Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8b4ecb3-558f-3a9e-9bb2-3474b206a987.roa
File:                     a8b4ecb3-558f-3a9e-9bb2-3474b206a987.roa (raw, json)
Hash identifier:          SzlsjxDSixuoizOT2EJi7LLSzIYWk171/bjuK69n+6E=
Subject key identifier:   C2:23:7D:F0:F6:FB:5B:B5:68:60:19:58:F3:38:B3:99:C2:FF:0D:F9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A2963E6275C59380E2AFD5AD0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8b4ecb3-558f-3a9e-9bb2-3474b206a987.roa
Signing time:             Thu 12 Jun 2025 01:30:11 +0000
ROA not before:           Thu 12 Jun 2025 01:30:11 +0000
ROA not after:            Wed 10 Sep 2025 01:30:11 +0000
asID:                     401139
IP address blocks:        2001:470:2c5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:63:e6:27:5c:59:38:0e:2a:fd:5a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 12 01:30:11 2025 GMT
            Not After : Sep 10 01:30:11 2025 GMT
        Subject: CN=04871e54-8cbf-4f7d-84c7-ac8e112a73e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:59:1d:88:56:bb:07:15:26:39:0a:e1:11:
                    54:39:a7:24:39:8b:d9:7d:ae:eb:5f:7f:c7:cf:ed:
                    ae:72:e9:23:97:ee:6b:b1:53:04:9f:6c:e9:0e:d4:
                    94:a2:fe:68:ef:5d:9f:fb:e4:6b:ea:51:2d:f3:f7:
                    e8:9d:4a:30:08:69:f1:8f:05:89:f4:47:ce:b4:24:
                    19:18:3d:14:cc:ed:da:6c:51:bf:43:b1:f9:c0:24:
                    a2:25:19:27:18:39:2d:69:10:10:8e:5d:15:0d:04:
                    f6:83:fa:ef:94:ff:0f:cc:5f:e6:de:f1:96:47:e3:
                    c1:c7:44:31:9d:4d:c2:b2:57:51:19:d9:a4:8d:0a:
                    68:ad:c5:fd:77:56:95:67:af:b8:d2:20:32:3c:75:
                    85:e1:5b:b5:c8:ad:f9:7c:d0:8a:3d:06:56:a4:8e:
                    e9:ca:0b:44:bd:a1:c4:14:5d:ae:ef:b5:15:9a:55:
                    45:b9:a8:62:d1:f8:43:9d:22:cb:3b:ed:2a:32:ce:
                    7c:d4:33:83:74:d8:4a:10:05:7e:5f:70:a6:02:02:
                    26:86:20:0d:0d:ac:08:92:ba:66:10:09:6c:18:e1:
                    67:6a:a3:9c:68:86:31:92:2d:2e:c4:4b:26:cf:7f:
                    af:f4:fd:2c:52:f8:4e:47:8d:1c:92:fa:45:7e:a6:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:23:7D:F0:F6:FB:5B:B5:68:60:19:58:F3:38:B3:99:C2:FF:0D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8b4ecb3-558f-3a9e-9bb2-3474b206a987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2c5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:74:47:f3:70:57:aa:dd:83:9d:40:a7:38:e1:12:5a:0f:be:
         bb:70:e0:08:ac:ec:6d:58:85:f6:1e:12:70:5f:2d:fe:8b:92:
         54:cc:7b:dd:81:d8:da:bd:d2:6d:b1:21:34:f8:bb:03:74:bf:
         8b:2d:bb:a3:da:8d:99:10:54:0f:50:1a:a7:43:c5:a2:53:5f:
         ee:8d:bb:44:04:ee:87:fb:b9:e7:b4:10:9b:61:51:9b:e4:41:
         b4:ce:2e:3f:77:c3:b8:80:d1:76:90:e5:db:9f:3a:bc:a5:6c:
         6e:b2:d9:6f:38:a7:6d:28:fb:a0:e3:3a:d5:45:d2:19:b7:2e:
         af:d9:14:d2:95:cb:6b:83:b5:48:b1:15:66:26:85:1f:26:0a:
         64:c1:78:68:f7:9f:74:c2:7f:0b:2e:ab:7f:e2:ff:21:60:23:
         d2:69:a3:7f:c6:89:27:37:5a:67:64:49:b9:ce:83:f0:a6:a4:
         4e:8a:45:33:99:84:01:25:8e:86:35:1d:39:0e:c3:ea:ed:9d:
         ac:b5:28:05:91:d7:b2:c9:85:e6:e6:58:a4:45:28:dd:15:f0:
         2f:59:57:ed:79:a4:cb:fb:c2:d0:2c:0c:fe:fb:d3:50:a7:e0:
         69:35:37:0b:9f:f7:46:09:a3:ab:9d:80:a5:74:d0:db:99:1a:
         f9:6f:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:03 2025 by rpki-client