Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e13272b9-e2e9-354d-9277-193fc3dd861d.roa
File:                     e13272b9-e2e9-354d-9277-193fc3dd861d.roa (raw, json)
Hash identifier:          1vRde83M3MX4zpPk4vu8t4beNzGLE1SQ0N1CZtOKQds=
Subject key identifier:   30:7B:04:F2:7F:8F:B5:3B:54:EE:C5:13:5A:B9:A6:C9:45:27:9E:AE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB52602738ED978807800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e13272b9-e2e9-354d-9277-193fc3dd861d.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     36315
IP address blocks:        2001:470:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b5:26:02:73:8e:d9:78:80:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=a1fa15b0-c180-46d9-97b2-7fbf9ec4a010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:25:8b:b8:e4:d3:ca:11:51:f6:80:27:bc:ac:
                    48:4f:34:bb:41:eb:15:50:95:01:0c:ed:6b:0e:fe:
                    23:0a:45:c6:1e:74:47:f6:52:ac:a9:65:55:fa:cb:
                    c8:ec:22:b7:9d:6d:ed:72:b6:c4:48:08:8d:a2:d7:
                    db:b9:5f:86:f7:0c:de:e8:57:32:0f:48:f1:f4:21:
                    b1:c4:db:41:7e:f7:ba:d3:03:6e:d2:b6:34:d5:23:
                    dc:f1:ed:ef:ed:2f:b1:b7:b8:be:28:52:ed:0d:dd:
                    26:10:d8:5e:cf:9c:98:28:09:a2:f5:4a:2f:0c:16:
                    82:2c:ed:06:a7:1a:f6:70:dd:fb:3f:b7:f7:7d:6d:
                    67:b1:0d:17:92:db:5f:d4:c6:7e:b2:37:a6:d5:f8:
                    d8:ec:a9:8f:61:cc:c9:08:b9:6e:82:72:9f:fd:44:
                    9c:5d:ba:ed:41:a2:ca:51:6b:1b:47:d8:40:c4:54:
                    7e:dc:6f:1b:71:64:30:db:9b:13:57:13:19:fe:b0:
                    ca:32:40:e1:a7:20:de:85:8a:90:47:b0:25:0c:19:
                    b4:a8:50:b6:a5:97:fa:64:44:60:72:ca:04:bf:88:
                    22:cf:b9:86:ba:5a:d7:23:d1:0f:e4:12:25:77:75:
                    57:c5:3a:4e:fc:87:0d:36:24:52:c4:ec:bd:f4:15:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7B:04:F2:7F:8F:B5:3B:54:EE:C5:13:5A:B9:A6:C9:45:27:9E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e13272b9-e2e9-354d-9277-193fc3dd861d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d7:df:c0:60:88:d6:86:d5:37:19:bb:7b:53:be:4f:a7:b0:
         2c:31:b1:8c:bf:e4:ce:83:3e:95:0f:d6:0f:cd:b6:a1:a5:39:
         bf:9a:f9:0e:45:ea:af:44:da:e2:fe:ef:8b:31:2a:88:51:80:
         76:dc:be:d6:f5:01:fa:93:99:00:73:00:09:7d:f0:b8:a9:ea:
         e6:ca:99:84:bf:1c:89:50:26:c0:2a:d2:6a:12:ff:0b:ea:b4:
         9f:83:d9:2f:ba:83:b8:48:1c:9e:38:14:6e:6d:08:f7:cb:ce:
         82:75:2c:b9:19:22:f9:97:cc:e9:73:25:22:37:2e:55:94:78:
         27:41:63:b3:cd:f9:75:6a:da:b2:ff:de:f3:f3:21:a7:01:9c:
         e3:52:c2:2b:86:b9:6d:d3:a6:4e:83:a3:07:f3:62:0c:f5:25:
         ee:ee:47:80:26:ee:03:65:00:7e:de:98:9f:15:a9:d6:59:a3:
         19:8c:34:93:ba:aa:55:21:ba:4f:99:2f:fc:65:5b:dd:0c:44:
         06:5d:79:0a:b1:68:20:f9:28:b9:fb:8d:c8:e5:f4:8e:9c:ef:
         bb:44:56:77:fd:e0:09:40:e6:98:0d:a6:b2:93:3a:42:f4:35:
         ea:52:c9:bd:0f:dc:f8:af:17:d7:d3:2f:f4:32:26:19:82:41:
         f6:9c:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:37 2025 by rpki-client