Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb27139e-0627-3bfc-9807-879dd34a63a3.roa
File:                     fb27139e-0627-3bfc-9807-879dd34a63a3.roa (raw, json)
Hash identifier:          mWqSCebqLpFPWyBOAyf1xFYt5BZfIPT/6Cjaxu+j/h4=
Subject key identifier:   FC:14:85:BF:5D:DC:45:FC:68:79:14:FC:23:03:3F:32:38:A8:4A:A7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AAF64B9A93455A3360E297280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb27139e-0627-3bfc-9807-879dd34a63a3.roa
Signing time:             Wed 30 Jul 2025 01:30:10 +0000
ROA not before:           Wed 30 Jul 2025 01:30:10 +0000
ROA not after:            Tue 28 Oct 2025 01:30:10 +0000
asID:                     205384
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:64:b9:a9:34:55:a3:36:0e:29:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 30 01:30:10 2025 GMT
            Not After : Oct 28 01:30:10 2025 GMT
        Subject: CN=5df4f8b1-a691-46d8-ad2c-7bdd6422d73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:da:76:e3:0e:f2:cc:01:81:0a:82:04:76:99:
                    53:c9:a3:78:12:b4:fb:6b:20:74:88:ba:fa:0a:e0:
                    6a:3e:89:ec:f7:a4:85:29:84:41:84:7c:35:57:7f:
                    2c:e9:55:fb:53:77:71:72:44:de:97:99:3e:8b:82:
                    bd:b9:fc:7c:6d:d6:8d:1c:ce:6c:42:da:f0:48:ea:
                    74:29:30:2f:b7:9e:14:4c:66:eb:b5:ad:ba:62:2c:
                    dc:24:92:44:ab:41:e0:b8:11:58:a0:98:cc:bc:6d:
                    bd:13:a7:5d:be:ed:dc:70:33:b5:7c:e4:f1:94:bd:
                    9d:f1:07:08:0b:4b:55:2d:a4:27:0c:c5:f9:a3:7a:
                    0a:65:d8:2d:33:8d:9d:78:00:0b:9a:a2:d1:37:13:
                    cc:34:4b:b1:ea:bf:0a:e5:36:bd:eb:54:53:eb:7b:
                    3f:71:84:15:2d:ac:6d:cb:9b:48:a3:8e:77:16:50:
                    11:8f:cd:75:9b:0c:97:29:b0:64:40:ce:00:ac:b0:
                    7e:28:6c:a3:86:d4:0b:08:0d:6e:84:99:c5:28:77:
                    3e:2d:cd:a6:6c:87:03:45:c5:26:20:29:60:ea:72:
                    f0:17:14:a2:ac:f9:f4:86:60:b0:db:b8:15:d3:7a:
                    46:f6:4a:f9:92:57:75:65:e9:36:2e:83:b5:3e:ed:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:14:85:BF:5D:DC:45:FC:68:79:14:FC:23:03:3F:32:38:A8:4A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb27139e-0627-3bfc-9807-879dd34a63a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:93:69:9c:0d:ac:c6:16:a0:ec:ec:ab:6b:24:c7:87:04:2f:
         c0:26:5c:30:2c:88:25:92:50:3e:32:e5:20:c0:5c:f1:7a:bd:
         bc:87:dd:cf:69:0d:b7:85:d4:db:1c:84:76:ec:45:84:6f:e3:
         96:d7:86:01:00:71:8c:58:58:2f:01:06:62:d6:ac:70:e4:65:
         76:a0:6d:a5:47:a9:ce:5b:19:aa:8a:e4:93:30:c7:3e:6a:14:
         40:f2:1c:96:b2:f7:0a:04:21:b4:9d:a9:78:6c:79:42:d0:4b:
         51:90:e8:dd:ef:7c:49:92:22:3c:39:42:2e:bb:69:48:94:47:
         55:bf:48:c9:52:39:6a:3f:56:1d:fe:4f:52:fb:69:02:8b:cd:
         41:48:d2:64:0b:77:77:1d:45:c6:5c:be:29:99:50:da:02:c0:
         29:b0:9a:6d:cb:c7:46:12:c6:95:35:06:c2:6a:75:a2:e7:54:
         bd:21:69:eb:68:73:3c:b0:03:48:20:f0:6f:ef:1a:18:1f:75:
         a8:e8:d3:1f:79:67:af:23:47:0f:3f:8f:7e:0a:92:52:cc:b4:
         aa:6d:52:e0:82:3e:b0:1d:d6:b3:83:9c:a0:6f:a4:50:e3:40:
         f8:ec:82:2f:96:d2:3c:13:b6:a8:5c:70:f9:90:ca:22:83:99:
         51:20:1a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:23 2025 by rpki-client