Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac383263-1b8c-3f58-ac73-3a045c9596fc.roa
File:                     ac383263-1b8c-3f58-ac73-3a045c9596fc.roa (raw, json)
Hash identifier:          Urd1jrWVXzmw1q778PVI585A+lGs99onOBqGOoEXYdM=
Subject key identifier:   D4:06:46:C8:B3:30:B7:21:02:33:D1:8E:4F:48:F5:17:60:59:AA:3F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858496E580B7FA98655E51AE18600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac383263-1b8c-3f58-ac73-3a045c9596fc.roa
Signing time:             Sun 06 Apr 2025 01:30:09 +0000
ROA not before:           Sun 06 Apr 2025 01:30:09 +0000
ROA not after:            Sat 05 Jul 2025 01:30:09 +0000
asID:                     53732
IP address blocks:        2001:470:437::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:58:0b:7f:a9:86:55:e5:1a:e1:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  6 01:30:09 2025 GMT
            Not After : Jul  5 01:30:09 2025 GMT
        Subject: CN=ac6cbcb0-6020-4d61-8d70-5feaf276cf4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:58:12:b8:dd:16:87:b2:c6:09:e6:77:a7:a2:
                    22:9b:61:cb:2e:75:50:01:30:59:f1:aa:7d:98:58:
                    78:31:72:fe:9a:bf:4d:24:04:d4:b5:44:a0:66:5f:
                    c0:cf:2d:e6:a1:f6:df:5e:4f:6d:5b:e4:45:27:a8:
                    f5:bb:50:be:f1:e6:31:e5:d2:b3:48:54:4f:85:ec:
                    e3:18:19:fd:6d:be:47:2b:4d:1c:5c:31:24:99:b4:
                    f2:26:66:40:1a:1b:67:23:fd:4a:4d:16:fb:44:6e:
                    eb:f3:f3:3f:99:d6:87:25:f4:2d:c2:b5:05:43:4e:
                    a6:f8:cd:14:5d:b1:e6:a2:13:f0:7f:ba:14:cf:91:
                    40:23:aa:ef:ce:4d:42:8d:92:48:c5:ba:8b:e1:0d:
                    80:68:60:d8:7c:f6:d7:4b:d5:a7:6a:b7:05:d4:93:
                    2e:e5:bd:84:23:6f:a1:0b:b3:a1:09:2f:e7:e2:87:
                    0f:de:28:6d:3c:e4:d4:8d:fb:0c:a4:d6:1d:b0:e9:
                    4d:b3:f0:42:ec:69:68:94:8d:79:cc:72:de:e6:5f:
                    34:9b:26:75:9c:08:ec:15:3b:cc:7d:54:95:15:7c:
                    9d:68:bb:80:91:18:e5:17:51:f6:2d:48:26:18:ad:
                    ce:96:c1:aa:8c:13:0d:7a:25:11:47:71:88:1e:50:
                    07:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:06:46:C8:B3:30:B7:21:02:33:D1:8E:4F:48:F5:17:60:59:AA:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac383263-1b8c-3f58-ac73-3a045c9596fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:437::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1c:63:e0:67:d1:be:db:f1:17:ef:1a:40:1f:3c:18:e6:9d:
         44:54:4b:bc:e4:53:f1:0c:51:8c:c6:54:11:ea:40:2c:fd:e0:
         61:06:e0:80:cb:dc:3d:3b:82:89:6a:b7:a9:b5:4e:76:e2:43:
         35:2d:4c:e9:05:20:15:e3:c8:cc:15:1a:2a:f9:d1:37:b0:32:
         3a:da:50:ee:a2:78:03:2e:a5:84:39:a4:80:d9:c3:f9:ec:90:
         70:d4:f7:ea:35:6f:e0:7d:f7:1e:20:00:54:68:c3:e9:e0:d8:
         a3:22:9b:cd:94:2e:44:13:5c:b6:36:21:02:20:9a:e7:ff:0e:
         74:ff:b8:48:e1:c1:cc:46:5e:dc:b9:b3:5a:16:a2:dd:3e:11:
         e6:d2:02:1e:93:92:b3:14:85:b7:cd:ba:9a:04:d8:3d:d2:de:
         11:02:e9:f1:06:40:13:05:52:49:a7:87:12:da:e8:84:e4:1d:
         b8:69:fd:84:96:5f:70:59:94:66:d5:e3:74:ff:1d:ab:a8:8a:
         b1:19:24:96:b7:ed:04:3b:23:5e:80:25:cc:8e:38:b7:c7:46:
         ba:f3:ad:8c:9e:de:43:4f:bd:34:4b:62:69:5a:05:27:8d:12:
         23:3e:c6:dc:26:ea:1a:ac:03:8c:3d:c0:7b:9d:05:94:ac:b0:
         a5:0b:a2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:32:24 2025 by rpki-client