Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/f85f0165-704e-37b3-a7dc-23d0e6cdf10f.roa
File:                     f85f0165-704e-37b3-a7dc-23d0e6cdf10f.roa (raw, json)
Hash identifier:          +o47fTjCvmCpNMS+6Da610xUniX/mXpjksH5fbYvGhw=
Subject key identifier:   6C:48:34:16:E6:C9:A8:C4:B1:CE:D7:F4:D6:CA:F7:5F:2C:88:D4:74
Certificate issuer:       /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial:       010D0C9F43285848E16BE2BDC1AD39FF0E32C880
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/f85f0165-704e-37b3-a7dc-23d0e6cdf10f.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     20177
IP address blocks:        2001:49d0:140::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e2:bd:c1:ad:39:ff:0e:32:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=97e11a89-1063-4739-b6f3-cb72568312a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:55:aa:c0:74:ae:4a:c0:42:42:30:21:87:05:
                    dc:0d:8b:37:b4:18:b1:69:cc:10:e0:3b:bc:e9:f2:
                    0e:a2:ea:c2:ef:b5:fd:5d:b2:87:3c:e3:19:0a:2c:
                    5c:31:20:7d:bf:9f:b9:b0:13:a4:69:8f:ce:e2:03:
                    d1:4f:9a:67:5d:27:c1:0b:32:b5:b5:4a:93:d8:26:
                    b3:52:2b:28:62:83:72:f8:40:21:20:74:6b:8d:ce:
                    d2:a5:51:f6:24:26:a9:b7:8a:36:39:32:84:e7:71:
                    b3:11:24:80:c3:68:8e:13:e4:24:41:45:49:71:b1:
                    45:c5:17:b1:e5:df:ca:e7:ea:f2:00:6e:fb:ee:48:
                    02:41:21:f1:cb:7f:cd:57:bd:ea:75:d8:cd:cb:11:
                    64:84:f8:8c:41:fa:c3:fe:03:34:2d:38:ef:2c:61:
                    6f:43:e1:70:34:0a:8a:ea:90:bc:46:72:03:ba:92:
                    d1:8c:79:fd:32:a9:fc:4d:2e:ae:00:11:73:42:e8:
                    9c:13:2a:af:b4:0b:b5:61:3f:8a:ba:d3:87:a5:ee:
                    a3:a2:41:95:87:49:a2:67:7d:8d:9f:36:8d:73:c7:
                    01:76:f5:d0:4e:5f:68:f9:73:47:02:ea:e1:31:08:
                    e5:8a:3b:90:ab:52:5c:e1:34:7a:f1:30:3b:f8:a9:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:48:34:16:E6:C9:A8:C4:B1:CE:D7:F4:D6:CA:F7:5F:2C:88:D4:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/f85f0165-704e-37b3-a7dc-23d0e6cdf10f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl

            X509v3 Authority Key Identifier:
                keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49d0:140::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:cb:9e:4d:23:ae:a8:2e:a3:3c:29:cd:1f:58:c2:93:51:43:
         05:b4:46:55:50:77:98:90:a2:56:53:1e:3f:a7:18:a5:8b:9f:
         97:70:0d:ed:1b:02:45:dd:b2:a3:98:6b:ae:a0:b0:ea:bc:47:
         05:27:30:dd:3c:11:8b:81:4e:bd:07:b7:9c:d3:b2:43:74:52:
         2c:58:c6:cb:bc:bc:46:a5:d9:c3:65:e1:0e:4c:c6:83:89:f3:
         91:2f:93:92:c8:2f:53:7f:29:eb:95:11:ff:37:68:b5:14:be:
         2e:ca:18:ca:4d:03:16:9b:ab:34:7f:2c:c0:e4:47:c9:a7:8f:
         7a:75:53:05:a3:1d:2f:59:18:d8:3d:c0:f7:0e:f6:a8:b2:88:
         87:70:ac:34:2a:61:3b:1b:bf:44:d3:27:16:08:aa:82:9a:e3:
         d0:53:35:02:30:70:2f:0c:77:df:4e:4c:33:b9:00:e4:0f:a9:
         6a:78:de:bf:71:5d:fc:a1:14:fa:86:64:14:d1:43:e2:35:be:
         5b:6f:c9:d3:3f:e7:87:38:92:ca:05:29:8e:54:21:5b:eb:83:
         8e:0f:00:a9:df:ce:a1:b3:8a:50:b0:83:c4:ec:a5:7d:c1:ec:
         79:2e:ec:91:05:fc:dc:ad:f8:34:f8:7b:3b:6c:19:96:1f:eb:
         5a:87:d0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:42 2025 by rpki-client