Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0b74ca7-efbb-3427-b30f-a74cce62149f.roa
File:                     a0b74ca7-efbb-3427-b30f-a74cce62149f.roa (raw, json)
Hash identifier:          69j9K2MYPN3h2qcg3bX21d2z6WRWyFpSsbO+pUwz/wk=
Subject key identifier:   E2:43:81:42:A6:B0:B3:A8:AF:20:C3:76:0F:66:14:8D:3E:64:3A:0C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FC824A71E41D9F4CC11C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0b74ca7-efbb-3427-b30f-a74cce62149f.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     14707
IP address blocks:        2001:470:29f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:c8:24:a7:1e:41:d9:f4:cc:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=a1fb80ff-a600-4da5-ae5a-4dd306991d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:c0:c9:f3:78:7b:eb:ae:0d:46:97:95:b8:
                    fd:91:a5:12:d1:9e:a0:e9:3f:70:00:04:16:41:89:
                    7d:0c:20:e9:fa:3c:e0:32:dc:49:a0:64:e1:ca:a3:
                    1b:79:48:56:00:89:16:37:e3:a6:13:0b:da:5a:b6:
                    0a:73:32:9d:e5:04:2f:4a:28:ea:01:42:23:0c:38:
                    94:6b:07:97:4a:5b:e6:b5:ca:98:66:fa:9b:f2:ad:
                    23:df:6f:45:5c:ef:d4:8a:0d:2c:ab:cd:ad:0a:e5:
                    74:a0:1e:66:48:29:f6:fc:7e:b6:b1:e0:d3:07:a0:
                    e4:96:70:32:ff:a9:4f:66:1d:02:76:eb:55:1c:3c:
                    c5:64:27:9c:77:fb:49:bf:47:39:5e:e8:0b:23:e6:
                    3c:e6:fd:20:2b:1d:07:98:a7:0a:d3:f6:a5:17:19:
                    d9:56:1a:64:ed:38:9a:51:b8:be:b8:e6:b9:3a:71:
                    94:61:ee:2a:95:a8:8f:d8:84:d7:8f:41:d4:f4:dc:
                    87:24:b3:21:7f:68:fb:8d:e2:7d:c9:96:21:e6:d3:
                    7e:9e:5e:4a:08:19:dc:f1:8f:cd:29:78:e1:62:7c:
                    bc:55:28:37:e7:4d:73:4d:66:6a:c3:4f:00:a7:e3:
                    28:23:d4:02:43:d6:2b:cb:d4:3d:ba:35:a9:fb:aa:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:43:81:42:A6:B0:B3:A8:AF:20:C3:76:0F:66:14:8D:3E:64:3A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0b74ca7-efbb-3427-b30f-a74cce62149f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:29f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9f:e0:99:cd:a7:03:a1:05:67:dd:b2:d7:76:16:b2:4c:84:
         e8:5d:0b:73:b6:b7:12:4b:ff:df:c4:5d:9c:a6:18:ac:10:16:
         77:40:a4:bb:0c:7a:03:7b:b3:68:e2:6a:c1:45:46:4e:b8:7d:
         6c:f3:0a:69:35:4a:af:a1:78:60:31:0e:df:51:1e:2e:12:92:
         d3:1e:ae:c3:d5:b8:e8:84:29:fb:b3:0d:cf:90:da:52:93:f6:
         3c:fd:df:27:90:47:2f:39:47:a7:e0:74:c1:2d:bc:7e:b8:8b:
         f0:b7:7d:4b:57:a6:4e:17:23:c6:ec:fe:51:93:c0:62:16:1c:
         9a:51:77:89:23:63:23:6b:fd:cb:55:46:4f:7e:79:c6:93:3a:
         e0:41:b8:df:98:dc:16:10:2c:b1:9e:f9:ce:97:ee:13:5c:b1:
         5a:5f:28:5c:73:d1:92:b6:b4:c6:c2:82:e6:0c:99:db:70:fc:
         11:a2:c5:04:5f:48:ff:95:56:71:a1:1b:44:ec:89:d0:55:78:
         a7:83:6c:9d:5e:da:49:5d:21:7f:c8:ce:75:0e:ae:14:e1:3d:
         89:a2:60:2f:65:f0:12:f3:cb:90:25:54:5f:65:8d:27:f9:89:
         76:8a:14:5c:df:7a:bf:7e:8b:28:37:32:e8:12:d8:90:2b:3f:
         0e:7c:aa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:07 2025 by rpki-client