Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b960473-efd3-3be3-aa53-91350b0e2c52.roa
File:                     0b960473-efd3-3be3-aa53-91350b0e2c52.roa (raw, json)
Hash identifier:          ByW/WBIgkjPmXcIMohI6bt3BQp6M4ds69PqaaxXAwaI=
Subject key identifier:   C6:21:D1:55:03:87:18:B9:48:85:BD:12:C2:47:53:56:F0:46:32:CB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB46B873489443A789540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b960473-efd3-3be3-aa53-91350b0e2c52.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     26123
IP address blocks:        2001:470:10c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b4:6b:87:34:89:44:3a:78:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=76e1fe26-ce31-4950-96af-5c83abae8302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:3f:98:17:07:54:d5:4c:c4:5b:50:7a:f0:
                    5a:e1:3f:9b:10:74:40:c6:bc:d2:ff:d9:1b:85:fb:
                    8b:6a:6b:3e:60:4f:97:cf:a7:52:c7:02:5b:85:46:
                    f6:12:74:39:51:7c:b6:85:ec:e1:2a:52:fd:88:28:
                    62:eb:47:7d:86:ea:b6:20:8f:62:d3:0d:6d:f8:25:
                    dc:06:4b:a0:16:3d:d6:b2:3d:2f:18:72:d4:aa:5c:
                    1e:39:52:47:d2:63:7f:9f:cd:c5:1f:f6:1b:d9:4c:
                    bf:b7:d5:ad:64:0a:e3:ba:af:b4:80:aa:c1:71:fd:
                    d9:d9:f8:a3:58:d1:4c:c8:83:6a:3f:2f:7d:20:13:
                    07:58:48:e7:59:d5:36:55:bb:37:6d:7a:64:f2:21:
                    ab:6a:ca:2c:07:06:d4:50:8c:75:84:c8:2b:f3:98:
                    ad:7d:e6:43:73:b4:e2:b2:85:24:68:fd:09:46:43:
                    f1:8b:37:5f:37:7a:ef:13:2d:e9:7a:2b:77:78:08:
                    e5:57:8d:8a:a5:0e:e8:7b:1b:5a:70:6d:eb:29:cd:
                    50:33:fe:17:d0:f2:14:70:37:63:4c:40:bf:6e:e6:
                    fa:64:cf:77:e5:2c:b5:91:73:cc:88:33:1b:27:74:
                    6d:4b:26:f0:62:33:86:78:b7:ec:7a:05:42:cf:7d:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:21:D1:55:03:87:18:B9:48:85:BD:12:C2:47:53:56:F0:46:32:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b960473-efd3-3be3-aa53-91350b0e2c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:10c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ed:58:a4:5c:e1:87:47:18:e9:7c:5a:4a:0b:b7:b5:41:3e:
         e0:63:4d:44:ab:5d:ad:c4:18:9a:88:87:1a:26:74:5b:44:f7:
         af:1c:51:36:7a:07:b2:25:ee:3a:40:3f:0b:b7:76:c9:1e:7e:
         fc:18:38:fe:9a:9b:f3:ad:91:ae:57:8b:96:25:d8:2e:b7:6d:
         f6:de:d3:f3:ff:01:72:65:18:2e:e4:78:59:66:31:3f:c0:41:
         9f:f6:06:9a:0a:e7:4d:e9:43:b6:1a:2f:1c:c6:73:df:d5:ac:
         2b:48:22:f1:63:34:4d:74:67:e8:ca:21:1f:80:85:d9:3a:62:
         60:90:78:2e:b9:b2:ae:a3:49:6a:88:16:57:ca:56:2b:08:b2:
         69:25:5f:35:79:1f:61:f8:ed:29:eb:f6:07:48:e5:ba:0c:02:
         6a:2d:71:6c:a2:aa:ff:ff:67:8a:15:e8:94:96:1b:85:b1:22:
         42:81:3d:af:ca:e4:bd:e4:e1:5f:2c:ee:69:0f:2a:b2:90:16:
         65:d6:75:82:c9:3c:9d:c6:94:11:94:5b:1c:8a:cf:d1:65:44:
         02:01:0b:9c:12:c4:be:e4:25:77:64:9b:1f:66:13:d0:34:c0:
         83:41:d9:cf:8b:02:0b:2d:e2:71:ed:60:09:d9:fa:cb:9a:0a:
         cd:cc:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:07:39 2025 by rpki-client