Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4be2201a-ffa9-354a-8dc1-50b8fedb9a01.roa
File:                     4be2201a-ffa9-354a-8dc1-50b8fedb9a01.roa (raw, json)
Hash identifier:          lj/6oTgl9aXNMkurd15yIp30ilzgSIV3Inj7o9z5Q2s=
Subject key identifier:   4A:FE:58:A8:10:5E:3B:4E:D5:94:BE:05:E9:73:A8:5F:5C:A9:06:4C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FEB46201C48D3CD2B4400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4be2201a-ffa9-354a-8dc1-50b8fedb9a01.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     22890
IP address blocks:        2001:470:30f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:eb:46:20:1c:48:d3:cd:2b:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=8d9e50a6-9730-4b7b-8d7b-7dc61ab4a8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:61:60:c5:ef:1d:1e:ac:f5:b2:d3:3b:8f:a0:
                    fd:9b:77:75:e8:c1:93:3e:9b:06:bf:87:14:be:f1:
                    cd:80:0b:14:c7:0f:9a:03:ee:1a:f0:fc:9d:2b:6d:
                    07:c9:75:30:02:36:e8:74:0f:69:6c:4d:ce:8e:7d:
                    d7:4b:1a:5e:ee:3b:fa:99:35:a9:9a:b0:bc:7e:76:
                    da:f6:69:3e:6d:83:af:89:c4:7c:26:74:6c:98:f4:
                    5f:71:e9:cc:6f:be:b3:2f:f9:c2:10:b0:cf:3b:3e:
                    3a:a8:b6:42:2f:9a:90:1d:48:d3:21:ce:39:28:c0:
                    9d:8e:e1:58:c1:a0:13:88:d1:37:53:21:d0:8c:32:
                    92:ae:8d:c9:8f:4e:5c:a6:14:5a:63:9d:75:78:5f:
                    5f:05:5f:30:7a:12:3f:ae:f6:d6:07:22:86:6f:36:
                    1c:88:b0:83:57:08:07:ad:aa:3e:fd:75:c3:25:fd:
                    05:2a:2b:e2:25:46:7c:cf:60:dc:7d:da:c1:36:82:
                    83:c5:1e:9b:a9:ed:08:4d:37:3f:f2:a9:62:43:e7:
                    13:5b:dc:54:2a:6c:f2:8e:1f:37:21:ab:4b:da:94:
                    8d:71:2c:a5:44:35:69:e8:2f:44:c1:65:33:3f:36:
                    fd:0a:3b:8a:23:f4:66:a6:e8:d1:fe:42:86:8b:0b:
                    68:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FE:58:A8:10:5E:3B:4E:D5:94:BE:05:E9:73:A8:5F:5C:A9:06:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4be2201a-ffa9-354a-8dc1-50b8fedb9a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:30f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:76:bd:5d:2c:be:6b:39:70:00:e1:7f:ed:6e:97:55:98:cd:
         b2:e4:73:b8:79:18:0f:b6:af:ff:45:c1:01:b8:79:20:21:59:
         28:1d:43:d0:dd:cd:cc:3c:7e:46:52:a1:af:e9:39:e5:45:70:
         53:b5:ba:b3:6e:a4:42:60:b9:eb:28:f8:b3:e4:23:15:f6:01:
         27:e7:52:cb:4c:97:85:3b:00:a1:df:39:15:e2:23:76:7b:76:
         1a:bf:05:60:1d:88:eb:a3:7e:89:5a:9f:ca:0b:a5:e9:51:f2:
         8c:84:a6:6f:65:03:6c:18:61:ae:56:16:65:97:14:54:b1:12:
         7a:0a:d5:9f:81:f5:e1:9c:ed:7c:6d:13:11:8e:b2:be:93:24:
         bb:7c:56:43:fd:21:fd:3a:57:9d:f4:1e:14:f8:c3:21:5c:7f:
         90:a4:58:df:70:cd:fb:f8:62:7a:08:33:21:dd:f7:8b:71:b9:
         74:cf:87:74:5c:d7:c7:af:c0:ab:66:78:ae:69:34:05:cd:0f:
         04:4d:1d:42:0f:cc:0a:97:77:f7:7a:5c:0f:7f:93:26:91:41:
         7e:4c:7b:ad:5e:8e:d5:78:9b:0f:3d:de:b3:86:52:75:f1:03:
         c6:34:59:2b:1d:c9:d4:ab:99:ea:14:71:6f:35:71:26:60:87:
         c7:c5:05:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:49 2025 by rpki-client