Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82b1e614-7c0c-3bf2-b811-f87404b59cb6.roa
File:                     82b1e614-7c0c-3bf2-b811-f87404b59cb6.roa (raw, json)
Hash identifier:          RCAHY93/w3d5c183fal4M7v/lZT/QP8ALFAlrljmIg0=
Subject key identifier:   A5:2E:6F:8B:FF:05:01:BD:31:45:F8:D8:CD:95:87:46:E0:9D:0E:93
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849631ECE1D3E203205B76F7040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82b1e614-7c0c-3bf2-b811-f87404b59cb6.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     399687
IP address blocks:        2001:470:34f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:ce:1d:3e:20:32:05:b7:6f:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=95634fbb-5267-4353-b883-9bc07626e52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:2c:71:8f:1f:b8:5e:ba:5f:9c:b5:c5:3c:
                    cb:71:e2:33:bf:fc:74:3e:df:1d:3a:d9:37:50:3d:
                    6f:f6:69:96:de:b9:16:4d:b9:b6:52:cc:d2:4d:6e:
                    f9:c2:df:c9:0b:5b:e4:84:61:32:35:f6:8e:63:b1:
                    7e:b3:85:5b:ba:c7:a1:f8:16:43:a5:b6:3c:64:76:
                    b1:de:ff:3d:e5:0c:87:14:46:9a:4c:05:0b:86:d7:
                    07:43:26:05:97:fc:1b:e3:55:a4:cf:73:8c:c2:db:
                    8e:44:06:16:c4:50:ef:98:f7:10:b3:6e:b7:b5:32:
                    ef:b5:cf:39:bd:9a:42:e3:05:1b:79:d9:35:69:52:
                    56:ce:d7:e9:77:db:08:00:04:3e:aa:2e:31:88:c8:
                    70:07:01:9a:da:9f:b1:b1:47:85:6c:57:1f:fc:58:
                    21:5b:50:e3:dc:d6:d0:77:55:07:b5:bf:5a:e4:01:
                    2f:23:6e:b4:7b:8a:82:bd:1e:45:ad:60:65:55:ed:
                    43:54:03:fe:ee:68:69:54:cf:31:fe:fd:d2:79:72:
                    06:a6:0a:eb:e0:71:65:08:2b:8b:9b:92:75:bd:94:
                    8d:30:b2:b4:9f:b7:40:71:ee:d8:1b:d3:89:96:7f:
                    4a:6c:de:65:b5:76:83:af:8d:fb:36:6c:56:1d:73:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2E:6F:8B:FF:05:01:BD:31:45:F8:D8:CD:95:87:46:E0:9D:0E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82b1e614-7c0c-3bf2-b811-f87404b59cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:34f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:3f:a6:55:96:c3:2b:64:a5:af:7b:ae:37:24:b8:65:d4:
         c9:5b:38:87:65:5c:75:d5:95:e6:e4:aa:4f:c3:db:44:a1:36:
         2f:f4:fb:f6:a1:70:cc:0b:57:94:f5:03:42:3d:84:c0:6c:ea:
         4c:96:d4:8e:e0:76:b8:06:2e:45:f7:f3:27:b3:76:07:9d:03:
         04:da:e8:ee:21:53:7b:37:21:58:99:66:44:bf:b6:d5:39:b6:
         0e:c3:fd:c2:7a:7d:82:ba:8b:fa:0e:37:3a:9f:b3:db:83:3d:
         70:01:c9:52:b6:7a:66:85:43:4d:5a:53:c0:fa:72:d1:95:90:
         b8:1a:d4:50:d9:69:3b:ea:d0:d1:ea:bd:ba:ad:13:13:be:a5:
         e3:04:46:dc:fd:b2:55:1c:5c:28:bb:33:dc:6a:ed:da:9a:c7:
         13:b5:63:f5:d8:4a:b5:73:ac:f3:ab:bd:52:44:33:f2:5d:f7:
         a3:a7:ca:ca:0b:97:97:6c:b3:a0:00:91:35:02:03:52:a6:76:
         ad:36:41:69:c2:31:25:8d:6b:6a:72:c5:4f:8c:a5:43:19:d7:
         41:26:cd:ce:2e:73:64:5a:a3:67:d1:08:77:d7:e3:e8:f9:ff:
         77:ac:e2:a6:f0:5b:b3:21:07:ba:4b:d6:9e:c6:74:68:02:2f:
         b4:33:4c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:17:09 2025 by rpki-client