Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa
File:                     85e30730-5d37-3d0d-b82f-934337806577.roa (raw, json)
Hash identifier:          KZTpOU0tbWGmYcrBtPCR5QN14Y8VEQqehp34WtIOSWM=
Subject key identifier:   EE:DA:43:A5:0C:E4:13:44:CD:BF:2B:39:63:FF:B2:17:F1:4C:6C:E2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FEA533B8882CC097C0B10
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     395260
IP address blocks:        2001:470:2f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:ea:53:3b:88:82:cc:09:7c:0b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=51f1c7ed-6752-4925-bd45-5ea641d54b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:b4:a7:4a:d6:08:d2:3e:45:2c:92:98:42:
                    7b:52:d9:b1:d2:e5:00:c9:f9:b3:eb:8c:52:e8:ca:
                    4c:db:70:fb:a9:dd:df:8a:30:3c:42:89:e6:d5:7d:
                    0a:4c:4b:e6:96:fc:7c:e6:08:02:ba:4d:bd:3f:4e:
                    51:82:37:3e:86:ca:99:89:1f:25:e5:67:4b:2b:1e:
                    63:50:2d:17:0d:f9:ee:17:fa:9c:1e:f9:7a:08:f8:
                    f4:79:68:f7:b9:23:04:89:ab:bd:67:f3:e6:18:da:
                    5c:43:87:6b:e9:60:01:99:50:21:24:f3:d2:e9:89:
                    23:ee:7f:af:2a:3f:e8:10:f0:56:74:25:b9:9e:e7:
                    0e:28:c7:b0:bc:c1:1c:65:6a:77:35:46:ff:80:92:
                    4a:d4:c2:5b:67:7f:d2:62:6a:d2:30:50:92:dc:c9:
                    42:0c:01:ba:a9:0a:2c:7b:e1:11:8d:54:d9:64:ff:
                    0f:4b:dd:78:07:b0:88:54:39:93:63:d0:15:db:4e:
                    2e:1e:65:72:4f:c2:db:5c:46:16:e3:d0:9f:ba:25:
                    2c:9e:ae:8f:27:65:ef:f3:2a:0e:eb:8b:0c:cd:a7:
                    92:d0:a5:ad:84:60:18:30:77:06:89:54:f1:14:ff:
                    71:b1:20:cb:b4:4e:8e:5e:12:d7:56:19:36:b7:72:
                    3d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DA:43:A5:0C:E4:13:44:CD:BF:2B:39:63:FF:B2:17:F1:4C:6C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85e30730-5d37-3d0d-b82f-934337806577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:4b:a6:b1:77:3e:4a:b5:e5:10:ae:20:bd:92:68:8c:ba:76:
         2d:66:60:03:06:a2:8a:9d:b2:8e:1c:14:2d:e9:87:36:e2:4b:
         41:9e:85:2f:b5:63:06:0d:1b:a2:ee:76:7b:6d:3c:27:98:1e:
         8b:cb:d4:38:a2:43:4d:9a:cc:93:e3:1e:0a:3c:8b:71:16:19:
         e7:37:1a:87:fe:b7:26:42:80:30:bc:6e:f8:1e:d4:26:a7:04:
         ee:d5:68:a5:12:17:77:8f:fb:50:12:3c:0c:5a:29:3a:2d:99:
         19:25:00:ca:35:03:ac:20:b1:8a:e2:88:ce:d7:67:a9:1f:c1:
         b2:de:26:bc:c9:f1:d3:20:06:9f:e9:a7:a0:e4:39:e1:30:15:
         a0:39:98:a3:7f:1f:39:03:6f:c6:fc:d3:ad:40:07:f5:7a:34:
         54:0d:14:a2:65:6d:62:c4:10:61:50:39:cb:bd:9c:4b:52:f0:
         3c:53:0e:ba:d4:41:f9:39:ae:c7:23:0d:bf:89:bc:cd:b5:94:
         b0:f2:17:66:25:1f:52:cd:9b:1d:8e:32:4d:a2:45:03:45:9d:
         d6:93:57:9e:06:9d:6d:d4:2c:ed:6d:09:c9:97:eb:69:fa:c6:
         e0:8a:7d:fd:58:d3:be:c9:c7:ad:1d:5d:1c:f2:8f:2b:91:0f:
         a1:08:01:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:15:14 2025 by rpki-client