50:65:03:a1:ae:bc:
                    ab:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:39:BE:28:3A:43:A6:FA:81:A6:4E:B4:A0:36:9B:08:C5:C6:2F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6142388-e8df-3153-ae91-c8e66d3117bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:98:13:04:af:59:51:5f:de:45:aa:0e:5d:11:71:2e:9c:0d:
         c0:96:7d:6f:66:cc:1b:21:87:9e:84:6c:c2:be:e1:49:37:52:
         93:b1:b5:48:d5:56:bf:14:f8:f2:5c:0f:ba:ca:fc:12:ee:51:
         2e:2a:f0:88:fd:36:b1:13:64:ab:79:61:23:a5:45:b4:9b:f4:
         40:91:c2:ea:59:27:8d:68:dd:a8:98:8b:75:a8:80:1b:a7:11:
         4c:b8:da:b5:b8:3b:6a:78:8b:17:39:26:1b:9d:85:1b:00:a4:
         c7:78:2c:98:fc:a8:c7:1c:af:7c:9a:e1:05:23:93:a3:19:07:
         2e:50:c7:b1:af:76:ab:27:bb:55:c4:60:09:51:13:89:d5:5d:
         fd:cc:45:28:62:98:37:9b:f7:e2:5e:4d:45:e4:19:33:f2:f2:
         b5:57:4a:ec:86:d5:81:4a:0d:d1:da:2a:83:93:dd:55:9b:8a:
         ea:34:b2:c0:73:12:17:4c:71:b7:ff:3b:50:dc:8c:5e:a9:98:
         0a:33:0a:97:ae:93:d5:03:a5:6a:51:2d:17:20:f8:8d:6c:f4:
         fb:45:1c:7a:68:cb:74:df:39:e6:0a:b7:f5:52:52:be:32:46:
         49:bb:de:bb:07:72:5d:1c:ad:25:58:a8:a2:42:98:63:f9:95:
         9f:ca:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:53:05 2025 by rpki-client