Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db27082-c618-39cb-a3a7-c8d73acd7c49.roa
File:                     2db27082-c618-39cb-a3a7-c8d73acd7c49.roa (raw, json)
Hash identifier:          cedYCRr4onAShDUm8ApGrIkay0qrcaeaI7Z6UItTyvc=
Subject key identifier:   14:A8:93:6C:26:0A:CB:74:56:C6:DB:93:4B:1B:EC:78:C8:0C:32:B3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D01CD80C40E442C5CD08F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db27082-c618-39cb-a3a7-c8d73acd7c49.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     5723
IP address blocks:        2001:470:277::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:1c:d8:0c:40:e4:42:c5:cd:08:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=50dc02b8-137f-49ac-a7a2-d98059559a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:4d:be:47:5e:d7:5a:7a:67:54:7d:64:0b:
                    97:64:ac:a7:f7:bd:30:87:aa:80:ba:88:d1:9e:84:
                    fb:ca:69:d6:8f:d6:3c:33:eb:dc:b4:7e:aa:6a:67:
                    c6:5e:f8:b6:99:94:a8:c8:8e:79:40:51:fc:76:27:
                    e5:e2:b4:e1:5f:b3:bd:42:e9:26:57:0f:b3:6a:67:
                    f3:4e:b1:d5:6a:ac:4c:d6:8a:ca:4a:2c:3a:f7:ec:
                    2c:fd:ae:d6:75:9b:c4:02:8a:5d:44:b2:f9:64:82:
                    d8:83:ba:3d:f3:5c:ca:f8:0f:b3:28:be:8f:5a:4e:
                    98:35:8d:74:d4:c3:1b:da:0c:0f:ca:10:2b:72:8a:
                    c9:70:a0:aa:e7:74:8c:30:62:17:bd:ae:99:4a:61:
                    72:12:ea:11:2f:f0:aa:21:e3:04:0c:08:06:3b:30:
                    47:21:92:48:78:c8:23:8f:55:bc:67:c2:07:08:88:
                    e6:f6:97:38:59:c8:0a:a1:0e:7f:c6:e5:2a:22:1a:
                    52:15:3a:87:a2:81:b6:be:bd:68:be:bd:17:99:a7:
                    d2:d4:65:4e:42:7f:74:93:cf:f7:c1:94:eb:81:93:
                    60:ee:7e:3a:ca:d3:45:95:6b:c2:3f:ae:c1:0e:52:
                    72:5c:93:85:fc:8b:80:ca:14:ad:2d:23:84:ad:ad:
                    2b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A8:93:6C:26:0A:CB:74:56:C6:DB:93:4B:1B:EC:78:C8:0C:32:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db27082-c618-39cb-a3a7-c8d73acd7c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:277::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:50:0a:49:39:21:a8:60:4f:b3:da:a2:a8:15:47:d9:13:6c:
         8c:5b:f6:e6:2c:d9:a3:c2:24:d1:d0:f6:3c:60:59:98:6f:ff:
         23:22:a8:70:b1:34:65:b2:a7:fa:16:58:77:ef:36:4d:8e:97:
         74:03:8e:a4:0e:f2:3d:56:31:11:6d:19:7d:f5:f5:ba:f4:b4:
         32:29:f2:62:fe:9e:01:42:cd:ab:64:8b:0e:ae:31:a2:6c:bd:
         09:ab:54:2c:64:d6:71:e2:50:f7:32:48:3b:1f:6b:60:d4:2b:
         77:30:26:98:3f:58:23:86:cd:58:a7:6f:ae:67:fd:15:bd:df:
         61:65:49:df:79:48:8d:f3:3b:4c:b0:ba:ed:80:3e:dc:86:99:
         c1:92:8d:58:7c:5a:79:11:08:68:99:ec:aa:1c:de:86:be:ed:
         9b:c9:60:58:7f:b1:7c:8d:77:b9:13:d4:de:71:70:a3:6a:af:
         84:ea:fd:14:c9:b6:e2:1b:a9:c7:9c:9d:9b:ff:c7:9d:5d:fb:
         21:ef:39:70:03:70:0e:b9:ff:00:1d:f3:3c:60:fa:19:62:a5:
         91:34:be:3e:52:1a:ca:a4:10:7e:8c:d5:b4:48:91:e1:2b:d4:
         d2:44:a4:0a:b6:fb:a8:dd:4c:9c:5c:53:79:f6:bf:eb:7f:5b:
         34:bd:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 18:32:44 2025 by rpki-client