Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e98d150-755b-3cbf-959f-6f8293cfd209.roa
File:                     2e98d150-755b-3cbf-959f-6f8293cfd209.roa (raw, json)
Hash identifier:          tR+FimQeCAUh2WhV7XzaoJAgNZCndKnT5uDsAS1EMWk=
Subject key identifier:   54:B7:2F:1D:7C:AA:AD:6E:60:A9:B5:FF:FC:43:CD:D0:98:8D:CB:60
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE66636EC20DC567DF800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e98d150-755b-3cbf-959f-6f8293cfd209.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     400919
IP address blocks:        2001:470:27f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e6:66:36:ec:20:dc:56:7d:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=b99763ca-d7a4-4b36-8897-99d37337270f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:0e:e5:1e:c4:08:26:af:cb:fd:2d:3a:b4:
                    b4:c1:ea:3d:61:27:15:bb:48:ca:1a:bc:de:f4:b2:
                    c9:bb:96:4d:46:03:2b:81:60:86:91:af:03:3f:df:
                    1a:68:56:79:6f:04:8e:b7:c5:af:48:1b:12:5b:98:
                    6b:92:f1:25:51:dd:73:45:93:11:0a:af:de:ed:c7:
                    78:0d:f1:83:c3:80:23:5d:ba:82:07:53:e2:3e:63:
                    f2:7d:f4:9f:67:59:fb:f7:27:c0:69:92:ad:9f:85:
                    50:07:2f:cb:13:7b:43:2c:31:71:ff:f6:a7:f9:f3:
                    c6:42:38:35:a4:74:86:61:7c:6a:d1:ad:7c:47:98:
                    9f:82:86:3e:7e:d5:83:12:00:7d:14:05:96:4b:0f:
                    ca:a4:87:39:11:15:51:09:54:36:54:19:41:8d:39:
                    a1:70:a1:7d:cb:8e:20:62:1a:ee:57:3d:35:b4:bf:
                    9f:86:fe:c7:e4:a9:92:af:d8:85:1a:c1:42:24:05:
                    dc:26:80:12:47:fe:10:b3:94:a9:9c:c9:18:e4:1c:
                    ed:33:43:05:ab:9a:5c:53:90:ee:db:f6:37:79:03:
                    7b:e4:b3:78:9b:ba:ff:16:2a:f9:3e:ed:61:a1:c1:
                    47:b2:54:39:1b:20:36:eb:12:52:68:40:12:1d:fd:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B7:2F:1D:7C:AA:AD:6E:60:A9:B5:FF:FC:43:CD:D0:98:8D:CB:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e98d150-755b-3cbf-959f-6f8293cfd209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:27f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:11:7a:0d:c5:06:85:db:34:b1:da:d2:e7:fb:1c:3e:97:16:
         ca:67:b8:10:d6:07:13:8f:42:69:c0:c7:cd:91:09:25:07:a2:
         17:cb:d3:95:3d:91:a5:54:dd:fc:80:cb:f2:3c:3c:08:88:64:
         b4:44:f1:86:fe:a8:ef:f5:b8:4a:c4:49:2b:76:a5:a1:96:cd:
         e2:9a:bd:cc:eb:28:d1:35:5d:d1:35:c9:1b:a1:91:16:59:b0:
         39:b9:80:2f:63:a7:a6:c7:34:71:22:f9:b5:68:db:fb:1c:40:
         11:73:0f:cb:84:af:f1:4d:78:a3:7b:11:dc:12:45:6e:ca:cc:
         ed:2f:af:5a:7d:85:89:9e:57:cd:88:dc:da:77:5c:1e:15:a7:
         77:b4:ac:8f:fe:5a:30:6e:ae:f1:f2:19:a6:56:d6:9d:24:eb:
         fe:42:6f:fe:06:0d:e9:36:b6:b3:18:d4:b8:c8:55:00:32:92:
         6a:d8:9a:52:0e:75:e7:e5:c2:6d:69:e2:65:47:77:26:36:81:
         e4:2f:e5:7c:20:1a:a2:ca:42:f2:a6:85:ba:e7:35:3f:0f:ea:
         b4:21:46:4c:80:64:15:28:de:bc:21:9b:5c:a5:39:bc:46:b0:
         1e:fd:7c:8c:7e:7c:ac:ad:11:0b:2b:4e:b5:d2:e0:7c:e4:12:
         16:30:a2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:06:31 2025 by rpki-client