Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1bc7042-e9ca-3a2e-ab72-6ba168e9e6fd.roa
File:                     f1bc7042-e9ca-3a2e-ab72-6ba168e9e6fd.roa (raw, json)
Hash identifier:          d7kjBSwxOLwR8aoGgSl18HspEp5AN2/v6HeCdXUutRM=
Subject key identifier:   EF:9D:24:8A:B0:70:6A:0D:39:7E:08:7C:3F:37:A2:A0:D0:54:EE:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FBD29D6EDBF5BB1BB6CC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1bc7042-e9ca-3a2e-ab72-6ba168e9e6fd.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     399889
IP address blocks:        2001:470:d2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:bd:29:d6:ed:bf:5b:b1:bb:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=08876016-9507-480c-9963-3dad7f918965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:b0:ad:c4:52:a0:70:6a:f8:cf:9f:28:7d:
                    19:c2:60:7f:42:40:06:da:6f:92:6b:7e:ec:6f:94:
                    7c:89:d8:cc:9c:06:25:aa:e9:50:cb:44:d9:ea:67:
                    5f:4e:c5:9d:6a:44:30:ef:d4:d1:f7:ab:75:c7:f3:
                    99:e8:e4:79:1f:80:a1:5a:55:73:5e:4b:90:0d:1d:
                    33:0b:27:cb:61:0c:d6:61:0e:22:3e:df:45:d2:31:
                    54:88:21:de:9d:c6:ef:31:18:0f:75:ab:d5:7b:3c:
                    6b:55:1b:e4:6c:4e:0e:2e:28:b8:bf:ae:df:81:50:
                    cc:30:eb:4b:2f:30:ed:5c:a7:ec:f6:9b:57:0c:77:
                    43:c3:ab:1f:0c:72:5c:7a:75:06:4b:b9:0e:dd:d2:
                    be:e8:23:bd:a0:15:dc:c3:ca:fc:df:8d:55:a1:8d:
                    12:78:2c:03:52:1f:47:16:53:de:f6:02:61:b6:fc:
                    a4:a3:47:4d:d2:6a:ec:34:f1:36:6f:27:e5:0d:b9:
                    1a:ab:8a:04:e8:de:c5:6b:e2:c3:10:4b:6b:b4:60:
                    ba:cc:3e:ee:e1:ac:9f:22:4d:d0:19:4d:97:1a:f4:
                    72:65:56:31:01:42:8f:0b:5d:18:be:40:34:41:35:
                    67:7d:f2:cd:86:ea:5a:ef:c0:4d:9c:6f:9f:bf:4d:
                    d6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9D:24:8A:B0:70:6A:0D:39:7E:08:7C:3F:37:A2:A0:D0:54:EE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1bc7042-e9ca-3a2e-ab72-6ba168e9e6fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:d2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d7:9c:7f:89:47:d3:f7:25:50:a7:67:97:b2:2d:ec:c1:9c:
         b7:12:a3:3b:fd:7e:0f:bd:4b:5a:b8:15:8f:c4:d6:27:05:dc:
         71:2c:4c:15:d7:85:43:c1:fa:96:c1:28:95:cf:7f:96:43:f7:
         93:4c:4c:30:80:fb:2a:ff:99:b6:ea:97:42:55:3e:67:17:e6:
         ee:9a:5b:30:9f:50:f1:b5:83:f3:6a:fe:43:3d:e0:8d:eb:0f:
         45:80:a4:56:35:4e:ef:f4:75:60:a7:bc:13:56:8d:1d:c8:d2:
         30:61:28:64:b4:03:62:ee:18:7d:88:dd:28:3f:93:c8:6b:29:
         85:14:29:0e:91:22:c1:f5:84:3b:84:17:41:9a:b6:5b:ce:c5:
         b1:7c:d0:a0:7c:9a:1a:4b:bd:ea:cf:51:cb:d7:c2:05:32:a5:
         9f:e4:2b:ba:27:2d:21:58:63:29:1a:c3:80:28:8c:57:6d:49:
         84:77:bd:11:e6:89:e5:67:64:49:b8:8d:d1:12:c5:63:dc:ac:
         91:db:0a:cb:fe:3a:17:06:4d:1a:31:5f:f9:7f:5d:35:4c:87:
         ce:4f:cc:a0:ae:21:66:53:7b:5c:f1:a8:67:7b:9e:f7:16:c4:
         bd:15:b9:29:ac:a7:ae:fa:a9:e0:f6:5e:69:89:be:32:a5:3a:
         00:d9:e9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:18:20 2025 by rpki-client