Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db27082-c618-39cb-a3a7-c8d73acd7c49.roa
File:                     2db27082-c618-39cb-a3a7-c8d73acd7c49.roa (raw, json)
Hash identifier:          F4d+5Z27Q5ow46wvTo/cKxcU84m7x78lCmR2NLGArEo=
Subject key identifier:   01:21:0C:50:E6:91:BF:76:7B:99:F8:7B:20:8B:3E:2A:97:1B:D0:0F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE64D483B9CEAFD625980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db27082-c618-39cb-a3a7-c8d73acd7c49.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     5723
IP address blocks:        2001:470:277::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e6:4d:48:3b:9c:ea:fd:62:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=b6cd419f-b5f0-4d2a-8df0-aa0316f97a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:46:92:0c:b5:47:c8:98:71:5b:e2:d2:1c:bc:
                    fe:97:dc:f1:73:03:6f:13:71:08:b1:af:46:b6:90:
                    36:be:bd:98:c6:b5:92:76:99:bb:c1:33:9f:d3:e0:
                    60:23:54:37:b1:17:34:2f:f7:c5:54:95:fb:e7:18:
                    2f:1e:75:b0:30:99:8e:9b:00:86:87:e0:3c:69:6f:
                    de:ca:ee:69:1c:3c:44:28:c1:6b:33:b1:7c:5c:ef:
                    b0:3b:0d:91:2a:37:18:91:fb:fc:0e:b9:35:a0:8a:
                    5b:78:da:66:16:ef:08:a8:16:50:f4:76:3b:07:14:
                    e3:71:b7:42:f3:1e:a1:60:3e:34:2a:8b:2e:cc:3c:
                    5b:7c:b1:ca:b3:cf:97:ba:55:b0:98:7d:9d:e2:fa:
                    93:fc:52:7e:dd:14:5a:83:72:2e:f7:87:12:a5:03:
                    c5:aa:b5:bf:4a:8e:64:f6:82:21:85:5e:e8:36:00:
                    a7:3e:16:15:02:db:54:dd:76:8b:51:4c:50:16:c0:
                    a2:46:bf:fe:50:8e:2f:84:73:fd:76:19:e8:d4:b5:
                    c5:ea:b4:30:a5:f6:0f:eb:de:46:37:06:18:55:aa:
                    5d:c6:f1:a4:99:b0:b4:8a:fe:8d:e0:78:f2:bf:93:
                    a2:11:64:9c:e0:04:ab:50:d4:b7:4a:f7:0d:4b:d7:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:21:0C:50:E6:91:BF:76:7B:99:F8:7B:20:8B:3E:2A:97:1B:D0:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db27082-c618-39cb-a3a7-c8d73acd7c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:277::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:92:79:ba:3e:12:fd:a3:c2:1b:8d:2f:b6:a6:15:99:f4:d0:
         95:8a:27:ce:04:32:7b:97:5a:d8:bb:29:44:bf:c5:5b:e2:d9:
         a6:66:e0:c8:17:62:a6:1c:ab:04:b5:44:a2:4c:c3:3a:82:71:
         4b:d1:8a:33:82:0b:23:e9:5a:db:f5:1f:61:dc:a1:bc:98:1d:
         9b:7e:e5:b2:b1:68:f9:5e:06:e5:ad:63:64:ab:95:7f:d9:95:
         d5:4b:39:b2:c1:0f:ed:c8:2e:13:b7:7a:06:31:8f:69:0d:5d:
         85:a4:7b:15:fc:0f:e3:1e:d8:52:17:b7:75:35:07:2e:69:96:
         0e:34:a4:96:28:43:57:58:6a:bb:29:e0:ef:38:fe:3d:9e:37:
         7b:3e:06:db:5d:5e:b9:34:cc:15:81:dc:e0:94:92:72:bf:c0:
         d1:a4:48:14:73:a3:ad:56:0c:ac:8d:93:76:88:90:9d:e9:f6:
         b9:a0:b6:78:bc:42:81:cd:e4:e5:ff:42:25:3f:50:86:16:1a:
         b6:ed:6b:c9:a5:7f:e7:0e:da:fa:94:e9:eb:f2:74:8c:e2:2e:
         3a:9b:4f:75:be:9e:8f:0b:47:a3:09:30:b4:87:74:8e:ad:78:
         d9:88:3e:56:44:89:e7:88:3a:53:d7:7e:92:5b:66:b2:88:ba:
         d1:2b:49:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:37:45 2025 by rpki-client