Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbcfd4a8-7f12-37f5-8762-9d5e909bb776.roa
File:                     dbcfd4a8-7f12-37f5-8762-9d5e909bb776.roa (raw, json)
Hash identifier:          GZpfP1uKRFlADl0FyOzvqH9pp5JoQHikiGARp7Yja8o=
Subject key identifier:   E8:1A:A7:4C:8E:7A:FD:48:18:59:62:4F:47:5B:3E:18:05:42:3D:F0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FBD75C9099D0E0BEFBA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbcfd4a8-7f12-37f5-8762-9d5e909bb776.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     26167
IP address blocks:        2001:470:116::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:bd:75:c9:09:9d:0e:0b:ef:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=28c5a8a0-7aa5-43e6-8d48-3592bef4657a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:00:5c:ad:3c:25:a0:d0:fd:38:67:18:ee:8a:
                    a8:24:7f:90:9e:16:ea:ea:8e:2b:ca:db:43:bb:3b:
                    4f:32:b5:05:ba:97:c3:bd:10:b2:a0:c9:1d:35:65:
                    e5:13:0a:16:83:38:08:84:c3:a4:c1:82:54:8c:b3:
                    d4:cc:29:57:96:d2:5c:b3:9b:8e:5e:93:7e:b4:af:
                    43:71:37:79:12:19:d8:b0:dc:5b:72:7e:8e:58:25:
                    99:94:ab:a9:75:d1:8d:df:8e:d2:6d:55:08:0d:49:
                    e7:e3:07:17:ae:a9:9d:b6:eb:6b:53:83:86:62:f3:
                    d3:56:39:77:0f:46:26:e5:c9:c1:0d:96:5b:fd:74:
                    b3:6e:33:48:83:c5:b9:ce:af:f5:9b:ef:6c:78:79:
                    e5:42:42:2a:89:03:c2:ad:87:a1:e2:1c:e3:b4:cb:
                    02:79:d8:a5:eb:e1:8a:2d:10:ce:27:c8:a4:dc:9c:
                    3d:fc:c3:8d:f1:a2:ba:6d:3f:db:7f:79:4a:7f:69:
                    9d:53:cd:6f:2e:f0:80:ad:3f:bc:a9:a4:6e:9d:ac:
                    ed:55:7f:2f:65:15:23:b7:84:96:48:24:ef:35:79:
                    e0:51:10:c7:72:74:20:78:a0:3c:a9:ec:7a:aa:4d:
                    6c:4c:3d:aa:78:0e:62:83:7f:6e:48:01:75:c2:24:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:A7:4C:8E:7A:FD:48:18:59:62:4F:47:5B:3E:18:05:42:3D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dbcfd4a8-7f12-37f5-8762-9d5e909bb776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:116::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f3:69:24:f3:ba:b2:5c:0f:7b:d8:0d:03:a0:e0:f4:40:e9:
         f6:5a:85:11:cc:d8:61:35:6c:26:c0:09:37:50:e0:e0:30:1e:
         6a:da:21:7d:0c:42:7b:44:4c:6e:3d:b6:9e:61:c9:03:9e:87:
         4b:45:fb:5e:ea:e3:13:6f:5a:6b:4a:5b:8f:05:60:44:9d:84:
         50:7a:d6:48:30:7b:59:04:c4:96:db:2e:7b:d2:99:d4:90:be:
         55:ac:63:cb:f7:0c:09:91:81:d8:d9:e2:c9:64:f3:20:57:e1:
         dd:41:83:a8:f7:c4:fc:24:13:4c:6d:6b:e4:86:f8:73:3a:b2:
         3c:e6:53:8a:4e:a2:54:ea:36:f9:13:e6:1f:d7:20:a2:88:f1:
         3c:d9:5e:72:8e:fe:8f:96:cf:1a:02:9e:a4:81:18:45:1a:fb:
         c5:a1:f0:3c:1f:f3:f1:2c:fd:f5:7e:6b:47:c0:a3:19:26:4c:
         15:85:b4:b1:6d:8a:3f:24:c8:56:64:fa:ba:fc:45:9d:8f:fa:
         78:74:33:fe:f8:48:d4:f8:b7:72:a3:9f:0f:6d:6a:4d:4e:e7:
         0b:45:5a:49:b0:3a:df:30:e4:17:26:a5:cf:82:a1:db:26:20:
         50:12:a7:56:d5:c7:6f:b3:a5:63:1f:e4:9d:5b:30:08:63:ec:
         d4:12:d5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:09 2025 by rpki-client