Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63a0e981-8b68-34f7-a310-5a64803821f1.roa
File:                     63a0e981-8b68-34f7-a310-5a64803821f1.roa (raw, json)
Hash identifier:          l/b72ZY/ewOYaO0/SKutC6TkLjWo3e5hAlelfw+Ocxk=
Subject key identifier:   EB:5C:5F:6B:68:D3:48:EE:DD:AA:3B:5B:AE:82:84:7C:7B:D2:1B:69
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE77CD0E734DAD2E9A8B0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63a0e981-8b68-34f7-a310-5a64803821f1.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     47702
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e7:7c:d0:e7:34:da:d2:e9:a8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=0fc0c26e-7bc2-42fc-a36a-f2dc15916d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:74:db:fd:9b:53:45:d5:a0:2a:5c:eb:d3:15:
                    3d:5a:75:34:9b:b3:13:c6:50:6f:4b:36:82:fa:27:
                    99:8a:81:80:94:13:9d:ac:ed:68:aa:00:cb:f6:98:
                    52:75:e3:67:77:45:0e:13:ab:3d:17:f2:4c:a5:ad:
                    50:72:b4:de:41:64:79:fc:12:77:4f:a1:93:5d:3c:
                    c6:1c:57:b8:dc:6a:eb:22:38:7f:6c:07:aa:90:18:
                    8d:a9:ea:58:5b:95:dd:ab:f1:dd:b5:4e:c0:c5:49:
                    0d:68:c4:54:61:98:da:14:c5:aa:64:b6:64:14:21:
                    86:d7:80:ad:b9:47:29:1d:2b:4b:87:62:59:d8:c7:
                    a3:8e:ef:8e:83:5a:02:e6:21:98:2e:37:da:45:c9:
                    fc:5b:d6:c2:de:67:e2:58:46:17:07:52:a4:5c:ec:
                    5c:da:4d:43:ad:83:19:09:f5:c4:2c:97:c8:28:4e:
                    93:41:8e:73:2a:71:6c:f5:c7:b7:c9:45:0a:1e:a2:
                    13:74:97:8d:3d:79:70:d6:18:02:2f:7b:f5:84:a9:
                    62:6f:bb:a2:d1:ff:1c:e4:a0:c3:82:91:d2:0f:cc:
                    c5:fd:f3:02:d0:51:11:66:75:78:79:ea:21:12:03:
                    d5:91:a3:72:bb:8b:bc:43:3b:7e:ad:1a:c9:16:04:
                    86:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5C:5F:6B:68:D3:48:EE:DD:AA:3B:5B:AE:82:84:7C:7B:D2:1B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63a0e981-8b68-34f7-a310-5a64803821f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5b:ad:70:94:3b:19:d4:b2:1c:49:70:03:3d:e5:e4:20:10:
         d5:64:df:0b:71:21:d9:5f:0d:b2:c3:5f:aa:64:6d:75:fe:a4:
         3d:5e:c9:99:2d:ef:1a:67:4a:0e:33:80:8d:b4:2b:cb:8c:d4:
         6c:75:96:98:e0:96:ad:53:2c:30:b5:64:4e:4b:73:83:44:80:
         16:e1:06:fa:56:f6:a7:3c:60:15:ce:45:5f:84:2b:d5:a6:27:
         f0:21:f5:7f:89:de:56:c0:0c:81:e1:93:83:8c:0f:b9:cb:19:
         27:25:86:59:ca:2b:c8:8b:c5:69:87:a3:70:e1:da:01:7c:af:
         3f:d0:80:11:ba:93:c0:1f:b7:50:38:71:d9:4a:64:60:39:eb:
         28:f8:a1:8e:35:98:26:4a:39:c4:08:2c:05:4a:7b:d9:6e:9e:
         ce:20:91:3b:46:83:ef:cd:5c:68:5e:47:58:9e:0a:b7:ac:e9:
         ca:ed:a2:13:57:ea:07:75:88:06:1c:8a:08:7c:6f:cb:ab:f4:
         7c:4c:b4:a2:30:72:25:69:91:6b:39:de:c9:ee:93:83:a6:da:
         11:81:f6:09:50:3f:90:42:7b:25:c0:97:e5:52:e2:ad:f8:2c:
         4d:e9:65:8d:bd:36:75:52:12:86:f7:18:3b:38:5a:0b:c6:f3:
         d9:0d:3c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:34:24 2025 by rpki-client