Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9e802ec-913c-3469-9c8a-e761c3349df2.roa
File:                     a9e802ec-913c-3469-9c8a-e761c3349df2.roa (raw, json)
Hash identifier:          YNbOl5DkbLxQ+wMX6wsiQR2tMQLvNVkx8xDz5HGCvZA=
Subject key identifier:   DD:96:A3:21:D7:0D:15:A4:5C:A6:40:4F:50:41:F0:3B:1C:0E:92:6F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FC86B2493562E38BD1D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9e802ec-913c-3469-9c8a-e761c3349df2.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     15577
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:c8:6b:24:93:56:2e:38:bd:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=0c79d983-de61-4e0d-a5f3-a57a698f6bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:42:0a:23:0f:93:ed:80:08:11:3c:8d:9b:96:
                    a1:69:ff:a7:6a:70:df:88:05:d0:47:57:7f:2e:36:
                    14:54:a7:86:93:c3:65:3a:98:d6:c1:a8:fd:02:6c:
                    d9:12:99:05:73:15:ce:a4:6b:f1:85:e1:ef:e6:ea:
                    32:3a:98:6c:4c:f4:07:ab:63:c3:c0:22:fb:79:41:
                    03:73:4a:66:cf:9e:c4:cd:9f:60:2d:4b:25:02:6f:
                    a1:bb:ee:3d:91:0d:62:34:91:9b:32:41:c2:0e:61:
                    28:cc:25:ea:24:bd:da:fd:23:db:d5:4f:7c:6a:42:
                    ef:c0:fc:ea:01:df:8b:c5:fb:51:b5:d7:29:d2:83:
                    98:1b:85:b4:8f:79:1d:74:97:1d:fc:b4:c9:18:bd:
                    29:8d:f9:39:67:e1:41:a3:10:9a:f3:f3:fd:54:24:
                    a8:06:e1:45:29:66:6e:9b:79:d1:e0:47:db:12:26:
                    fd:c6:56:37:82:19:26:23:76:95:9c:69:21:d6:c9:
                    84:2e:e1:2a:a2:ba:82:65:6d:b7:ae:cc:2b:ea:97:
                    97:b6:8a:d6:e7:e6:ec:b0:3e:db:8a:ff:25:8c:96:
                    06:28:4b:68:60:f9:dc:b3:1c:17:51:5f:21:25:0f:
                    fe:c0:7e:c6:27:45:26:f8:38:fa:00:05:5f:0b:92:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:96:A3:21:D7:0D:15:A4:5C:A6:40:4F:50:41:F0:3B:1C:0E:92:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9e802ec-913c-3469-9c8a-e761c3349df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:84:d8:80:99:35:42:b6:bd:e4:8c:ad:3f:92:42:b5:54:e1:
         07:9e:25:cf:85:91:30:9f:52:b9:cc:a6:b4:4b:94:64:73:8b:
         95:76:6f:fa:09:23:77:5e:96:03:e0:37:d5:9a:1f:9a:b0:f6:
         9b:1a:43:68:b8:98:72:6c:fc:93:7e:8f:f8:22:d1:fe:7f:62:
         bf:ad:73:3a:8e:72:c1:e0:db:53:af:dd:82:b0:77:ba:3c:dc:
         c2:21:ae:f7:26:b6:48:39:97:52:2c:56:c9:3f:7e:1f:5a:73:
         fa:fb:ac:32:07:68:a1:47:ae:97:b5:20:5a:56:f2:ba:00:3c:
         a2:dd:2b:9b:8f:2c:55:be:8d:1b:52:03:8d:de:1e:91:8a:59:
         f7:59:dd:b0:46:6b:65:fd:2f:f5:6c:41:81:69:c5:52:65:7b:
         4c:40:10:1f:bc:db:10:d6:0e:9c:f0:cf:81:3e:a7:af:a5:0c:
         48:4d:a4:e4:48:33:3e:f2:b3:0d:bd:0d:19:d4:a8:1e:f3:18:
         fa:21:3d:48:84:27:1d:a8:7f:e8:c2:99:f7:5b:08:3d:33:06:
         d2:34:24:62:a5:2b:55:bf:df:2a:55:ed:84:90:0f:83:1e:ec:
         a6:86:7c:3e:64:8c:0b:88:3a:2c:b5:d3:d2:ec:4b:48:a0:ce:
         70:b6:c9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:03 2025 by rpki-client