Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa
File:                     4b517c43-ea97-343a-99fc-280d4c978941.roa (raw, json)
Hash identifier:          OjjnWlciWRCsQnpA7s7r62EsWu8Ciadmgtxz8AP4w54=
Subject key identifier:   BF:FD:C3:33:12:CB:47:B0:04:34:BD:DB:E2:EE:8D:0B:1D:3A:73:28
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858495EEED2C3998254183E20C8F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     400535
IP address blocks:        2001:470:3ee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:d2:c3:99:82:54:18:3e:20:c8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=2126b230-13d4-42e9-944b-ae3c1c814083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:67:69:d4:cc:23:db:20:99:ef:e6:b4:19:
                    54:c3:9a:c5:14:8b:be:8b:18:37:6a:f3:67:52:be:
                    12:0a:5c:ae:3e:26:c4:2f:d5:51:64:38:32:23:ab:
                    f0:9a:aa:fd:17:f7:0d:33:06:63:c0:1c:b3:98:47:
                    5c:da:99:33:5a:8f:28:33:56:3a:b6:89:b2:33:94:
                    62:de:7c:bb:cb:da:26:9a:51:a8:94:ed:cd:ec:d0:
                    66:9d:eb:50:88:01:a0:e3:da:95:e6:7b:8c:96:38:
                    e2:8e:1e:f2:ee:72:04:d1:0c:9e:d5:78:28:a2:68:
                    f3:e7:53:9f:b2:6a:d0:d5:23:9b:bd:4d:e9:d8:20:
                    e3:cd:6f:36:9a:5a:00:1a:11:1d:8d:e4:56:e4:14:
                    13:fa:33:72:c5:22:f1:f6:9e:c7:57:e3:39:22:69:
                    01:4a:db:44:8e:6a:4f:b9:5d:a0:03:83:52:a4:f5:
                    3b:a0:68:d3:fe:ab:be:bf:b9:a6:61:99:b7:5b:e7:
                    8d:75:39:b4:46:6f:fd:5c:3b:6b:a5:33:49:58:0e:
                    03:36:a7:04:be:4a:05:a3:ac:43:61:6c:5b:7d:0a:
                    9a:7d:b8:87:48:54:43:de:d2:b8:9e:fa:f4:d4:15:
                    3c:c3:a0:f4:39:aa:32:cf:e5:cc:96:a4:a7:99:41:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FD:C3:33:12:CB:47:B0:04:34:BD:DB:E2:EE:8D:0B:1D:3A:73:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6c:5a:03:84:76:f9:35:91:3d:3b:21:7b:8d:36:ae:2a:3a:
         fb:a7:de:38:5e:4c:14:a2:7a:6a:29:72:ef:95:4f:26:60:e7:
         6d:11:5c:b7:43:0a:5f:bf:9a:eb:02:3a:e2:3e:7f:4c:f1:fe:
         e4:31:89:ad:d0:25:0e:bf:45:54:4e:a1:fe:76:10:ad:96:a8:
         cd:16:05:b9:36:cc:09:9e:be:42:60:53:d9:28:1e:b1:fd:8b:
         50:40:e0:2c:c6:01:2f:7d:21:54:dc:4f:64:33:89:68:a3:8b:
         f4:70:0a:d0:c6:60:e0:8a:d3:6e:c9:f3:0a:f3:ae:90:7a:b9:
         44:76:a9:50:65:68:46:5a:36:f5:ca:77:67:79:9c:b7:e8:3a:
         d2:37:28:36:97:c6:89:8f:04:47:e9:9e:cd:d0:b7:48:2d:48:
         48:ea:a5:65:19:71:ec:40:c4:77:80:c9:19:c7:79:8a:ef:cc:
         cc:52:6f:2c:19:2e:07:18:84:90:47:99:79:54:50:47:cd:5b:
         f8:0f:f8:dc:78:48:d7:c8:95:45:b4:80:fe:54:6c:e2:b7:ea:
         01:fa:a6:6d:87:a5:e6:c6:5e:da:31:be:84:6b:ce:70:46:d7:
         4b:bf:3c:73:04:d2:4f:bf:61:e5:cb:b4:a0:b8:85:09:25:46:
         d5:05:f1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:44:01 2025 by rpki-client