Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa
File:                     2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa (raw, json)
Hash identifier:          iAKGFRe3RO3HSAzJHoBTcG2GssnXtFydpqlqdDy5hOI=
Subject key identifier:   E5:9E:C3:A2:04:A3:C2:8D:44:21:2B:4D:26:E6:DD:D6:FB:53:BB:CF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584832FE8F04EB190F6236F76700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa
Signing time:             Sat 14 Dec 2024 02:30:13 +0000
ROA not before:           Sat 14 Dec 2024 02:30:13 +0000
ROA not after:            Fri 14 Mar 2025 01:30:13 +0000
asID:                     134677
IP address blocks:        2001:470:e3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:fe:8f:04:eb:19:0f:62:36:f7:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 14 02:30:13 2024 GMT
            Not After : Mar 14 01:30:13 2025 GMT
        Subject: CN=fbfe2e1a-ca63-4d83-897c-36dd21496eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bd:6a:f0:62:0e:45:f0:b9:ec:d7:24:83:10:
                    d5:ba:26:d5:25:1f:c7:4b:ad:c1:2a:cd:10:a5:51:
                    9f:5a:7c:1d:bc:ad:5d:4a:d3:b0:c6:6f:0e:07:ff:
                    57:60:85:b6:d4:fd:df:11:7f:55:95:6a:aa:93:a4:
                    d9:52:b1:c7:7f:08:ef:7b:1c:99:0a:da:ed:89:01:
                    d4:b5:bc:23:69:a2:d5:55:1c:2a:da:f6:93:d8:1c:
                    1c:c3:f7:78:65:12:dd:d4:73:7f:d2:cc:53:55:61:
                    d8:39:e1:ca:61:b2:2b:f0:b8:7c:97:3c:5c:d9:61:
                    87:64:3b:6d:ec:26:7e:ee:7e:bd:2c:54:ed:83:21:
                    56:b2:6c:c6:7f:3e:b8:81:e9:be:b9:e8:b3:1c:52:
                    40:0e:00:bf:69:bb:6c:30:39:c1:c8:b3:a5:8a:29:
                    0a:6d:24:b8:75:4c:ad:26:a8:32:c3:e7:66:bf:c1:
                    ed:06:af:37:63:ea:5a:cf:70:fb:94:5c:e2:66:ff:
                    34:15:8f:20:5b:ad:8f:a2:ae:d0:f1:9a:56:dd:be:
                    fa:f6:a6:4c:e6:15:cf:a9:b7:02:30:ab:c3:dc:c5:
                    e5:27:48:35:7a:ba:2f:cd:67:67:36:03:f6:0f:10:
                    62:3b:c5:7e:46:78:10:ea:83:01:f6:77:1c:52:bd:
                    f7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9E:C3:A2:04:A3:C2:8D:44:21:2B:4D:26:E6:DD:D6:FB:53:BB:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2b070788-cd8e-35a0-b8b0-5378bdd2f23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:fe:6b:0e:d1:70:c1:50:0e:44:55:7e:24:8d:9d:cd:cd:b8:
         34:55:81:ea:5b:87:d5:45:1a:3c:07:60:b6:67:1f:33:23:36:
         12:d1:f2:44:d5:6f:bc:c7:21:af:3b:77:28:1d:bd:39:12:4f:
         72:0f:54:7e:fd:c5:a4:68:50:64:d7:1b:41:3a:12:da:d4:c4:
         37:0e:71:8f:1b:95:96:4b:fa:22:a3:3e:04:9c:36:2f:6d:03:
         18:37:ca:6b:ad:9e:fe:c3:56:c8:53:c7:e8:9f:9c:d6:1f:22:
         4d:ae:4f:26:f7:a6:b0:6f:e4:21:6e:3e:06:a4:c3:ed:f9:d2:
         f4:89:da:96:cb:52:12:5e:fc:3d:94:45:ae:89:b7:51:7a:69:
         e3:fe:98:2b:b4:b5:99:a9:29:01:12:d9:6c:ea:7d:f8:f0:49:
         79:92:ff:39:4f:3f:e9:f5:92:b2:09:ea:ac:ab:98:17:1e:48:
         1f:6b:5d:d6:46:ec:70:60:4f:2a:c9:18:3b:fa:60:2c:46:c4:
         60:78:bd:b4:1d:0b:2b:6b:d9:1b:ed:f0:db:cc:2b:a2:24:01:
         24:e7:c1:bc:4e:b6:63:99:15:d4:bf:f9:f7:48:7e:b6:81:fc:
         32:6f:70:30:c9:27:f4:b2:61:ee:9a:72:dc:1e:a9:16:24:35:
         f7:fe:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:51:46 2025 by rpki-client