Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa
File:                     4d56da04-c6ac-3625-ae32-26c688e9b28b.roa (raw, json)
Hash identifier:          RPQHkFM6R2GRnd+Qd0kzcE+UX5FQKF1/oyvq0bxFko8=
Subject key identifier:   53:B6:D5:E1:E2:EA:B0:3B:10:E4:57:55:70:8C:44:D2:77:47:84:FC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE2F6E9A0083C892CBC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     31942
IP address blocks:        2001:470:21b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e2:f6:e9:a0:08:3c:89:2c:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=65dee676-278b-43cc-808b-36f455b26bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:e0:c0:ba:38:d4:ab:11:e7:66:17:1b:ab:
                    1e:b9:d3:0f:fd:2e:6f:ce:cd:25:48:92:17:8f:0e:
                    9a:26:e7:47:48:aa:97:80:53:7b:2c:53:ea:75:a5:
                    bf:24:d5:47:11:aa:9a:92:a4:7f:99:25:09:61:ce:
                    42:ff:38:a2:60:42:aa:6c:2a:6c:1a:a6:9e:72:f0:
                    06:17:57:48:67:cf:df:f5:f3:16:a6:a8:10:f2:0f:
                    ce:c5:6e:08:19:1c:17:e4:fb:88:f6:88:f3:94:63:
                    62:64:dc:af:8e:8a:8d:98:d3:41:a9:4d:22:01:b8:
                    f7:8d:3f:8b:d1:5c:7e:c6:73:0a:f6:5c:48:b3:75:
                    a0:42:20:17:e9:52:5b:2c:ac:45:90:d7:c7:d2:88:
                    f4:d9:ed:e0:0c:7f:f9:cd:03:a5:56:f0:38:4e:e2:
                    07:bb:29:67:aa:41:1d:de:fe:33:e4:f0:1f:dc:29:
                    4a:cf:01:81:e5:e5:50:7e:5a:90:2f:73:d8:84:bd:
                    8b:63:f5:2b:f5:e9:a7:c1:a6:6e:e1:a8:f5:74:c3:
                    72:ed:46:7b:1e:da:6e:6d:ca:ab:88:3c:84:69:9d:
                    3a:84:3d:c0:25:02:88:44:51:6e:a9:a7:b0:73:96:
                    ff:fe:4f:7c:19:74:e3:a2:2e:7f:13:d0:b1:67:d0:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B6:D5:E1:E2:EA:B0:3B:10:E4:57:55:70:8C:44:D2:77:47:84:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:77:1b:0e:54:01:f0:c1:94:73:d3:60:5e:08:23:49:41:17:
         f7:5a:02:42:3b:79:b2:23:37:85:ac:d3:17:83:89:0d:36:1d:
         77:b6:0d:cf:ab:95:05:67:4a:53:dd:37:ea:a2:39:44:c1:c1:
         51:5a:42:1f:da:49:c4:f3:a8:f2:03:98:35:79:a4:9f:80:97:
         15:ac:e1:03:b4:87:44:10:be:b5:cd:a1:a3:64:ad:30:0e:ca:
         de:f7:f8:bb:b3:21:00:62:c1:03:39:68:9c:c6:65:07:ba:7e:
         f0:39:79:d4:30:6c:04:9e:38:e8:41:9e:be:ed:64:46:32:b8:
         aa:ad:db:eb:cd:b7:2b:8c:2d:73:02:11:1e:cb:3a:70:92:75:
         45:73:be:ca:b2:40:59:6a:b9:44:e9:b7:35:60:22:df:eb:36:
         d8:71:d4:42:08:ce:68:0c:ca:37:85:3e:32:fb:2a:85:de:18:
         09:27:44:d6:56:c3:7f:fb:6a:28:cd:61:46:56:85:ae:91:3e:
         7a:3c:04:c3:45:8c:fa:b2:24:f7:2e:24:be:30:2e:2d:a9:3d:
         ff:98:7c:7d:d0:69:05:e5:fc:31:db:12:ef:60:bf:bc:fc:ee:
         b5:01:7d:1d:e0:90:cd:33:a5:a1:bc:35:32:d9:f9:2c:bc:7b:
         06:a9:82:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:54 2025 by rpki-client