Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31fd654c-76df-3c0c-bfac-b7328c9de61b.roa
File:                     31fd654c-76df-3c0c-bfac-b7328c9de61b.roa (raw, json)
Hash identifier:          7V8XsqMMdw6e2BGDdEaUxXflMElN7PCuR32n1eBhCKw=
Subject key identifier:   F0:CF:E5:F6:68:4C:8F:55:9F:AD:AD:F8:10:26:48:86:B5:EB:D4:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FCD037AA6CEEF4A3054E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31fd654c-76df-3c0c-bfac-b7328c9de61b.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     132139
IP address blocks:        2001:470:309::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:cd:03:7a:a6:ce:ef:4a:30:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=74a9bde8-4e88-42c0-ba25-631e0cc6185d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:4c:d9:0e:f5:5b:56:de:cc:95:09:33:d8:
                    9a:c7:c0:ed:66:8d:a0:00:69:47:60:ab:82:a2:c9:
                    be:87:e8:48:84:ba:b9:9f:e9:fe:14:da:97:ae:99:
                    b3:57:99:c4:69:c1:fb:d5:85:33:db:34:32:7c:67:
                    84:95:bd:30:81:4a:8d:f5:e6:f9:cd:33:9f:be:1d:
                    5f:6d:7b:f0:6b:8c:32:ef:13:5b:44:c3:c0:f8:ed:
                    f9:fe:10:86:dc:49:d5:f2:68:3d:a1:4d:06:4b:c4:
                    e5:be:c8:44:bc:12:cb:12:69:fb:67:04:56:68:c9:
                    a9:ed:66:34:b7:f6:ab:59:29:bc:ff:f3:4e:68:03:
                    be:b1:fc:47:eb:8f:01:87:dc:6e:19:09:d5:8f:30:
                    f5:85:86:78:0a:18:28:03:1a:23:ea:24:09:cb:86:
                    46:69:72:62:7b:1e:18:33:09:f2:f4:90:bc:47:95:
                    93:dc:bd:88:a7:81:29:79:ff:b7:74:d1:cc:08:96:
                    69:e7:49:a2:c6:c8:b4:a7:64:80:24:b2:0e:79:78:
                    c1:8b:f3:b6:40:66:00:9b:b8:4a:92:48:f2:82:8c:
                    9a:37:50:73:c1:55:70:ee:be:5c:68:ca:68:14:1d:
                    0c:8e:c8:d2:3c:4f:b2:a7:d1:bd:26:af:16:5b:dd:
                    df:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CF:E5:F6:68:4C:8F:55:9F:AD:AD:F8:10:26:48:86:B5:EB:D4:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31fd654c-76df-3c0c-bfac-b7328c9de61b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:309::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:02:28:40:fb:d4:b2:e4:38:ab:8f:c6:86:9a:b1:6d:fb:64:
         10:a8:eb:54:77:28:51:3e:dd:58:30:84:c9:a7:10:ff:f5:97:
         b6:96:c2:ae:b0:20:ab:8e:62:57:ac:22:a5:9a:f6:10:ac:6d:
         1b:0e:32:9d:6d:0d:4f:53:37:df:cd:a2:d1:c8:06:8f:f2:ee:
         81:18:1f:b7:dd:08:3b:c9:b0:06:92:32:d0:50:d0:d1:7b:c7:
         9d:cc:0d:39:10:f3:b7:27:59:0a:f6:4f:e6:52:25:83:dd:26:
         ee:a7:79:e1:fc:61:f1:06:0a:a5:95:b2:be:4e:01:ed:23:b6:
         d9:75:d3:ab:f3:34:cf:f2:52:4c:bb:3c:4d:aa:c0:5c:09:d3:
         09:ad:37:64:b6:b5:86:ca:5c:c2:a4:ce:97:8f:5c:de:9c:98:
         68:cf:c5:44:c3:e3:3c:02:b2:70:85:e4:aa:bd:3d:80:87:74:
         23:ea:8f:57:b9:8e:5b:49:13:32:c8:f3:86:46:65:c2:bb:52:
         ca:71:20:e3:da:df:67:18:80:15:28:c9:60:80:70:da:76:00:
         49:27:c0:8b:47:20:ec:5a:7b:0d:88:b3:0c:2e:a1:5a:f7:f7:
         2a:a0:19:b1:2f:0f:b7:80:c5:b6:bb:cc:6b:23:d8:2b:df:5d:
         52:d1:21:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:13:31 2025 by rpki-client