Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ad02c58-a153-39b5-b41a-acc0faf6fa4b.roa
File:                     1ad02c58-a153-39b5-b41a-acc0faf6fa4b.roa (raw, json)
Hash identifier:          KvP3Sx+BN5PzKHjU58Jgq99CWyLZTHSJ3Ph7KR6lGWI=
Subject key identifier:   CD:BF:7C:1F:83:6C:1F:06:A9:4C:35:2A:C2:5B:10:DA:7F:72:27:70
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE44E14FD754B21A3B100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ad02c58-a153-39b5-b41a-acc0faf6fa4b.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     203760
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e4:4e:14:fd:75:4b:21:a3:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=0d43932d-6b5b-4b35-b9fe-076f0cc266d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:10:e7:d3:46:52:a2:77:09:d9:4c:a4:39:19:
                    99:97:dd:b8:bb:73:be:f5:d9:9d:53:0b:3b:24:a1:
                    3a:24:b4:48:00:f3:cf:b8:97:53:74:60:aa:b3:9a:
                    f7:78:8d:29:be:64:9a:47:be:8f:2a:db:8c:6e:73:
                    23:8c:c2:6d:23:d9:1c:da:81:ab:a9:c0:1f:84:4b:
                    59:81:25:4c:a8:37:1b:f3:79:6b:9e:52:5c:3b:b1:
                    7e:95:7e:7d:22:05:2c:96:82:bc:44:17:f9:97:c1:
                    ff:e1:15:54:38:1b:67:18:4f:95:d1:93:46:eb:67:
                    84:5d:53:f5:92:8c:ea:56:37:1e:72:ee:59:a0:f2:
                    8e:2f:ca:8f:2a:7f:2c:b5:2c:a6:b6:6e:34:b1:a8:
                    38:63:3b:92:88:85:f7:fe:c4:72:55:54:00:aa:12:
                    30:ae:c4:d8:b6:43:4b:3d:1e:8d:c6:43:9c:14:06:
                    ab:70:27:31:75:94:b3:68:5d:cd:5b:09:c8:d0:54:
                    1b:22:a8:87:ab:5e:78:6a:e1:df:eb:2c:55:97:3d:
                    62:67:a6:c9:68:7f:a6:b8:22:b6:4d:20:6c:a1:73:
                    5c:e6:51:d6:48:cf:d6:2f:79:8d:5e:57:9b:63:94:
                    cb:66:52:1f:0a:f3:3a:2e:56:16:04:c4:fd:c6:6a:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BF:7C:1F:83:6C:1F:06:A9:4C:35:2A:C2:5B:10:DA:7F:72:27:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1ad02c58-a153-39b5-b41a-acc0faf6fa4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:dd:54:46:50:ea:71:2d:1f:93:cc:fd:d6:ec:8a:d8:f7:62:
         de:37:e9:81:69:d6:8d:05:e8:83:37:3c:27:49:43:1c:a3:3d:
         83:73:c3:61:60:5d:33:0e:51:78:13:eb:f8:95:21:65:64:df:
         31:55:f4:c3:e3:ba:d4:77:db:04:15:30:5d:3e:37:34:e1:fb:
         f4:b2:c0:06:50:47:4b:29:6c:03:66:51:3f:7f:6a:d3:0d:be:
         b1:7b:ff:cb:2a:ed:44:5a:71:52:18:51:67:4e:6a:ab:aa:fd:
         1a:3c:44:1b:6a:c9:42:da:a4:1e:78:76:76:39:c6:7d:8d:73:
         de:d7:52:de:f6:78:76:a4:08:49:87:30:74:ee:d2:f9:cc:77:
         73:e9:eb:15:61:eb:87:36:30:b9:6e:e9:59:df:e5:f6:e9:d0:
         af:ad:6c:2c:23:d0:eb:c3:eb:58:d8:2d:e8:26:04:93:90:cc:
         e5:2f:3a:7a:b3:d9:90:0b:b8:95:e5:e0:81:a0:52:8d:fa:a3:
         23:49:59:58:77:0c:55:b9:c7:6c:54:8b:fb:3b:37:05:80:d5:
         51:9e:8a:40:db:f5:86:da:65:fd:9e:b6:64:f8:e3:d3:04:9f:
         f2:b6:24:04:24:b5:94:73:f3:66:83:ee:3f:23:59:ac:2c:51:
         68:9f:5c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:56:44 2025 by rpki-client