Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f518475-ff22-3cfa-9205-570b8550fa4b.roa
File:                     2f518475-ff22-3cfa-9205-570b8550fa4b.roa (raw, json)
Hash identifier:          0obyGBJguWm5Cai1AsnNKMLlo8B3FP/i+H3ztEf+4oA=
Subject key identifier:   B1:89:73:E1:54:4A:32:A3:5B:2A:64:55:E4:51:E4:AC:3A:D4:34:2B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849E7BA5B6BBA9B96A371D4ED00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f518475-ff22-3cfa-9205-570b8550fa4b.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     396908
IP address blocks:        2001:470:41f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:5b:6b:ba:9b:96:a3:71:d4:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=3743cd99-ee2a-4725-b3a9-18a615237687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:0c:8b:9f:08:42:61:a6:df:ba:09:08:12:
                    d0:a8:05:8f:a4:70:01:fd:15:7b:69:e1:9f:cf:0c:
                    02:2c:8f:b8:1a:10:38:a1:aa:2f:fd:ef:96:96:36:
                    82:f2:9f:62:d6:9f:b4:17:ad:1f:01:c7:8f:ee:52:
                    ca:55:ed:00:11:27:98:87:0e:de:e8:8e:2b:dd:2f:
                    fb:c6:f3:55:b1:20:4e:74:bb:05:f7:26:a1:d5:a1:
                    05:c3:7c:9f:62:92:f2:7f:b3:18:53:92:74:4e:c1:
                    63:c0:4b:7a:6c:f0:51:25:94:5c:2f:fe:be:fb:bf:
                    4f:0a:29:39:08:26:3f:ac:33:41:f2:4c:11:ff:e0:
                    d1:00:67:c8:53:1f:7b:57:65:a7:e4:f7:c0:00:b5:
                    58:b4:38:5f:e6:35:69:dc:e2:55:a6:dd:d6:9a:d4:
                    4e:f9:8d:7f:b4:f7:2c:cc:44:59:24:4d:83:67:f0:
                    d0:5b:1a:2f:b1:8f:6a:92:97:8b:1c:ab:0d:8d:e4:
                    01:a7:c7:70:31:f8:6a:6d:25:cc:a6:af:f0:74:8e:
                    15:ed:4f:96:8d:63:ef:59:65:fe:e1:1d:a3:1b:2e:
                    20:bc:56:e1:06:8f:c6:ba:5f:98:e1:69:91:10:00:
                    ad:d9:93:4c:23:9c:05:64:c9:c4:08:43:d9:d1:ab:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:89:73:E1:54:4A:32:A3:5B:2A:64:55:E4:51:E4:AC:3A:D4:34:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f518475-ff22-3cfa-9205-570b8550fa4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:41f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:69:8f:f9:b2:8c:de:8e:24:bd:eb:29:3f:74:1e:4b:3d:7e:
         83:fd:0b:55:6a:94:b7:0c:b7:ef:2c:26:2b:a9:1e:c5:b7:d6:
         f4:16:8c:c6:68:34:e1:6d:db:d7:a1:1b:d2:f2:ff:5b:cf:d0:
         61:6f:18:f1:c1:cb:4b:30:2f:d7:88:a9:2c:0f:bd:36:6c:9a:
         ed:7e:e9:7a:6f:6a:0d:51:c4:0e:95:d9:7f:2d:e5:d9:3d:5a:
         fd:fb:26:92:45:c8:10:f6:dd:00:68:ab:d5:1d:9f:1d:e9:37:
         94:89:38:37:c3:49:8e:61:c3:2b:c2:a9:11:ba:0a:ad:f3:5a:
         a4:7c:00:59:d9:10:bf:e5:4c:ed:b6:5f:88:95:60:d5:e6:1a:
         eb:59:1b:31:23:c7:1e:85:5e:8e:a1:ea:00:00:2a:2b:fd:0f:
         aa:79:c1:6d:bf:d9:69:87:4e:f5:17:c8:d3:67:7b:b7:2e:17:
         bb:df:77:49:8b:4f:31:dd:bb:d7:ea:2d:12:70:e3:8c:bb:98:
         b2:89:c2:bb:9c:6b:33:82:ef:70:53:c2:3d:60:1c:8e:7b:d2:
         41:03:2c:be:b2:68:0d:f7:e1:f2:25:0b:c5:39:78:c6:c3:62:
         ea:d2:50:0c:87:91:63:08:94:6d:6d:f2:78:cb:ae:fe:3a:10:
         b3:ae:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:29:35 2025 by rpki-client