Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/61c7614d-1692-3b85-837c-78efda64494b.roa
File:                     61c7614d-1692-3b85-837c-78efda64494b.roa (raw, json)
Hash identifier:          H53fH0o6JVPD902DgZvKSrvRZrStnStqmR//IT57czo=
Subject key identifier:   64:5A:61:6C:A5:FC:79:20:4E:70:72:26:F7:1F:73:40:9C:74:56:E4
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F43285848EF61366E852235B6285EFB00
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/61c7614d-1692-3b85-837c-78efda64494b.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     46375
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:36:6e:85:22:35:b6:28:5e:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=ed8c4a8c-58bf-4634-a79f-0716994356c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:90:56:c2:c3:c8:26:7a:8c:48:98:ec:73:
                    a0:2c:42:e1:ab:3c:02:3a:e6:fc:6c:36:fb:f4:fa:
                    7b:2e:30:8a:5b:5c:fc:b7:4c:0d:da:6c:56:7d:2e:
                    33:f5:68:c5:0d:87:f3:69:e4:42:3d:cf:e0:af:0b:
                    31:0e:31:cf:04:33:c7:55:b7:3c:ba:d6:6d:bd:0b:
                    d9:ad:a4:c7:0c:86:f8:2b:6f:f2:0a:d0:12:55:cd:
                    86:f5:21:2e:02:39:88:01:35:3c:92:b5:89:80:71:
                    f6:28:97:bc:38:5f:09:96:94:48:44:ab:8c:59:07:
                    c5:56:46:ff:4b:79:9a:d7:99:12:91:3e:54:d9:c0:
                    34:10:84:df:1c:0d:68:eb:59:c2:13:4d:da:ac:d6:
                    29:bd:2a:c5:46:25:5b:17:79:73:55:35:d7:36:54:
                    f3:8f:da:01:d5:ed:77:42:a6:61:6f:28:31:69:52:
                    cf:74:8b:58:14:e5:3d:3b:f1:f8:71:bd:41:3f:77:
                    63:7b:10:3f:a2:44:fd:12:1e:f7:ac:59:53:96:d2:
                    81:d1:b6:fb:c0:33:4e:29:86:10:b4:dd:29:a1:e6:
                    73:31:13:e8:4e:cf:d0:db:35:39:16:20:e3:52:4c:
                    d3:a9:06:e1:3a:11:d0:d4:17:f3:76:ce:c2:9c:ae:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5A:61:6C:A5:FC:79:20:4E:70:72:26:F7:1F:73:40:9C:74:56:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/61c7614d-1692-3b85-837c-78efda64494b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:79:06:07:5b:07:d2:dc:26:07:d7:8d:6e:3c:08:fe:62:de:
         64:75:57:c0:9d:c6:0f:9f:b5:f0:69:cb:39:06:26:f8:96:ae:
         e1:b3:32:62:34:da:84:fd:8b:6b:59:05:fd:7a:18:b3:07:e0:
         af:54:1a:29:4e:d7:e2:62:9a:67:8b:9b:6c:42:3b:21:ea:c1:
         ca:82:a7:47:a6:78:20:a2:dd:e3:22:6f:31:a6:69:34:2f:79:
         ec:da:a3:8b:9b:0f:63:4a:cd:4b:68:46:22:46:de:a6:9f:42:
         00:c3:a1:64:eb:3e:04:80:90:37:4c:8d:a7:a5:2d:1d:9c:5a:
         d8:b7:b4:e8:e8:9e:43:96:63:3c:84:10:4a:7f:4e:67:b4:3c:
         da:c2:11:4a:f0:ec:8e:d9:f5:b2:d0:d0:c5:80:a3:f7:a2:57:
         2c:5b:7b:4f:e6:4d:4c:71:e8:f7:72:6f:cf:6c:9b:8e:56:18:
         b7:01:ae:5a:c7:ba:4c:d1:cb:15:c7:61:f8:82:5a:1f:5b:13:
         24:f4:cc:1a:84:6c:2e:0b:f0:1f:db:56:f5:a8:63:9b:76:53:
         0f:c0:c3:13:5c:de:30:fe:9a:2f:8c:db:42:a4:5f:96:7d:c4:
         64:a2:d6:a9:ea:6f:37:ca:7f:dd:7d:d4:6c:30:a4:89:0e:ad:
         84:6a:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:23:01 2025 by rpki-client