Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c80c683-11ae-3a30-9617-794364502e00.roa
File:                     1c80c683-11ae-3a30-9617-794364502e00.roa (raw, json)
Hash identifier:          fbChXKOi9AjrRcX+Yt3SHSLik2TsGCsZBaN+IWDU3BU=
Subject key identifier:   A9:3D:45:B8:C0:C5:32:7D:62:40:14:94:FD:FD:71:4C:89:79:F3:19
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A1043B8158515EA8B1B45E280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c80c683-11ae-3a30-9617-794364502e00.roa
Signing time:             Tue 03 Jun 2025 01:30:08 +0000
ROA not before:           Tue 03 Jun 2025 01:30:08 +0000
ROA not after:            Mon 01 Sep 2025 01:30:08 +0000
asID:                     61573
IP address blocks:        2001:470:44a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:43:b8:15:85:15:ea:8b:1b:45:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 01:30:08 2025 GMT
            Not After : Sep  1 01:30:08 2025 GMT
        Subject: CN=47269056-51e5-4182-8377-eb97c9aa912e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:69:e5:77:b1:44:63:10:a8:16:9c:53:10:
                    a9:8d:2a:cd:6d:3b:59:22:39:a2:90:9b:f9:4d:0e:
                    bc:d4:ab:5f:68:6c:db:5f:ba:15:70:59:38:ae:2f:
                    d7:3c:bf:fc:f7:ae:8a:77:33:31:35:e7:6c:03:1b:
                    3f:12:b0:b8:69:f6:c1:dc:3f:91:60:14:0f:74:13:
                    ec:6e:34:38:46:1f:fe:50:c2:4d:b1:a4:e6:e0:7e:
                    7c:0d:fe:61:e1:35:d4:c1:ec:55:29:b9:e0:53:c7:
                    e4:58:91:67:a0:93:85:3c:a1:17:1f:94:4b:48:e6:
                    c8:57:d7:61:97:c8:e9:f7:b2:00:b8:45:c2:f0:bc:
                    55:35:11:c8:5d:fc:75:76:12:c8:fd:55:b3:62:25:
                    0a:41:a4:02:ae:63:70:fa:9c:3d:02:02:e2:ec:28:
                    a7:90:07:28:59:87:24:b6:8d:ad:33:9d:30:9c:96:
                    6e:92:8d:b8:a4:00:8b:ac:3c:16:77:78:25:0c:4a:
                    b1:18:2f:34:27:a2:83:bf:cd:9d:2c:a5:de:40:27:
                    be:10:30:03:08:9f:6d:0c:c3:7c:01:78:c1:13:64:
                    da:78:ce:ac:f4:fb:94:e6:0a:d4:06:be:5e:6a:83:
                    db:e9:d2:b0:0d:fa:90:2a:43:db:23:2c:05:5a:97:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3D:45:B8:C0:C5:32:7D:62:40:14:94:FD:FD:71:4C:89:79:F3:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c80c683-11ae-3a30-9617-794364502e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a4:a7:59:b0:b8:7f:f4:68:83:69:36:0d:e9:a8:51:e0:a5:
         3d:ea:80:4e:07:fe:d6:39:53:74:09:a3:95:9b:92:cc:60:c0:
         73:04:8f:4b:55:ae:bd:24:21:80:54:94:ee:6f:65:da:de:8e:
         ef:97:52:5a:28:b0:03:0a:d4:0f:19:19:3d:b8:c8:05:72:98:
         d2:6e:71:47:24:33:35:53:fe:05:07:80:20:23:d2:e6:1e:d6:
         1f:65:c1:b8:e0:c2:9c:ce:95:66:f3:8c:96:83:63:02:e5:fa:
         4f:58:a5:02:00:40:a4:54:4b:29:49:cf:b5:3a:19:7f:bb:7a:
         ad:e6:29:c3:de:63:8f:c0:c6:30:b9:8f:98:68:07:85:23:b5:
         64:5c:6b:c5:02:88:23:d3:39:e2:d4:3f:81:49:52:bc:cb:12:
         37:2c:74:9f:71:fe:09:86:b2:61:e2:f5:9e:8b:dd:bc:0a:1c:
         c9:a4:3c:8d:32:c4:89:0b:1a:1b:20:86:27:b7:b2:05:08:74:
         76:13:e6:a3:20:0e:12:b9:a1:00:e7:f6:10:ee:56:2c:bf:ca:
         bf:d4:77:41:10:4b:26:55:b4:3e:d5:d6:7e:92:d1:20:bf:50:
         c9:8f:8c:73:03:5b:fb:d2:48:86:d5:1f:20:96:9c:30:8f:2f:
         b9:06:c1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:28:30 2025 by rpki-client