Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/630610c0-a6ad-3660-a4c6-ab0ed744fd32.roa
File:                     630610c0-a6ad-3660-a4c6-ab0ed744fd32.roa (raw, json)
Hash identifier:          o6lc/xWl25y8MBxoHl0kNMbY9fRS5eeIMizMDhyMyN4=
Subject key identifier:   AE:2D:AC:91:82:FD:70:31:5C:82:FF:39:31:D7:40:86:5E:E4:09:E7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FDEC13B8232C8ADFCC100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/630610c0-a6ad-3660-a4c6-ab0ed744fd32.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     395510
IP address blocks:        2001:470:160::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:de:c1:3b:82:32:c8:ad:fc:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=e1c20ab8-498b-4447-9aeb-1eac3700753e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:51:d0:ab:82:98:28:ae:55:92:27:83:74:
                    70:82:92:89:05:fb:91:63:ea:59:40:7d:3b:89:88:
                    d6:b7:de:c0:04:6c:9e:4d:ac:f6:a2:f0:98:93:e4:
                    07:1d:07:c7:8b:31:85:a8:3d:dd:aa:4c:82:20:51:
                    f3:d7:ea:72:83:f1:31:cc:b6:8e:eb:a5:12:8c:e8:
                    c3:4b:33:c0:8d:34:2c:d8:b6:47:51:7a:84:7c:83:
                    15:3d:8d:90:9c:c1:73:fc:59:ff:60:6a:3d:86:bd:
                    09:02:4d:48:fa:ae:64:7f:22:43:b1:27:cf:a9:f8:
                    11:7d:01:69:b3:c2:11:d2:60:dc:df:97:5e:4e:3b:
                    37:d1:3a:70:4a:28:39:f8:08:85:0f:26:84:fe:8c:
                    1c:15:70:80:2b:89:ab:b5:dc:2f:87:82:fb:9d:8b:
                    38:8c:49:c3:96:ac:32:20:9c:96:27:56:a3:15:59:
                    0a:d7:74:a8:e6:a9:17:9c:06:c3:f3:d2:1e:7a:e6:
                    ed:ff:d1:06:da:87:5a:14:f3:2b:c9:25:f9:bc:0f:
                    d1:f7:1d:07:b5:1a:a7:02:1c:f5:26:7f:f9:e1:87:
                    1c:6a:e5:f1:85:4d:bf:e3:9e:35:5b:75:f4:96:14:
                    2f:04:cd:bb:e9:e6:24:ea:bf:78:2b:5e:6d:57:c5:
                    39:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2D:AC:91:82:FD:70:31:5C:82:FF:39:31:D7:40:86:5E:E4:09:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/630610c0-a6ad-3660-a4c6-ab0ed744fd32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:160::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:72:9e:b3:e6:e7:74:d7:ce:89:b8:46:f7:40:a3:22:01:4f:
         cb:72:27:87:8e:c2:d4:46:cd:a0:78:86:dc:e5:0b:d6:95:39:
         42:8b:5f:89:80:d5:a2:02:14:1c:19:5f:ec:9a:ce:21:de:ed:
         27:63:3f:4a:6f:c8:01:82:d5:47:bf:9e:fa:01:80:5b:4e:1b:
         d8:cc:d6:97:84:6f:b8:39:35:50:dc:e4:57:97:af:6e:a4:0a:
         cb:d4:40:a7:d4:13:61:4f:bc:38:43:ef:6b:c0:ca:bc:e9:72:
         a4:ac:85:85:51:85:53:b6:d9:7d:21:65:e6:5f:a0:ea:11:66:
         92:a8:b3:0e:2e:08:7b:46:26:50:8f:94:89:c2:7a:e3:30:33:
         39:e9:26:c1:0a:58:ca:04:05:99:18:34:a8:23:7e:79:fc:aa:
         25:a5:a2:ff:81:86:fa:23:1a:e6:d4:9e:11:36:9e:0e:46:1b:
         03:12:4b:b3:43:90:49:f0:ef:a8:16:d8:0f:91:fb:0b:4f:05:
         ed:be:e7:87:49:c8:fd:52:27:80:52:20:25:4b:36:61:e6:5e:
         59:bc:eb:3d:6c:73:5d:c4:8e:e3:c4:c1:c8:f9:9f:f8:92:95:
         89:65:17:a4:f1:50:ca:f5:b6:44:05:39:ad:6b:41:f7:d9:96:
         8e:48:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:11 2025 by rpki-client