Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa
File:                     bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa (raw, json)
Hash identifier:          SDMSHQf5rtxDNNgpPJR65elWnYBbyJ0PWNiPqx1T5bQ=
Subject key identifier:   DD:38:62:A5:06:72:E5:6E:12:49:08:F2:DA:01:1B:43:67:52:C5:1C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB691C51F7A7A15F92A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     395717
IP address blocks:        2001:470:143::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b6:91:c5:1f:7a:7a:15:f9:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=98c98c4d-b7e1-4fd7-a66b-94caf65b5d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2f:7d:f0:c1:e4:33:e6:39:44:5d:76:25:28:
                    c1:6e:9f:dc:6e:12:bd:36:e5:02:47:0f:d1:9e:db:
                    3e:74:ed:0d:b2:6b:dd:15:18:22:30:c5:32:f7:c3:
                    72:fb:75:61:4a:73:48:25:5a:b2:79:cb:31:68:df:
                    03:4d:c1:25:52:88:98:1c:81:a4:d5:65:18:09:8d:
                    2e:2a:18:90:58:1a:39:ca:76:c0:30:3c:50:31:c8:
                    fa:21:ff:8a:48:a4:07:64:83:ea:cc:42:c9:85:6f:
                    62:a6:53:c2:9f:cf:3a:eb:d6:01:01:ef:2f:5b:55:
                    c0:f5:9a:d2:f0:a2:8e:7c:c2:e0:82:d6:3f:a9:85:
                    1d:22:96:85:39:78:bb:5d:ef:cf:81:d0:8d:6a:4b:
                    2b:b8:63:98:7f:64:6c:56:11:f8:77:ab:ea:73:29:
                    45:59:45:25:3d:92:a8:d2:e2:d3:9d:f7:c9:59:06:
                    76:96:42:25:5c:70:19:a7:ff:87:d9:07:c0:11:ad:
                    6e:43:59:e1:3d:8a:50:fb:0e:60:1b:72:9d:98:ae:
                    0f:a0:5b:6b:3e:0b:6d:b5:de:e7:a8:17:79:c1:46:
                    b0:1c:c7:cc:a0:05:1c:ee:b9:89:37:7b:a6:96:34:
                    71:5d:b3:e4:d9:b9:84:46:cf:c2:85:22:2f:a3:28:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:38:62:A5:06:72:E5:6E:12:49:08:F2:DA:01:1B:43:67:52:C5:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf21b2cb-c47e-3596-a04f-b8cf35a7c6ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:143::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:68:3e:05:d1:66:0e:b9:f3:7e:a0:13:48:d7:24:37:18:6a:
         86:08:e6:22:a5:77:89:b5:ea:43:a3:65:21:09:aa:d5:99:38:
         53:93:fc:b5:96:8a:58:35:b2:2c:ff:a1:52:3f:e0:83:c6:c3:
         7b:8b:85:74:e8:e3:f4:1c:d0:80:d5:48:01:7a:5e:dd:11:5c:
         72:92:c8:4d:11:82:7e:c0:6e:00:01:98:ae:58:f4:e6:e5:c9:
         32:e8:b9:85:be:c5:3d:19:51:93:85:cd:be:a2:71:68:14:bb:
         40:ca:77:8a:92:42:59:16:42:12:3b:1e:56:8b:58:8f:2a:4f:
         e8:61:91:7a:c9:a6:e9:1e:aa:ba:7c:75:2f:b7:38:3b:45:73:
         6c:55:c3:d5:61:77:92:cf:9d:af:c9:58:45:f8:0d:18:87:31:
         b6:e8:97:be:5b:f2:f3:9f:eb:1e:12:e3:63:5b:60:00:0f:53:
         87:05:85:83:b6:21:17:44:86:08:56:1f:6b:44:15:9c:c4:c1:
         a2:97:01:64:c4:a2:38:3e:0d:2a:e4:9f:33:ee:43:f5:e2:00:
         48:49:92:3d:80:0d:a6:b9:ad:a7:98:67:63:a9:99:af:9c:27:
         a8:6d:ca:d7:50:00:1e:ef:af:20:62:8d:82:14:f9:97:15:94:
         f8:d7:6a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:52:52 2025 by rpki-client