Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f27aef-81b2-3ced-9463-eb7550d74c38.roa
File:                     40f27aef-81b2-3ced-9463-eb7550d74c38.roa (raw, json)
Hash identifier:          ymEIvqn0aEvA/KPZr70DkLh0qNBju5kupIjeykRgXI4=
Subject key identifier:   E0:30:0C:4B:60:C0:C7:AD:FB:AF:D8:6B:51:43:75:05:D2:02:43:E6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848960B4A29852E8B20E67FC780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f27aef-81b2-3ced-9463-eb7550d74c38.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     893
IP address blocks:        2001:470:3b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:4a:29:85:2e:8b:20:e6:7f:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=83a81c14-69d8-4f76-83d3-066b0c8855e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:db:b8:de:8d:bf:44:52:28:40:a7:cc:00:
                    8e:fd:68:d3:74:d6:1a:c0:1b:14:05:8e:b4:55:3e:
                    90:35:3d:20:1f:09:24:38:4d:f4:74:42:5c:cf:71:
                    d9:2c:06:b0:dc:5b:c3:0e:99:cd:10:d7:03:f1:80:
                    48:58:2a:dc:68:7c:f2:95:dd:38:62:95:17:92:8e:
                    ea:a8:6d:4a:4a:e9:f1:bb:32:95:9c:26:d6:57:e0:
                    63:50:7b:e2:1e:0c:8f:63:72:3e:b9:53:e3:26:e0:
                    d3:b7:40:16:cf:65:81:6d:9a:9a:97:f1:a6:da:b2:
                    af:77:13:da:af:df:bc:99:25:a3:59:22:06:da:4c:
                    b3:a8:c3:6c:5c:ce:72:82:35:20:67:1e:bb:27:4b:
                    6e:20:7a:ba:a3:95:e9:a2:00:9a:2c:dc:dd:58:37:
                    a8:63:e3:b1:92:4c:d8:bd:1c:30:a5:20:c2:42:0e:
                    46:a5:cf:66:25:b0:71:22:76:74:a0:d6:e3:4f:b2:
                    c5:b7:85:d0:46:61:61:54:eb:a0:eb:06:e7:b3:97:
                    a8:98:80:4f:3a:14:a7:05:bc:f3:83:98:55:a1:25:
                    83:5f:fd:e9:8a:48:f6:4a:c5:35:ee:1a:08:60:0f:
                    c2:41:06:e3:3c:91:48:ed:ed:15:bd:27:36:09:ce:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:30:0C:4B:60:C0:C7:AD:FB:AF:D8:6B:51:43:75:05:D2:02:43:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40f27aef-81b2-3ced-9463-eb7550d74c38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:05:ed:be:30:a1:e6:ae:d2:3d:b6:64:2a:b6:c0:37:97:59:
         6f:35:9c:41:46:b4:8c:da:7e:1a:2b:f8:bb:85:85:c2:c5:b5:
         ae:76:b3:22:3e:67:3b:d1:ed:96:dd:bb:b7:be:88:b8:b1:34:
         aa:b7:0e:d7:30:7a:05:fe:3c:f7:c2:68:45:c3:7b:5c:a6:79:
         8b:5f:a2:04:07:95:59:23:59:74:48:91:0a:90:28:e0:3b:49:
         54:b7:69:7e:25:76:69:78:54:c0:d9:ee:de:29:e3:13:1c:de:
         48:c6:c5:4f:c8:87:7d:9a:ed:c7:d2:b7:4f:5b:86:84:eb:90:
         b1:c0:3e:27:70:88:d8:84:70:52:0d:7f:84:30:ef:60:0d:d8:
         c6:48:58:db:d8:8e:21:49:3a:3b:40:c9:d7:c9:e5:a5:17:c3:
         2e:f2:5c:f4:f8:51:dc:a8:13:a9:53:c0:16:59:57:0d:45:3a:
         92:33:14:96:13:9c:7f:3d:8a:07:e0:33:02:f6:3d:c2:87:78:
         ce:89:a2:22:27:4a:b2:09:d6:30:dc:6c:ae:0c:72:6d:df:eb:
         2e:b0:ca:1e:c7:d8:d7:3a:a6:21:7a:fa:bf:2d:13:23:0d:fb:
         02:47:13:3e:b4:68:3c:98:f2:6f:8b:75:99:e6:ae:8c:12:74:
         0f:af:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 16:48:46 2025 by rpki-client