Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12a136dd-56d7-344d-8ac6-749a2a704578.roa
File:                     12a136dd-56d7-344d-8ac6-749a2a704578.roa (raw, json)
Hash identifier:          +10uq4f1o38n8N27rnKQdF1fyu7kOrL39AZY7hSvI1M=
Subject key identifier:   B0:17:C9:F0:24:8E:F4:AF:2F:C5:D0:8F:52:EA:18:92:84:27:D6:08
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FCCDFB2A72295EA528DA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12a136dd-56d7-344d-8ac6-749a2a704578.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     213373
IP address blocks:        2001:470:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:cc:df:b2:a7:22:95:ea:52:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=5e415af6-0c14-4742-bd1b-df7eb10ee0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:0d:00:d8:c1:c6:0a:85:e2:d5:6a:bf:6d:
                    95:b2:55:a2:5c:fd:ea:7a:e3:0a:3e:fa:4d:52:ed:
                    a5:64:11:16:54:84:3f:a0:c2:17:0b:be:36:b2:33:
                    e8:1b:ac:a1:d6:44:25:0d:c0:4f:16:87:76:d3:0d:
                    63:40:4d:2f:fa:4f:a9:59:1c:d9:07:dd:07:22:98:
                    dd:a0:95:af:d8:44:8e:f2:65:4e:0f:1c:f7:77:b9:
                    2b:47:13:72:39:63:8a:9a:a8:69:5e:9f:c2:78:92:
                    76:03:ee:c4:69:a2:82:0d:42:af:1f:a2:d0:d8:75:
                    cd:65:8e:c2:3a:68:70:cb:3e:a5:8a:f0:fe:26:f8:
                    f2:b2:91:7d:7b:83:5b:ee:19:de:f3:de:b7:d7:85:
                    7a:e1:15:0c:cb:29:24:ed:60:ca:5f:15:d4:8c:c9:
                    95:81:ef:9d:4a:d0:72:c9:db:09:27:61:8b:74:4b:
                    99:99:83:f6:31:b6:ea:ab:0d:f2:8d:3e:2c:51:0d:
                    d1:b4:f7:f7:31:ef:75:7a:3e:36:fb:bd:ac:ba:f3:
                    79:84:ef:68:0a:3b:e8:ec:ce:8c:43:87:00:44:19:
                    89:ab:66:8c:a9:45:4e:26:9c:f9:e8:e5:a5:6f:50:
                    0b:52:5e:73:c9:c4:0a:6c:7c:35:60:c5:76:4a:3c:
                    a0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:17:C9:F0:24:8E:F4:AF:2F:C5:D0:8F:52:EA:18:92:84:27:D6:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12a136dd-56d7-344d-8ac6-749a2a704578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:51::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:69:56:d1:79:ef:4b:0d:3b:fe:6c:cb:41:36:e9:cc:24:7a:
         36:a6:71:b4:9c:4f:33:2a:ca:4a:fc:3b:48:25:ef:3f:f9:e1:
         ae:0e:9a:fa:ee:d8:7b:1f:bb:b1:63:46:46:d2:aa:a4:32:bf:
         99:35:9f:70:06:50:61:a7:2c:fd:fa:79:c5:2a:03:8a:22:6c:
         fb:b0:4e:ae:fc:b4:66:53:e9:a7:c7:50:b1:c6:25:cc:59:33:
         78:da:8b:cb:96:99:2e:58:1c:00:c3:3d:fd:1c:51:d9:8f:cd:
         eb:40:03:b2:ff:a8:28:d9:9c:40:50:da:00:10:95:a9:f9:6d:
         2e:b9:ed:ba:23:55:86:a8:05:94:2f:3f:8e:07:85:ad:45:4a:
         a4:79:80:09:a0:c8:cd:a2:eb:8b:de:87:38:0b:0d:44:e1:07:
         59:60:16:72:70:f8:b9:c4:81:3d:d9:f3:98:08:20:c7:05:b0:
         ff:6e:f9:b1:15:e4:d5:61:32:70:ee:e3:09:66:f5:0e:08:7f:
         63:4a:a9:17:e2:07:29:8e:eb:61:4f:a9:ec:a6:d9:63:24:f7:
         98:f7:e2:9e:01:03:9f:38:2f:be:af:c0:8b:68:e9:f5:2a:bd:
         4a:05:1c:33:c9:e4:ee:5b:ba:26:66:1f:8a:11:fb:6e:7a:0d:
         c4:39:90:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:59:43 2025 by rpki-client