Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa
File:                     d904d990-fb1b-387d-aed0-223f5240308c.roa (raw, json)
Hash identifier:          Jut2bswJA2N+IbIhzA+dBuq3aPF7E3RxYBYPHVinvic=
Subject key identifier:   A7:B4:D3:62:9B:C5:C8:80:7C:C7:01:CA:DC:49:B1:C7:FF:84:66:F8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A2D859BFF292F0F1B98A26080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     20205
IP address blocks:        2001:470:3ea::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:9b:ff:29:2f:0f:1b:98:a2:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=8bb93569-cd54-47ea-a558-755dee4e6162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:00:68:fb:71:bd:84:34:7c:53:45:a0:8e:
                    6a:57:c1:b6:90:ab:aa:1d:85:14:cc:4f:4f:d1:be:
                    03:ba:02:84:e2:dc:93:0f:fd:37:ba:b3:d4:72:9d:
                    4d:5d:87:09:d0:7c:d8:12:bf:30:40:23:be:2a:e7:
                    6f:02:41:e3:f2:1c:af:67:c3:8c:37:50:e7:1e:2a:
                    d1:e2:04:eb:04:dd:94:71:d2:9e:22:4e:15:cb:d1:
                    e3:b3:b1:de:08:29:a8:42:65:dc:2d:31:06:19:4f:
                    8c:cf:4b:65:83:b8:3a:e2:5e:02:b4:1a:50:16:3f:
                    49:6d:68:2c:07:34:86:f0:8e:9e:96:c5:98:5f:6e:
                    8b:2e:37:f3:99:36:aa:71:8d:e0:42:74:ae:ed:5c:
                    c2:32:0f:ad:35:46:48:10:5a:41:80:85:bf:55:e6:
                    05:91:ec:a6:a8:3f:32:ba:5f:19:20:78:9b:82:6d:
                    4f:46:20:6d:be:cf:75:92:5e:1d:44:2d:b4:09:c6:
                    b8:7b:24:33:f3:f0:ff:c1:da:52:e9:98:13:95:0e:
                    f8:1d:a2:e9:1a:f6:39:18:23:c5:e0:24:e4:9a:25:
                    b3:f3:16:05:1c:21:39:69:86:26:87:da:8b:a1:cb:
                    2c:a2:54:62:48:d2:2a:ca:28:b2:53:9c:76:4c:fc:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B4:D3:62:9B:C5:C8:80:7C:C7:01:CA:DC:49:B1:C7:FF:84:66:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d904d990-fb1b-387d-aed0-223f5240308c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3ea::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:5c:1d:77:10:8b:ea:bb:98:92:7b:16:06:37:86:57:0b:21:
         78:f8:fb:38:aa:f1:0d:59:f7:89:37:3b:57:87:fe:7d:17:7a:
         3a:06:19:f9:74:10:2e:0a:bd:c4:ef:31:aa:93:9f:36:82:e3:
         9a:e0:c0:68:11:14:d6:0b:1a:a7:d2:e6:39:5a:05:3a:18:f4:
         af:40:60:c5:0f:8f:4f:7f:35:81:55:2b:12:3e:94:3a:01:03:
         19:8d:5c:2a:71:5a:1b:1e:c9:e9:d5:01:8d:7e:3b:72:4a:3d:
         6c:3a:72:84:cc:92:d3:b6:1d:d3:22:1a:74:67:aa:cb:39:25:
         33:69:85:b3:80:bc:93:0e:1b:60:2c:37:53:73:30:81:c1:29:
         91:b9:6e:3a:b3:25:ad:00:8b:cb:1f:2a:68:b8:73:70:88:e8:
         9f:87:61:75:a3:b6:e8:88:18:e2:98:86:db:99:57:b0:1a:f4:
         46:58:8e:17:ee:75:ea:7c:ab:6a:d0:e1:05:17:a3:78:e3:3f:
         68:9a:3b:21:e8:83:da:44:9c:22:ac:ab:ec:98:c1:6d:8c:f0:
         e0:9e:36:ee:ab:26:9c:e8:51:6f:3c:5a:9f:b9:dc:2c:da:df:
         e8:e0:99:8f:9d:2c:bc:de:2d:72:1f:59:56:c2:59:a7:cb:05:
         a4:a4:97:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:50 2025 by rpki-client