Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/39f8b6e8-3bf2-3f97-9c78-7f03ed822694.roa
File:                     39f8b6e8-3bf2-3f97-9c78-7f03ed822694.roa (raw, json)
Hash identifier:          TWsw9TNa9f9p1ypitenkDGpknoFFxHPpRY2KOtMHpKw=
Subject key identifier:   1C:C0:01:7E:8F:D0:0F:4D:56:DB:DB:FA:A9:C9:E2:11:73:81:D9:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FD76F278E4D94A36AA5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/39f8b6e8-3bf2-3f97-9c78-7f03ed822694.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     17085
IP address blocks:        2001:470:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:d7:6f:27:8e:4d:94:a3:6a:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=8dc62660-f219-4eac-b8da-0fc17228a32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:37:5e:a9:5f:0e:3a:e2:29:b8:2a:a4:d8:
                    18:97:54:ff:d1:93:05:1e:5b:7e:ec:98:18:e9:3e:
                    bb:da:a3:2e:2a:81:f9:e8:e8:aa:f1:5a:b4:0a:e6:
                    08:d3:ff:49:6c:1c:e2:2b:1e:fb:1f:80:70:59:59:
                    8e:70:a0:38:2f:d7:38:bc:6b:78:29:6c:ed:52:93:
                    70:fc:0a:a0:94:d8:bd:05:43:6f:d2:4c:a0:af:e0:
                    0c:fa:04:45:c1:fd:47:0b:53:c0:48:f6:1e:2e:ca:
                    fa:f8:60:54:62:02:a5:44:fa:0e:e4:8e:ac:b8:bd:
                    20:2c:d0:f2:ba:f8:5b:41:59:1f:59:8d:f7:eb:8a:
                    74:44:78:02:78:11:df:af:10:45:17:1c:13:70:3e:
                    6d:34:f0:2e:f4:82:02:54:e4:b4:97:f9:5d:15:bc:
                    bd:09:07:ac:29:88:3c:af:39:93:6b:7e:51:04:96:
                    ff:d8:d0:ee:44:36:32:71:a6:13:bb:19:47:0c:fe:
                    30:2b:8f:93:25:53:7a:35:a6:b2:2d:f9:16:cf:26:
                    a7:86:01:2f:b1:6c:6b:e8:48:11:ef:74:bf:cd:ac:
                    01:46:52:34:b0:41:8d:f7:cb:ae:a1:ac:8d:e3:8e:
                    07:41:61:cb:5b:6d:e7:76:47:98:13:35:e9:bd:ef:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C0:01:7E:8F:D0:0F:4D:56:DB:DB:FA:A9:C9:E2:11:73:81:D9:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/39f8b6e8-3bf2-3f97-9c78-7f03ed822694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5e:39:3d:9e:f2:fe:fa:9b:17:78:e7:8e:f3:8e:f8:cc:9a:
         89:52:a3:a2:63:85:11:f6:cf:a0:6f:6b:68:be:46:dd:a3:6e:
         7a:ae:1a:3e:9d:3e:02:26:e9:4b:22:8e:8d:7d:bd:8b:d5:c6:
         be:af:d5:46:6f:bb:e2:29:e3:a2:65:74:f4:11:a1:e0:b4:d2:
         8d:c8:2c:52:83:92:ee:18:44:af:40:14:2b:88:9f:13:e3:c4:
         90:4b:f7:e9:b0:72:cb:ed:ae:d2:ef:21:e8:a4:87:11:ff:0c:
         f8:dd:da:e2:e9:f6:90:bf:b8:0d:97:3f:cb:d1:5d:c8:fb:20:
         4c:e0:65:77:ee:7e:24:30:64:8a:0b:67:99:76:fb:bb:0a:dd:
         d9:00:75:f4:ec:0f:28:17:d6:a6:a7:3b:cf:8a:bd:db:d3:c4:
         20:a8:a2:25:57:1c:46:11:93:d5:64:0d:39:24:2f:8b:be:7d:
         3f:4d:ba:20:11:f3:70:7f:15:b3:2f:14:7e:60:e3:26:75:c6:
         72:13:46:e7:a0:1c:50:8e:c9:20:74:88:f0:dc:13:df:ab:10:
         0b:f8:63:e8:c0:19:05:9a:bb:30:b1:e8:19:6b:32:e5:71:04:
         fb:96:08:3c:1e:86:89:68:2d:70:37:a4:4e:63:1d:2e:f1:05:
         b0:1e:5b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:00 2025 by rpki-client