Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/065ec9fc-5ca1-3fc3-bc69-bca580184a83.roa
File:                     065ec9fc-5ca1-3fc3-bc69-bca580184a83.roa (raw, json)
Hash identifier:          3s9qpLJZAp7p0CUtN6eNQ7CF0G/u5jX2m98wir7AWHM=
Subject key identifier:   A5:31:18:56:DF:59:4C:9B:69:F3:18:BB:4B:21:22:5E:05:6A:50:8F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FD79E505EF49EBCF431D0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/065ec9fc-5ca1-3fc3-bc69-bca580184a83.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     18779
IP address blocks:        2001:470:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:d7:9e:50:5e:f4:9e:bc:f4:31:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=e41a725d-1d72-4ebb-aac1-6b4b6ad4dfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:58:b7:28:31:d2:95:a9:31:b3:bb:0f:52:
                    a2:5a:a6:a2:e0:d2:03:cf:4a:01:6a:84:fc:7e:12:
                    ad:ea:28:82:29:d6:07:f1:3d:a9:f7:0f:35:5a:fa:
                    59:84:90:b7:dc:32:42:41:d8:05:65:d7:90:c0:c4:
                    2e:02:3d:6e:32:34:6d:cd:2d:24:29:85:d6:58:08:
                    f3:50:a0:df:53:08:a0:e0:c3:57:a1:cd:73:84:cd:
                    d7:26:61:c2:35:ee:e9:bd:ee:13:93:7d:39:02:06:
                    00:16:5e:14:85:71:37:03:af:04:af:53:4f:95:34:
                    8a:78:cf:3e:74:20:49:05:c6:3e:c3:6a:96:e7:cd:
                    92:2b:d9:59:25:1d:27:e8:a8:b8:94:f0:86:23:94:
                    67:74:49:d5:25:c5:38:89:5f:3c:5c:b0:75:28:6b:
                    a1:97:e8:c7:a2:d0:0c:d2:de:bb:50:3b:72:a4:17:
                    45:1d:4e:81:84:d5:28:4c:ca:9e:fe:ee:e8:1f:e0:
                    62:34:a9:31:dd:72:2c:95:67:61:4b:a6:ea:aa:72:
                    bd:a3:04:fd:39:a7:15:c5:9a:3f:90:4d:81:6e:45:
                    c0:98:ec:43:0d:38:f6:fd:3e:d7:a9:29:68:fd:5b:
                    d3:69:4b:27:e6:7a:4b:9a:93:2c:a0:ad:67:bc:06:
                    a9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:31:18:56:DF:59:4C:9B:69:F3:18:BB:4B:21:22:5E:05:6A:50:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/065ec9fc-5ca1-3fc3-bc69-bca580184a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:08:42:33:ff:d9:c1:06:03:94:f3:cd:88:1d:61:75:0a:87:
         e2:f9:d1:c6:f8:6a:01:b4:26:97:45:ee:25:b3:ba:56:36:17:
         a6:0d:bb:40:f7:2e:cf:dc:87:ec:d9:4a:d0:84:9b:2d:f6:0b:
         c7:8e:39:77:b4:e4:39:56:06:76:14:3f:0e:64:e7:eb:0d:9c:
         da:63:ba:a5:4f:8b:15:15:d1:4c:e6:55:92:d7:63:7a:d9:17:
         10:c8:4d:fc:30:b9:99:03:47:47:5a:0b:7c:41:27:13:b4:54:
         c9:df:37:fe:54:d3:54:e5:9e:b8:5b:76:ff:9d:9f:8f:68:74:
         32:73:db:0f:7b:ad:25:4d:0e:6f:7d:96:11:c7:8c:08:8c:71:
         50:15:3f:a0:29:16:21:dc:af:a6:44:74:2b:9c:db:c5:92:95:
         f3:b0:f5:85:3f:71:95:76:81:3a:30:00:7f:9a:76:d0:5c:37:
         83:b6:00:80:0c:24:fa:41:13:9e:cf:b6:5b:6d:7a:0f:e3:c6:
         55:a2:0a:52:04:b9:2d:b7:66:95:e3:89:7f:91:6e:07:d0:8c:
         3f:bb:4a:20:e3:42:7f:ef:91:5d:c9:4f:4f:e1:91:50:ce:6b:
         a9:2f:17:3f:ea:f3:7e:dc:e7:4e:bf:94:df:a5:89:49:d3:43:
         0c:c8:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:43 2025 by rpki-client