Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b1795c8-6ea4-3571-ad98-678ed6206899.roa
File:                     0b1795c8-6ea4-3571-ad98-678ed6206899.roa (raw, json)
Hash identifier:          b7ylLjsUbD/JufZyAMRYvzfZxMSgBysyQ4HFwg8mPFM=
Subject key identifier:   77:5A:FB:F3:CC:C3:4A:20:9D:B4:DF:9A:58:51:7C:8D:3F:BE:A2:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FC93A3C6CF204336BF400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b1795c8-6ea4-3571-ad98-678ed6206899.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     49183
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:c9:3a:3c:6c:f2:04:33:6b:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=0360e19d-b6c3-4b6c-bbe7-0533e784381d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:3c:67:52:0c:da:b1:83:bd:83:91:ed:7e:
                    f6:14:d8:38:01:2c:1d:38:86:43:96:ce:b3:ec:1c:
                    35:c4:4d:8a:ef:6d:c3:f5:65:9f:a7:93:dc:af:63:
                    6c:18:32:24:d0:74:e4:64:d0:3b:76:e6:07:bd:5d:
                    85:25:3a:09:5c:ac:a1:5f:c1:72:5e:f0:4c:12:92:
                    72:49:0f:67:1c:f6:17:12:4e:c0:93:f2:a4:af:d6:
                    55:ce:5c:cb:fd:2b:80:a8:b5:44:57:13:7a:68:0f:
                    c6:99:db:23:11:ca:0f:11:13:66:1c:33:4a:dc:94:
                    ac:23:63:f4:41:de:93:e0:99:59:6f:66:61:50:e1:
                    df:03:25:fa:d6:cc:4f:b5:33:f4:6f:ea:ed:f3:09:
                    96:2e:4a:5c:bf:6c:24:58:32:dc:65:f1:69:d6:b5:
                    b8:a0:e4:e8:16:a8:ec:36:fe:61:b6:99:22:46:e3:
                    8e:20:5d:30:2f:b0:47:4f:a4:1b:a1:92:69:8f:97:
                    73:20:b3:86:d9:f1:35:45:49:d1:71:5d:b5:82:25:
                    3f:49:62:70:33:3c:d8:f2:8e:e4:02:3f:87:8a:4d:
                    1a:dc:77:3c:2a:51:d0:bc:1a:49:fe:cb:e3:40:16:
                    fa:6a:81:9a:0e:9d:86:1b:4d:36:a4:d5:d7:4d:c7:
                    ae:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5A:FB:F3:CC:C3:4A:20:9D:B4:DF:9A:58:51:7C:8D:3F:BE:A2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b1795c8-6ea4-3571-ad98-678ed6206899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ef:58:82:c1:88:86:a2:c0:09:c3:ae:12:dc:97:ac:01:0a:
         e2:06:8f:35:3b:ef:20:d0:d7:ea:3f:61:50:e3:71:d7:97:0b:
         b8:27:21:3f:7d:1c:b4:79:a2:d5:b4:80:06:09:fb:ed:01:9d:
         b3:b4:4a:50:cf:18:49:36:39:44:8c:36:de:ad:b0:1d:8b:79:
         90:42:08:48:2c:96:1e:3c:98:25:58:65:78:4e:89:7f:14:f4:
         76:05:16:b8:38:37:6f:fc:52:65:df:9f:ac:39:a9:a8:ad:78:
         89:92:a3:03:07:1e:79:12:6c:eb:ee:af:89:5e:4a:30:e1:98:
         0e:b8:46:a8:d9:9b:3c:35:9c:b9:96:e7:32:69:02:93:8f:51:
         ec:97:e0:d7:16:72:b8:89:53:b9:ae:52:6c:41:00:67:8f:d1:
         3e:b3:ce:0e:45:ba:49:4c:4e:d6:61:b3:96:c4:18:8c:9f:76:
         91:9c:8d:be:07:f8:7f:b2:f6:60:30:2f:7c:4d:28:68:88:0d:
         7f:9b:dd:30:75:3e:1e:92:af:29:77:ee:ca:19:54:62:1d:f7:
         30:c6:65:9a:4c:bb:1a:0d:6d:0d:2a:cc:3a:ed:7f:0e:a3:69:
         da:be:1b:62:ee:13:1b:b5:d6:30:78:50:3e:90:62:1d:e3:69:
         80:e0:d2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:50:45 2025 by rpki-client