Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa
File:                     3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa (raw, json)
Hash identifier:          Y83fgU3ThDrBHr0iUaxhMZtC+bl44oZDcg30nFM6f1Q=
Subject key identifier:   75:58:26:C1:96:4E:76:55:84:93:AE:A6:6C:65:58:22:C6:02:8A:7C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FCBC42DF97EBB6010BE40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     21854
IP address blocks:        2001:470:24c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:cb:c4:2d:f9:7e:bb:60:10:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=e87be902-ab8c-4291-a5d1-0036690c6bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:29:d3:03:1d:ca:fa:ac:d8:25:d3:07:5c:
                    25:d2:08:19:ec:61:1d:4d:90:00:42:74:1b:62:df:
                    bc:54:21:0e:56:d9:d3:84:2d:fc:17:b8:1e:64:5e:
                    d8:8b:85:e0:7f:0e:ac:fb:66:b4:eb:25:53:65:cb:
                    31:e4:65:57:c7:29:fd:3e:71:de:42:e0:7e:6a:09:
                    67:f5:5e:b2:0d:a8:5a:e5:a2:3e:75:95:07:14:ab:
                    c6:74:58:e8:72:db:6a:b3:d5:15:b6:3a:5e:64:9f:
                    2c:4c:37:87:e0:4e:13:5d:99:b0:39:75:5f:ea:1c:
                    0e:e3:02:e9:2a:90:a5:51:40:96:d2:6a:39:fd:67:
                    e7:b5:1f:0f:74:95:cf:22:8a:9c:fc:10:39:1e:56:
                    42:89:26:d5:a0:81:dc:cb:98:20:b4:dd:53:9a:5d:
                    cc:fc:4f:a9:4a:76:ef:44:aa:5e:ee:96:21:d0:e4:
                    41:72:c6:d8:12:30:45:9c:df:8c:ba:a4:b6:c3:6d:
                    96:90:c8:1a:35:70:6d:53:45:bb:64:da:ef:b6:2c:
                    cb:d5:49:78:5e:91:e2:09:3b:9a:fb:62:4a:83:88:
                    cc:92:b5:f6:2b:7e:a5:17:4f:05:03:a8:89:18:42:
                    02:9d:44:b3:f7:58:43:2d:e4:88:ae:e8:64:ab:7c:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:58:26:C1:96:4E:76:55:84:93:AE:A6:6C:65:58:22:C6:02:8A:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af86962-0bf4-327b-8ced-5b0b99ebd6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:24c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:57:63:ac:8c:1c:f3:bf:df:71:6a:1c:ab:88:90:fd:e2:0c:
         c0:26:8b:c7:0f:97:7f:fb:28:93:a2:9b:15:18:c8:3a:64:d6:
         43:c6:94:4f:0a:07:05:1d:9d:e6:57:7d:28:41:4c:83:1a:a5:
         49:72:93:e8:71:ca:af:05:1e:2f:8e:bd:46:df:30:48:25:d7:
         68:17:2d:e6:15:81:09:8d:c2:d2:61:19:06:6e:88:90:59:bf:
         ef:22:71:7b:7d:62:59:1e:eb:c0:54:87:60:b1:f2:c7:ea:19:
         b4:67:ec:13:82:c5:4b:c9:d8:91:b1:c7:b9:ec:b1:53:fd:3d:
         15:61:c9:55:dd:7a:a3:a7:2f:b9:26:91:e3:0c:27:e3:fe:b7:
         80:0d:af:ce:1d:ac:fb:77:78:c1:21:0e:05:5a:53:5e:c8:1a:
         04:6f:d3:8d:7f:a8:fb:5f:96:88:e4:1e:cf:0c:10:f9:12:4d:
         d0:64:16:e6:7b:d3:f5:cd:a6:df:41:d8:d5:61:c6:0c:4a:bc:
         bb:26:bd:67:2f:bb:e6:82:5b:80:f9:26:47:96:14:a8:94:73:
         29:bd:e2:02:bc:cf:e6:3f:20:8d:95:84:f1:df:5c:a0:fb:67:
         b6:7c:1e:76:f5:40:db:f9:78:00:90:32:73:e2:43:e1:13:a8:
         1c:b6:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:14 2025 by rpki-client