Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e39d175-b539-3151-8b49-cda017c92f62.roa
File:                     4e39d175-b539-3151-8b49-cda017c92f62.roa (raw, json)
Hash identifier:          fit4cKVyy4tWtLwXhdrF/AiKPoB2yhWJoZ5/j0T94Fc=
Subject key identifier:   30:BC:6E:85:30:EB:E8:B4:39:68:68:6F:50:75:72:69:5C:DD:7F:69
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE38A5707085E02620270
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e39d175-b539-3151-8b49-cda017c92f62.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     199518
IP address blocks:        2001:470:232::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e3:8a:57:07:08:5e:02:62:02:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=f2f41b2e-1f1d-497f-bc0d-cc8103a0cbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:7b:cb:ff:c7:77:5f:c2:87:7b:f2:9e:ff:
                    ac:86:fa:fb:da:ce:ba:e1:a1:63:8d:aa:87:f6:81:
                    11:78:e2:00:2b:c4:be:0b:72:49:f3:a6:d3:62:eb:
                    73:bc:4b:9c:d0:c4:42:91:eb:46:fc:2e:88:11:8a:
                    0e:c8:c0:f6:68:d3:24:89:20:52:17:48:a2:e4:3e:
                    1d:23:da:4e:a2:e6:e7:61:46:8f:f0:3e:e8:21:a3:
                    fc:53:a8:47:d2:d9:bb:ac:92:da:81:93:b4:e8:ad:
                    fb:9f:74:7b:71:fd:f7:5f:b6:de:b1:07:93:39:7e:
                    fe:3b:cc:56:fa:e1:e4:7f:00:0a:00:b3:aa:23:1c:
                    5a:3c:f7:8d:d1:bd:06:fc:e0:5d:37:e1:5b:b8:70:
                    23:eb:ed:7e:3a:20:2c:b3:04:b0:7f:65:88:f7:97:
                    bd:20:21:1a:89:af:3a:bb:2e:71:25:f3:f6:da:7b:
                    7f:4c:c9:79:27:88:32:b7:bb:23:cd:ba:82:3b:8b:
                    44:25:e8:fc:54:85:69:d1:c1:87:e9:a5:09:ee:05:
                    5b:e0:08:48:1b:94:be:eb:13:a4:c8:68:9f:de:82:
                    50:a3:0d:7b:dd:76:50:8d:0d:23:eb:4d:2b:61:32:
                    e2:59:23:28:70:e5:98:de:74:ae:a6:8b:1b:e3:de:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BC:6E:85:30:EB:E8:B4:39:68:68:6F:50:75:72:69:5C:DD:7F:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e39d175-b539-3151-8b49-cda017c92f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:232::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:24:e7:ed:a0:15:9e:cc:14:f1:a1:aa:4a:03:78:4a:c0:a3:
         98:55:bb:78:cd:88:bb:0b:fe:44:29:58:01:b4:10:02:34:c7:
         26:f0:cf:48:70:7c:19:5e:71:03:7c:9a:48:e4:26:47:aa:ec:
         0c:05:6e:f1:5a:e3:5a:50:50:be:5e:22:1e:70:b5:3b:2b:78:
         23:7e:35:8c:c9:f9:75:5d:ee:46:4b:fd:aa:86:d5:09:a2:bf:
         1e:e6:f5:36:3d:0e:e5:13:87:b5:38:a3:68:9f:65:81:4a:13:
         ff:7c:d6:2c:a6:4e:13:4d:b1:2f:85:bf:3f:f8:cb:7c:41:91:
         e1:4f:ff:7a:e0:4d:43:2f:dc:9c:2a:5f:f3:d2:41:8c:62:a8:
         ed:9b:e5:96:0a:ac:b9:71:84:6f:a3:17:92:5d:da:60:e3:b0:
         ad:99:cc:b4:38:76:72:9d:ac:d6:c6:6b:16:56:a0:d2:db:af:
         62:17:d5:1c:65:60:a8:91:05:80:88:21:64:10:a1:49:39:ff:
         8d:70:be:ad:99:37:05:98:ea:ed:b4:22:bf:ac:de:ac:8f:5c:
         35:81:d4:50:ca:d3:80:2c:fc:57:06:c1:fc:41:83:c1:d8:fe:
         52:3f:db:e5:fa:6d:2f:ba:e0:a7:1f:42:49:68:58:e1:d3:31:
         7e:e4:ac:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:41 2025 by rpki-client