Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa
File:                     3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa (raw, json)
Hash identifier:          83OeBuXv+u3R3Zr3Z5j2bbfOrX/L+DgnW0xIuZxqfCY=
Subject key identifier:   C2:A1:C7:0B:C5:E2:24:53:BA:1F:1C:63:40:7B:9F:20:1F:B7:8E:B8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FC8486C9253C56D058260
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     215684
IP address blocks:        2001:470:296::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:c8:48:6c:92:53:c5:6d:05:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=718e89d9-6bc3-4197-9c69-89800c384b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a2:70:82:1c:7c:75:41:d6:0d:04:c4:3b:ad:
                    95:91:4a:96:8e:c8:ff:25:5e:f9:db:ff:05:3f:77:
                    64:f3:9d:77:99:b7:f7:29:31:da:52:f4:c0:3a:01:
                    dd:ef:61:6e:dd:10:ea:2b:9a:85:c8:ee:af:79:3a:
                    e5:4d:7d:cd:f1:22:96:e0:35:15:af:5b:0a:6b:4e:
                    a4:a8:7b:b8:ce:50:c4:70:a0:69:e0:55:93:3c:07:
                    db:97:27:cc:f9:92:15:8b:26:38:68:2e:9d:67:d9:
                    af:5e:af:b8:f5:d7:fb:b3:c0:d5:3f:0c:fa:99:de:
                    ef:c4:44:7a:1b:9e:fc:51:e9:19:be:04:94:04:4b:
                    6d:39:ad:a3:cf:ac:a8:b3:8d:d0:3b:7b:4b:a3:8b:
                    b2:dd:94:58:34:d9:27:a6:6a:e5:0a:db:93:bb:15:
                    fb:f7:2c:23:9a:43:16:fd:95:90:92:0a:74:73:85:
                    ad:fa:c4:77:5f:f2:00:38:50:fc:12:b6:0a:b7:7d:
                    b7:90:37:e0:4d:12:f1:d1:f3:29:0d:17:7a:f2:68:
                    87:8e:9e:05:d9:95:b1:23:41:1a:3d:1c:a4:a1:95:
                    58:d8:39:3e:1e:4e:6c:fa:61:c7:61:fc:a9:be:73:
                    41:5e:3c:97:3b:aa:a8:00:94:e6:91:57:aa:b5:0a:
                    6f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A1:C7:0B:C5:E2:24:53:BA:1F:1C:63:40:7B:9F:20:1F:B7:8E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3026b249-874e-3cb9-9e6c-3bbb4a28028c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:296::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:22:57:66:8e:5e:ab:09:7a:6a:23:1f:ee:63:ac:47:d8:ae:
         85:42:2d:1e:d7:ae:24:60:d2:4b:e6:5e:ce:0d:89:18:46:30:
         7e:3c:ce:ab:a1:8b:a5:ca:f6:69:95:7e:e7:e5:40:b1:9f:bd:
         f6:fe:a2:27:1a:04:91:71:48:57:a6:ef:d5:dc:c9:2d:2b:c2:
         e6:a3:91:3e:2e:6f:c1:0e:38:2d:30:bc:16:7c:b5:af:9e:46:
         33:b3:39:f1:e8:62:32:03:2e:1a:4a:36:b6:f7:fb:89:23:8d:
         fa:10:8b:fa:bb:1e:68:33:5e:e0:7d:cb:ce:65:13:4a:15:43:
         39:b9:02:6f:02:f9:36:36:37:05:d5:d0:bc:2f:48:b9:0b:98:
         4d:55:5d:c3:07:96:20:09:99:0a:8b:9a:8f:ec:89:d3:0b:cd:
         d0:15:44:84:68:0c:f2:54:49:80:5f:2c:d5:a0:b7:ba:59:b9:
         43:17:ce:ae:10:f6:ce:64:b2:c3:b0:3f:b9:5d:9e:3f:6b:a5:
         09:b9:ce:17:94:58:6b:a5:f1:bc:da:4c:5e:47:ae:f7:c7:69:
         03:41:89:d7:43:16:3f:62:b4:8d:d6:f9:14:c4:5c:96:e0:35:
         66:79:30:1c:83:f5:ec:e3:da:86:10:2d:66:52:0c:87:56:da:
         4c:dc:b0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:37:44 2025 by rpki-client