Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa
File:                     f6509623-abdc-366a-9b44-a90f59cbe42c.roa (raw, json)
Hash identifier:          lfisDmsQtbZ2cgl47+ZuOeAE0ITxj7mxOL4EMzSlK/I=
Subject key identifier:   A3:B1:7A:6B:A5:62:D5:36:ED:6E:C8:CB:66:33:6A:46:50:BB:FA:EB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584993F9D5BE16F73EA196715000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     34979
IP address blocks:        2001:470:405::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:d5:be:16:f7:3e:a1:96:71:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=e64f357d-8c2d-42fb-bc49-8de78a58e872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:90:c1:fe:b6:da:f8:fc:a8:98:1c:9b:a8:
                    7b:2f:e2:87:75:61:b4:9e:38:28:c2:8d:98:a2:03:
                    85:75:8e:b7:98:79:a2:14:44:d9:e2:f1:83:4b:f7:
                    ee:d0:2d:c0:d7:65:ee:b6:fa:5b:0f:7a:83:e8:b7:
                    3a:bb:da:b7:57:ab:84:c0:8a:f5:8a:d6:a0:2f:38:
                    d9:c1:b9:26:9d:20:35:c8:67:a9:51:81:b7:25:65:
                    de:84:79:13:d5:f4:1a:38:d7:77:5c:0c:7f:d3:67:
                    49:08:de:89:ea:0a:8d:87:88:25:a9:be:01:47:18:
                    56:bf:0b:31:59:9f:5e:90:63:67:36:79:14:b1:04:
                    72:44:25:8d:7f:e2:a4:5a:8a:bb:06:a5:e0:a5:9b:
                    58:6f:01:f1:33:cf:a5:e7:64:65:ce:4c:08:dd:5a:
                    8b:33:2a:e9:0c:62:f2:71:6e:c8:70:46:dd:4b:c1:
                    f3:57:c8:e4:cd:6a:31:7d:67:2a:d1:de:bf:be:1a:
                    a8:65:e2:b4:37:fe:d3:b1:28:10:04:31:c7:31:c8:
                    b2:72:33:ab:b5:a3:44:92:5d:89:9d:67:bd:bf:77:
                    d4:ac:61:24:6c:3c:7a:01:dd:e4:40:7b:50:cd:c8:
                    77:26:52:a9:85:43:a8:6e:a2:fc:eb:5c:98:b8:97:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B1:7A:6B:A5:62:D5:36:ED:6E:C8:CB:66:33:6A:46:50:BB:FA:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:405::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:25:11:ef:26:11:e5:0f:4f:a7:69:41:ea:bc:cb:02:40:23:
         69:6a:ba:eb:69:09:d4:53:ac:6b:fa:80:e8:4b:15:c0:cd:6a:
         e3:93:cc:ec:0c:5c:3c:5e:19:8c:68:e0:0a:22:a4:c8:b6:31:
         59:2f:e6:89:13:3f:55:dc:fd:e9:b3:21:70:5d:f6:96:c9:63:
         09:e9:55:0a:c2:7c:cd:86:58:d2:38:09:11:b4:b0:90:cc:02:
         4d:2f:58:b2:00:42:b8:4a:e6:e0:8c:6c:bc:9a:55:92:38:b3:
         e3:85:58:02:b2:74:94:73:99:00:8b:5b:8d:30:cc:52:9c:88:
         ff:21:27:35:90:dc:5f:72:46:d6:bf:07:99:9e:f3:32:93:0e:
         e3:e3:f8:e8:e6:3b:5e:5f:ee:09:b5:d8:fd:6c:72:60:a8:64:
         4f:7a:a9:07:25:55:04:54:7c:7a:ec:3e:06:43:54:d8:f9:27:
         c0:16:e4:e6:cc:12:8d:6e:76:7f:56:39:a9:42:4e:0e:9a:ad:
         d6:15:ad:91:9f:16:08:ca:30:36:3c:9b:49:a9:b6:6a:62:d6:
         40:b8:95:4f:04:51:24:9f:b5:87:11:8e:41:2f:51:ea:25:f4:
         61:21:03:a1:66:a2:8e:07:b6:67:50:08:49:d2:8b:00:b3:f0:
         e9:cb:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:40:49 2025 by rpki-client