Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/248ff971-d95c-371c-9fb0-932735b3d5a7.roa
File:                     248ff971-d95c-371c-9fb0-932735b3d5a7.roa (raw, json)
Hash identifier:          /rKOnQCOq0IHWjDMaEWYj0DVn4f3QhXwiEXSYrLzyto=
Subject key identifier:   38:27:F2:EB:EC:E9:D2:CD:27:F2:17:3D:B9:E6:DE:A7:D3:2E:BA:C5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926C67C48C5E4BAE2FFA940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/248ff971-d95c-371c-9fb0-932735b3d5a7.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     25668
IP address blocks:        2001:470:1bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:c6:7c:48:c5:e4:ba:e2:ff:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=ae3f132a-fa2d-4cd5-a1de-fb8b10be0aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:7f:76:f4:e3:c4:fa:7a:d3:ba:c1:33:4f:
                    d6:e3:6b:17:e5:f9:e8:f2:9d:a5:8a:e6:3d:1f:d2:
                    49:5d:b7:a5:f9:85:f0:a2:8d:67:2a:7d:ac:48:70:
                    e8:9f:09:db:7b:40:85:27:96:cf:c6:3e:56:c0:9a:
                    88:d4:40:d3:23:f9:4b:12:f2:eb:f1:68:34:53:f0:
                    f5:17:57:69:45:6f:c3:4c:ea:6a:c4:31:99:39:e8:
                    d4:4e:01:c9:3f:ad:3f:8d:2e:53:3a:d4:11:30:57:
                    5c:35:c9:21:90:da:f8:71:f9:65:80:ef:27:7b:b0:
                    b1:95:6b:88:18:7f:14:96:80:18:53:6c:cb:d3:c1:
                    a0:09:24:c7:8e:25:90:61:a1:90:70:c2:6f:c6:ab:
                    61:31:6c:fc:1c:20:98:74:d7:9d:db:79:73:36:c3:
                    7f:52:16:fb:ff:08:60:f8:e4:de:69:97:9a:27:44:
                    23:3f:cd:c5:59:10:e2:7e:65:09:27:5d:53:9d:f1:
                    b8:2e:cf:d6:37:43:68:a2:fd:66:bf:93:e5:88:2e:
                    95:17:bb:20:a2:ef:56:e0:b4:84:30:e5:9e:dd:3d:
                    a7:45:1d:1a:ba:ea:77:93:34:a2:5b:cc:0b:5c:a6:
                    d7:25:80:10:16:1e:ff:95:c7:38:62:ed:6d:ff:40:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:27:F2:EB:EC:E9:D2:CD:27:F2:17:3D:B9:E6:DE:A7:D3:2E:BA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/248ff971-d95c-371c-9fb0-932735b3d5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3b:fd:e6:51:c4:d8:f7:f1:79:4b:17:69:22:e9:f8:ce:28:
         93:35:a8:82:06:7e:9f:8b:21:0e:07:87:90:69:a0:24:83:29:
         e0:be:fe:a9:8c:2f:a8:8c:52:86:c0:6a:cc:9f:3b:dc:19:c1:
         53:70:e2:c3:b8:6f:60:09:c1:8a:4d:5d:ba:5d:63:eb:a2:fe:
         d7:ee:fc:dd:9e:d0:cf:1c:d8:ed:74:80:25:16:e7:2a:8f:3e:
         a1:37:6b:2f:2e:f2:6a:4b:f0:fe:0d:cd:37:e2:7c:ef:10:bf:
         99:43:aa:d2:24:02:61:60:24:d9:37:24:3e:8d:3d:de:c2:c4:
         32:b6:74:70:f9:e3:1b:a6:a5:0f:e2:fe:26:e4:ac:86:65:61:
         92:27:ec:cc:d9:6c:08:5f:f1:59:70:93:18:4b:8b:07:41:cf:
         85:04:b9:40:e1:83:2a:b8:99:3f:1d:f2:34:34:9c:3b:91:f9:
         ed:b3:33:33:6a:1b:0d:de:7e:40:f6:85:a5:a9:b8:93:dd:d4:
         3e:2f:9d:d9:e0:6c:9e:45:46:12:70:79:1e:ee:83:84:de:a7:
         45:8d:d1:f2:41:15:93:00:2e:7e:c1:d9:c8:8e:03:93:46:59:
         92:05:84:6c:b0:8a:ef:cf:9c:96:e7:ef:ef:62:56:e8:af:bb:
         11:bf:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:43:19 2025 by rpki-client