Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/819d07b2-ba52-3b19-9c0a-e58434c1b837.roa
File:                     819d07b2-ba52-3b19-9c0a-e58434c1b837.roa (raw, json)
Hash identifier:          8LAhOiS5fUd4T3jh9THMrnIDL35iq4yUtUn9Nkb7g7w=
Subject key identifier:   ED:91:D0:36:CB:32:CE:D9:F4:56:76:7B:74:C4:90:D1:17:CA:83:5F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FC99B3D51527B8A42A600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/819d07b2-ba52-3b19-9c0a-e58434c1b837.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     394352
IP address blocks:        2001:470:2a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:c9:9b:3d:51:52:7b:8a:42:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=8c0669fd-d716-4f15-999d-b22606101611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ec:28:c4:9a:e3:e7:db:90:3a:07:93:cf:a1:
                    dd:00:bd:4d:54:0f:0d:e5:56:06:da:4a:a7:7f:ec:
                    56:2d:5b:6e:60:3c:09:f9:4b:6f:ea:51:4b:ea:30:
                    49:1b:06:ac:fc:51:42:b6:99:92:b1:98:3c:8a:35:
                    99:35:5a:50:fd:bc:97:9e:c9:81:5d:fb:8f:cf:eb:
                    b2:02:b7:52:a1:31:cd:61:a2:b6:5e:cf:e7:23:ab:
                    b8:0f:64:5a:89:16:99:dd:b6:4e:9b:8e:3c:cd:df:
                    5d:03:4a:2e:3a:a4:c1:e6:32:7d:1e:b9:87:db:7e:
                    f8:48:27:ea:bd:73:8d:9a:c7:b2:d4:74:50:8c:e3:
                    fb:a3:59:37:32:70:93:94:95:ff:f5:e6:4b:c3:c8:
                    4b:f9:5a:b5:64:25:26:e8:41:ec:90:8d:64:4d:e4:
                    d0:c4:92:a5:56:f5:ea:de:09:c7:b0:e3:12:dc:5e:
                    b7:fe:71:dc:01:0d:4f:c5:bb:c8:f5:94:67:ca:01:
                    2e:09:d3:80:31:b3:d9:d6:5c:63:50:28:28:41:e5:
                    8a:e5:59:35:53:bb:a3:b8:ab:b0:77:a5:82:15:8c:
                    12:23:c4:51:a3:cc:f7:f5:9b:bd:2d:27:1c:2d:6e:
                    07:dc:53:ec:ee:b0:af:93:00:95:1e:47:b0:b7:e4:
                    d5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:91:D0:36:CB:32:CE:D9:F4:56:76:7B:74:C4:90:D1:17:CA:83:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/819d07b2-ba52-3b19-9c0a-e58434c1b837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:aa:d1:9f:1c:ae:f5:86:fa:f8:3b:72:2b:19:30:6f:fe:27:
         72:f3:83:03:09:5c:36:53:f9:a7:98:a7:67:d6:7d:61:ac:56:
         5a:94:71:ff:a3:83:f6:a9:c3:4f:dc:de:a4:0a:73:1e:3d:4b:
         04:73:49:b9:ed:bd:09:16:f7:b2:a9:78:0d:54:20:ff:50:65:
         8c:35:50:c2:2e:59:29:35:e7:72:30:b5:2c:37:41:45:1c:fb:
         ca:b7:af:00:39:d4:17:98:d9:5e:b7:a8:d2:08:75:58:86:46:
         29:8c:6e:09:c6:d9:d1:4f:f1:95:d7:80:81:19:98:6c:bb:cd:
         51:4f:33:2d:48:f9:f2:2f:25:62:ed:fd:fe:49:19:e0:0f:99:
         65:b8:3d:ef:7e:5d:62:7e:94:da:a4:f7:9a:62:24:f2:40:7c:
         1b:d4:d2:0f:e5:0f:b7:05:af:01:f0:ed:95:eb:e1:30:4b:c4:
         68:f7:6b:1d:3f:39:44:ce:9a:d7:e7:0b:49:1e:d7:3e:ad:90:
         ce:70:98:3c:51:a9:80:6c:db:89:07:43:f2:59:e1:34:69:d6:
         9a:90:e8:1f:23:78:ec:b4:73:e2:4f:ee:29:d6:8d:68:66:01:
         45:31:15:81:28:f5:f6:e2:79:96:a4:b3:c7:23:66:34:c9:5a:
         81:c3:1d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:50 2025 by rpki-client