Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef4ae8ab-19eb-33ef-85c6-0861d0146a68.roa
File:                     ef4ae8ab-19eb-33ef-85c6-0861d0146a68.roa (raw, json)
Hash identifier:          AM5xqUDvbucxjYpU4w56eyimbQc/gU0m3T5SVUxokrA=
Subject key identifier:   7C:84:4A:EE:BC:93:7F:4D:D7:88:FF:86:E1:77:FF:D9:15:0F:12:75
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849C36F80E9A0D61C94E9430440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef4ae8ab-19eb-33ef-85c6-0861d0146a68.roa
Signing time:             Tue 06 May 2025 13:01:01 +0000
ROA not before:           Tue 06 May 2025 13:01:01 +0000
ROA not after:            Mon 04 Aug 2025 13:01:01 +0000
asID:                     395209
IP address blocks:        2001:470:364::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:6f:80:e9:a0:d6:1c:94:e9:43:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  6 13:01:01 2025 GMT
            Not After : Aug  4 13:01:01 2025 GMT
        Subject: CN=019a8d1b-841e-47e8-82b2-26a274cadf76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:6a:5a:01:b6:af:0b:9b:1e:ab:be:13:98:
                    52:95:b6:65:85:4c:74:eb:58:6e:37:66:38:31:72:
                    3e:aa:c7:1a:ab:cc:86:ee:d2:40:fc:a9:2c:f3:51:
                    28:53:d2:73:f2:01:fa:6f:98:77:cd:6d:18:ed:18:
                    c2:5c:a9:78:56:21:cf:92:98:aa:8f:a8:53:0d:3a:
                    c8:e8:cc:6d:a4:85:9f:c8:27:fd:57:d7:e4:9f:37:
                    89:dd:ae:b0:9a:d0:b1:7d:f8:cb:27:4e:03:32:95:
                    8c:20:c7:e3:ff:41:39:c9:62:ca:3d:ba:d3:9f:87:
                    34:80:a5:14:27:e4:c3:a6:22:35:be:c3:54:5f:1b:
                    f3:17:28:21:08:c1:94:6e:4d:e2:47:0f:3b:73:0e:
                    8b:7e:62:ca:83:9d:56:28:1a:36:9d:36:20:39:82:
                    73:29:8e:9e:16:64:ef:0c:e5:4e:2f:4a:76:7b:22:
                    9b:16:42:d2:4d:2d:a0:74:5a:d0:cf:96:c9:89:37:
                    c0:e5:2d:be:ca:99:79:f7:f5:69:c3:e2:c4:c5:c2:
                    88:fb:98:24:8c:2e:c0:76:9e:0b:11:af:67:fa:74:
                    ef:f2:be:87:2c:cf:aa:aa:05:80:d9:0d:d1:d0:ff:
                    8d:15:15:a3:2a:80:1c:1a:36:7b:c5:6d:f0:f9:79:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:84:4A:EE:BC:93:7F:4D:D7:88:FF:86:E1:77:FF:D9:15:0F:12:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef4ae8ab-19eb-33ef-85c6-0861d0146a68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:364::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:84:b7:2d:73:3a:d9:09:dd:03:58:18:34:23:3f:20:f6:5a:
         6d:c0:51:de:d5:37:c7:39:ba:c4:bb:26:fa:4a:f6:3b:4a:b3:
         36:2a:46:d4:cf:a7:2b:79:61:63:5f:1f:0b:3d:f3:b5:23:08:
         11:c4:26:b9:fd:e1:b5:a2:f7:69:60:40:42:09:af:68:cf:8d:
         1d:a1:41:17:3f:73:cf:75:31:3c:e7:2a:46:58:1e:e9:c9:00:
         33:fd:9b:5d:c0:ad:3d:91:68:1c:00:ff:3c:5f:04:7a:56:ec:
         78:5a:d9:1e:9d:a9:bb:d2:56:bf:9b:e9:04:5a:25:75:e7:53:
         bf:4c:59:ba:ff:1d:cc:9c:0f:2e:33:ab:3e:21:3e:f9:d0:14:
         4b:28:00:64:89:d5:20:5c:36:1e:cb:2f:a0:d4:b7:5f:8b:b8:
         bb:a9:3c:40:31:a9:20:de:b9:aa:13:1c:9a:d8:7e:93:cb:de:
         53:4f:d5:51:bd:ec:0a:aa:80:d9:6e:b2:0f:7c:e3:81:57:a5:
         63:3f:2f:53:0f:cf:de:1e:5c:89:c9:99:a0:c0:af:45:61:b3:
         4e:d3:b5:fc:9f:c4:09:1e:dd:a6:62:a0:24:85:86:99:25:78:
         49:75:22:b2:69:ac:45:19:99:ef:34:75:30:b3:a7:be:79:67:
         df:0c:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:04 2025 by rpki-client