Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/248ff971-d95c-371c-9fb0-932735b3d5a7.roa
File:                     248ff971-d95c-371c-9fb0-932735b3d5a7.roa (raw, json)
Hash identifier:          eWnxI/SyEufK8IECKs3CJEmsW5K11z9bS1BjZ4XHkaE=
Subject key identifier:   E7:25:5A:F1:E5:E3:B7:E7:55:04:BC:1E:65:5F:1D:8A:D9:DD:D4:99
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FC25746F706D14A3CC1B8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/248ff971-d95c-371c-9fb0-932735b3d5a7.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     25668
IP address blocks:        2001:470:1bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:c2:57:46:f7:06:d1:4a:3c:c1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=91598e90-63c0-4261-b72c-9778069f20f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:59:95:fa:99:91:0a:83:65:1f:56:bc:7f:
                    fe:0e:b5:ba:44:4b:1f:dd:37:e9:8a:5a:e3:23:f0:
                    8f:85:e7:e4:1f:28:94:b3:5b:22:a2:99:69:c1:4f:
                    43:ac:ef:1e:61:d2:35:2b:a5:93:00:54:96:53:12:
                    94:57:68:c3:97:39:69:71:f2:7e:78:28:d0:30:79:
                    5e:a5:9f:07:72:fd:73:9c:b2:ae:30:c0:f0:f4:cc:
                    f2:6d:fd:94:46:91:ff:c4:9d:f0:2d:34:fb:6b:08:
                    c6:f2:27:cb:ea:ac:5a:2a:8d:9e:4a:20:ce:c5:14:
                    fa:b2:a7:64:c1:23:56:c8:15:dd:16:e0:c2:75:58:
                    b1:78:3f:be:5c:bd:79:92:2a:af:45:86:98:91:07:
                    cd:8c:03:35:4d:8d:20:a0:2b:b0:73:4a:37:a7:7b:
                    5f:5e:6b:18:a5:bf:0c:64:39:1c:06:5d:71:b3:b4:
                    48:4d:42:7f:ae:0e:ed:3b:d7:bc:7b:7e:ff:f7:75:
                    5b:9b:0a:04:45:bb:c9:e3:ad:15:a1:c2:75:0f:bb:
                    2c:74:f0:0b:0a:14:a3:af:68:47:5c:17:fc:0a:88:
                    be:02:ff:b7:19:49:97:4c:dd:30:5d:d9:15:d7:85:
                    63:55:7a:31:ae:58:03:4d:f9:62:49:5c:42:e2:99:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:25:5A:F1:E5:E3:B7:E7:55:04:BC:1E:65:5F:1D:8A:D9:DD:D4:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/248ff971-d95c-371c-9fb0-932735b3d5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:9e:ef:91:ad:d4:28:c3:48:5f:28:98:fb:f9:7a:5a:f5:63:
         da:e4:8a:24:24:cc:74:c7:d6:21:0a:55:ec:27:3f:c6:da:db:
         75:06:8d:c6:ef:e7:03:7b:14:18:cb:84:2e:db:36:b1:1d:85:
         31:84:a6:d1:1a:9e:b7:26:d1:ee:63:61:04:1b:62:88:a7:10:
         6c:fb:77:01:2d:f7:00:13:83:ce:91:16:01:d5:34:54:65:b5:
         55:fb:01:14:34:41:36:9f:0e:a5:45:70:9a:70:85:83:7e:9e:
         d1:09:eb:e9:d3:17:f9:08:7e:bc:68:a2:22:da:50:62:53:a4:
         d9:87:09:ff:31:4d:23:11:d7:72:9e:6d:92:2d:89:e5:4c:72:
         6a:95:b4:fe:0d:b0:b2:76:93:ed:02:db:c8:43:4d:64:1b:46:
         8b:e6:e0:38:f8:da:ec:3d:fd:5c:38:b6:23:0e:d5:53:c7:8a:
         94:d5:82:a1:5e:d5:06:c0:2e:fd:5e:0d:6e:69:2c:17:b0:7a:
         be:3f:27:c4:4c:78:02:df:9d:0e:83:38:46:9e:9d:da:11:2e:
         d9:aa:33:59:50:53:8f:7c:24:5f:75:08:20:c7:ec:47:af:48:
         c4:5a:83:e7:50:16:c8:f5:4f:82:52:4c:c6:a9:ff:1a:c5:e6:
         49:9f:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:06:58 2025 by rpki-client