Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/475f6de6-45d9-38fc-b0bc-fc05eae2d74b.roa
File:                     475f6de6-45d9-38fc-b0bc-fc05eae2d74b.roa (raw, json)
Hash identifier:          wbTHofPNlLQNPIF+iNUIloTyD3Agga721Vv1ocYl/Tw=
Subject key identifier:   BE:37:0D:C4:03:00:00:D6:D3:07:D8:5C:4A:24:6D:C2:EE:12:E7:FC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FC9462A8077FE08A1E600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/475f6de6-45d9-38fc-b0bc-fc05eae2d74b.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     49984
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:c9:46:2a:80:77:fe:08:a1:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=1286e7e2-2730-40ff-b020-7c6006974ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f1:0b:89:9e:1b:69:86:e3:e3:8c:64:cd:b1:
                    c3:2c:77:c8:d1:b0:54:37:58:c2:75:50:b4:b6:a6:
                    c2:96:84:c1:9a:1b:22:3f:3b:e7:b8:86:93:38:fe:
                    7f:92:f0:10:99:2a:6f:dd:64:fb:f5:73:f6:2b:ae:
                    83:18:50:ac:16:dc:10:83:0b:b6:76:e0:2b:bf:9d:
                    4b:ef:38:81:2f:50:64:e4:c0:04:f7:d0:80:8a:39:
                    d8:3d:ba:0c:a6:46:67:5f:fc:2f:39:4d:09:09:02:
                    c3:ed:f4:35:04:54:1f:20:ca:02:83:e0:24:7c:de:
                    b4:28:3c:07:95:dd:49:a5:dd:e2:ed:fe:58:9b:b7:
                    38:0f:aa:9b:e7:23:a5:35:2f:fa:7b:37:f5:5e:92:
                    d4:ed:bf:b5:6d:59:f5:e4:84:3b:c5:76:1a:e8:97:
                    ea:fa:a3:74:c4:4b:f0:49:af:7f:88:9d:35:e8:1a:
                    c5:7a:49:d9:c6:0f:63:08:8f:8c:72:9f:15:d6:db:
                    85:3c:f9:4d:6d:c8:10:ab:67:c1:04:5a:e8:a6:cb:
                    5b:14:32:84:90:41:49:27:ec:55:7a:88:36:7a:6c:
                    c0:4d:6f:2c:e9:a1:a4:25:50:49:2f:ef:90:e9:32:
                    ee:00:33:d6:25:84:a0:33:2c:72:80:2f:5a:8c:0f:
                    26:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:37:0D:C4:03:00:00:D6:D3:07:D8:5C:4A:24:6D:C2:EE:12:E7:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/475f6de6-45d9-38fc-b0bc-fc05eae2d74b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:71:62:f6:f2:c9:36:6c:2e:2c:25:e4:d5:bf:75:36:c5:f0:
         f6:96:4f:17:52:32:a2:de:1b:e8:eb:a6:ac:df:e6:7d:b5:bc:
         ef:0f:a9:5e:f1:16:95:cd:4c:7b:7f:73:b2:01:99:15:0c:67:
         a4:9c:9c:f1:9d:c7:f6:40:a3:72:ec:9a:32:5d:ed:23:37:6f:
         ce:92:e7:8a:49:9f:a5:40:38:e7:a5:62:3d:df:91:a8:ba:b7:
         9d:d3:96:a1:ed:fb:31:fd:5d:5a:32:a1:da:4e:f9:c2:6b:c4:
         7c:d8:8c:94:53:fd:5a:ef:8a:73:42:7b:00:21:58:f7:3c:6a:
         f2:fc:9b:90:ae:25:74:7a:ec:03:9c:01:e5:44:6a:3a:f7:1f:
         a4:17:90:f9:0b:74:9e:3d:17:59:d0:ac:92:4d:9b:44:fb:71:
         b0:4c:e0:0a:04:a1:f4:17:ef:b6:a8:e7:c9:83:42:d0:76:bf:
         68:15:b1:3c:0c:43:de:04:78:1d:fb:73:8a:5e:8c:56:1e:a2:
         5f:67:a9:73:91:8f:dc:08:bd:67:83:76:18:63:6e:a8:06:29:
         e9:46:ef:bf:4a:9b:39:bb:e5:3e:00:1c:fe:30:7f:7c:bf:dc:
         ed:72:63:43:c4:70:a7:66:f5:d4:a0:1c:25:3b:d7:d5:78:45:
         06:77:4b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:32:32 2025 by rpki-client