Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21ea31d9-b9be-380d-b1cf-59bfae553d93.roa
File:                     21ea31d9-b9be-380d-b1cf-59bfae553d93.roa (raw, json)
Hash identifier:          Fz1tsuU8rT+KpNSfbr8tS0VXr3BoOtWShhf6PK0ZUgs=
Subject key identifier:   E0:86:41:17:AF:03:C3:C3:A1:EF:FC:51:9F:9A:C4:15:D0:42:24:7A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849912F5644720E37D5F73B1D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21ea31d9-b9be-380d-b1cf-59bfae553d93.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     55655
IP address blocks:        2001:470:3c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:56:44:72:0e:37:d5:f7:3b:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=8255396b-f48c-43d4-a65f-406dc2276adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:e2:ab:a8:2e:c2:48:6a:c2:91:99:3d:51:
                    66:14:11:ac:5b:0a:a1:47:cd:b2:8e:07:21:ea:ed:
                    dd:95:a0:d3:86:cf:97:c8:a4:69:4b:7b:7e:96:81:
                    05:a9:5e:9f:20:4b:d9:ef:c8:48:29:1c:af:f3:fa:
                    ec:48:83:17:4b:76:56:c1:a1:38:cb:9f:7c:a1:2f:
                    e5:b7:8f:54:a0:1b:65:2b:e9:c4:a2:6c:d7:5a:58:
                    75:47:60:29:54:0b:a9:2c:ed:2b:5d:ee:46:77:b2:
                    03:9e:1a:a5:89:51:56:81:dd:de:0f:4c:5d:31:fc:
                    8e:10:26:a7:ab:1d:48:a9:03:dc:58:e2:61:13:24:
                    b0:bb:8c:a1:dc:22:88:60:b2:e6:bd:dc:80:53:b5:
                    b7:01:68:62:a6:1f:28:58:c7:fc:9b:0a:81:46:1f:
                    e9:18:9e:73:dc:8e:ee:ae:57:de:6b:7c:b7:b0:c5:
                    e4:4c:95:c2:d9:35:0c:6d:ab:37:34:27:8a:10:c1:
                    5c:91:d1:26:f7:85:32:c7:62:d0:79:8a:e9:74:84:
                    08:8a:51:16:ad:19:61:55:d2:81:f4:37:92:08:78:
                    e5:5c:4e:af:62:9a:1a:7c:b5:f9:53:85:aa:01:68:
                    21:65:b0:f3:50:c9:68:a8:24:78:01:ff:ab:ad:d8:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:86:41:17:AF:03:C3:C3:A1:EF:FC:51:9F:9A:C4:15:D0:42:24:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21ea31d9-b9be-380d-b1cf-59bfae553d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e0:f2:20:3c:3b:0d:14:ec:2b:9b:b3:d7:bb:4f:b2:d7:3a:
         a3:b7:40:c3:ff:c6:8e:8a:e7:64:a0:c5:12:55:52:b2:76:82:
         6b:eb:7f:72:6b:00:3f:d1:ef:5a:fd:e9:b3:7a:a8:21:ae:7a:
         10:57:a6:b5:69:67:be:11:ce:4f:55:b6:05:e0:e1:c6:9a:59:
         89:df:c0:29:fe:b8:ba:4c:6a:92:25:f0:0b:6e:09:7a:5d:00:
         d4:a8:4f:90:cb:b0:90:0e:81:eb:db:8f:db:eb:7c:d9:4b:74:
         1d:42:38:73:dd:96:ce:46:fe:70:c3:5d:48:da:59:6d:a8:25:
         a3:15:a2:b5:df:5d:57:65:5a:90:43:ec:07:87:e4:18:57:79:
         03:65:d2:30:ec:cf:20:e5:ba:15:60:8a:e8:eb:0f:01:42:ce:
         d9:bb:6e:a1:f6:0d:5e:de:7b:52:a2:41:33:ef:f7:2d:98:c0:
         cd:9e:b9:75:e4:47:a0:4a:e5:a7:af:5d:34:1a:9f:c7:63:2d:
         4b:3b:02:1d:f3:c3:76:01:30:dd:c8:3d:e7:dc:c5:3b:a2:46:
         02:42:9e:3a:e4:16:eb:ad:57:19:4c:25:bf:c0:66:82:de:af:
         48:37:af:a4:1b:11:a8:56:b7:ea:18:3e:d0:66:7c:15:99:61:
         9b:e1:45:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:06:47 2025 by rpki-client