Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a060aad-3405-345d-865c-bf982825bd40.roa
File:                     4a060aad-3405-345d-865c-bf982825bd40.roa (raw, json)
Hash identifier:          Dj/m9pDyTzBKGPzYL20+M+dmn1KX7icZaKlKEllgro8=
Subject key identifier:   BA:D4:74:2F:5F:34:90:9E:DA:33:3D:4E:8C:B2:B2:84:95:88:1E:A4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A2963E59506A489C483E0D000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a060aad-3405-345d-865c-bf982825bd40.roa
Signing time:             Thu 12 Jun 2025 01:30:11 +0000
ROA not before:           Thu 12 Jun 2025 01:30:11 +0000
ROA not after:            Wed 10 Sep 2025 01:30:11 +0000
asID:                     401139
IP address blocks:        2001:470:1eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:63:e5:95:06:a4:89:c4:83:e0:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 12 01:30:11 2025 GMT
            Not After : Sep 10 01:30:11 2025 GMT
        Subject: CN=00937edd-7f36-4ffa-9aa5-337a12cd9925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:3a:ac:0f:8d:ee:61:ee:2e:ee:75:ba:60:
                    aa:b8:61:03:e0:0c:17:46:28:38:1f:7e:1a:50:90:
                    e1:be:5a:bb:a3:f0:dd:28:d6:da:0a:c3:f5:db:d3:
                    99:29:58:3e:34:4e:80:9f:75:82:b4:2c:cb:8e:3e:
                    95:6c:b7:e8:9e:32:f1:ad:2a:89:4d:6e:b3:99:8d:
                    1e:28:06:31:10:78:08:91:b3:54:c2:cf:28:92:f0:
                    1f:d9:49:c6:5f:72:5c:2a:84:8a:3a:0b:d5:de:a5:
                    a6:60:0d:13:d7:ce:b1:72:2e:d8:af:6e:ad:c6:55:
                    f3:19:90:59:40:bd:dc:02:94:fa:b9:26:39:91:aa:
                    a9:be:79:9f:b2:20:ce:fc:8d:91:9e:d3:eb:f5:3a:
                    6f:c7:87:22:45:17:58:ba:68:ff:64:02:90:e2:b1:
                    cc:40:c0:3d:1b:15:32:6f:ce:26:80:4a:e9:79:ca:
                    3a:4c:40:8c:7d:1d:57:03:3a:c3:63:c5:41:60:11:
                    47:68:ff:0b:1b:0b:82:4c:9f:55:b4:09:3b:31:dd:
                    9c:85:10:8f:a7:62:6c:1f:7d:34:3e:4d:61:fa:76:
                    65:cd:05:f6:af:fe:2f:a5:79:09:d2:f7:b3:75:2d:
                    e1:58:8c:8f:c8:c1:d6:8f:4c:78:51:ca:34:24:08:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D4:74:2F:5F:34:90:9E:DA:33:3D:4E:8C:B2:B2:84:95:88:1E:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a060aad-3405-345d-865c-bf982825bd40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:90:64:b8:b1:50:79:12:79:a1:62:74:ba:bd:90:3b:65:89:
         88:36:a8:e7:a1:7c:71:e3:cb:d3:2f:5d:ff:fd:74:37:06:c1:
         32:3b:6b:4f:83:02:e0:96:9e:dd:09:55:1c:ed:10:31:32:80:
         80:b4:bf:24:a5:06:92:9a:88:cc:c3:34:f6:5e:51:68:65:19:
         36:0a:86:e0:df:db:1b:f9:96:6e:fe:7d:df:e5:f7:5e:a1:99:
         5f:9f:32:d9:df:4f:9b:85:0f:5f:92:bc:18:2b:57:27:d4:f9:
         30:fd:ad:a0:34:57:c0:2c:8b:da:9f:fa:a2:38:2f:b3:4a:d4:
         b1:5a:72:97:c9:d0:06:a3:60:14:6c:4e:74:d2:19:6f:74:18:
         bc:ed:4e:81:cd:d8:5f:0e:f8:e2:e5:c8:b0:e0:5f:79:f4:e8:
         ed:b7:85:1e:a7:5c:81:f9:f1:69:54:aa:fa:12:a3:de:63:b8:
         53:a6:15:16:5b:0c:51:83:66:10:5d:67:5f:56:0b:7d:9f:05:
         47:63:07:e6:f5:76:e4:60:58:d1:14:ba:b8:c3:fc:04:b2:a5:
         9c:77:d3:51:68:52:5d:4f:1e:de:4e:25:b2:82:a1:34:54:dd:
         d8:92:b2:a1:81:0d:a0:9b:68:99:93:be:45:70:73:f2:da:29:
         f2:76:f0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:59 2025 by rpki-client