Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6bab9d46-da69-3ba6-97a3-fd19a4844b87.roa
File:                     6bab9d46-da69-3ba6-97a3-fd19a4844b87.roa (raw, json)
Hash identifier:          C+jcgya2f9n+L2D8XIcviENdrjYipMs2VgXvnewW0FA=
Subject key identifier:   4E:0D:A7:D2:09:69:B2:4D:3D:D4:2C:9E:FE:30:98:BE:D3:60:11:F3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926DAC40489080F717C2600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6bab9d46-da69-3ba6-97a3-fd19a4844b87.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     19844
IP address blocks:        2001:470:12d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:da:c4:04:89:08:0f:71:7c:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=5807a61f-57fb-4cd3-bfef-5a4298c908a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1c:4c:36:ac:99:cc:4a:1a:27:97:e3:50:b0:
                    fb:b4:a3:4a:17:6e:f6:39:1c:90:7b:ae:fa:2e:ee:
                    cc:c5:95:62:ac:a4:6a:fb:8f:16:17:cc:ca:1f:c2:
                    35:dc:34:22:a5:99:e7:b9:dc:70:1e:a9:71:22:79:
                    20:57:1d:ce:34:44:38:98:d4:bc:86:fc:28:89:05:
                    2c:d6:06:76:d4:25:e5:d8:6b:08:85:ab:94:0b:ff:
                    b3:07:fc:ac:64:49:54:9c:38:64:46:80:60:c5:43:
                    33:07:8a:d9:5e:91:f6:0e:d3:93:42:9e:13:d1:23:
                    ed:8f:d6:14:b6:e0:da:d4:95:48:f4:07:18:e4:4b:
                    b8:b0:bd:99:7b:9e:1d:60:78:10:42:c7:bc:30:1d:
                    9e:b2:72:a0:25:92:9e:b7:d6:e1:90:17:0e:c0:ba:
                    88:d0:d0:3f:a6:d8:51:7e:d2:05:ef:26:76:47:95:
                    99:69:cc:32:03:7c:98:c3:7a:a0:0b:c1:9e:76:2c:
                    02:de:d5:ef:6c:f8:b0:8c:85:30:13:a9:e8:db:d2:
                    e2:7a:1d:03:07:e7:e1:42:88:c0:80:8d:1d:a8:00:
                    6e:34:88:12:fd:bd:67:31:58:bb:23:08:55:07:ed:
                    fe:9d:fd:1a:ea:7c:8e:88:71:78:e4:b3:de:cd:ef:
                    6e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0D:A7:D2:09:69:B2:4D:3D:D4:2C:9E:FE:30:98:BE:D3:60:11:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6bab9d46-da69-3ba6-97a3-fd19a4844b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:12d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:83:7a:e2:ed:7e:cc:01:ac:68:99:31:6d:1e:22:ea:3e:5a:
         4b:36:40:0d:52:d2:41:25:4f:31:15:81:8f:2d:5b:e3:77:57:
         8f:90:b7:57:8b:2c:1c:8c:8e:3f:2d:8f:6f:f7:2d:65:64:cb:
         a9:7b:ee:b3:d8:a0:cd:20:ec:3f:de:00:ee:47:96:73:9f:55:
         0a:93:aa:f9:b0:64:a0:09:90:ea:15:06:44:b6:15:39:3e:28:
         ef:f4:54:42:a5:71:19:0d:7f:ff:20:d1:eb:99:ab:d4:04:78:
         7f:40:48:b4:fa:63:d5:a5:09:a7:48:0b:ab:08:5f:7d:8b:86:
         75:82:0f:94:f4:0b:09:ac:73:1f:49:e6:95:fb:aa:8f:6b:6c:
         26:16:f3:75:67:09:89:20:e3:e4:71:40:8c:88:fb:2d:4f:86:
         9b:bf:bd:d1:12:1a:f2:43:1b:cf:44:0e:42:db:b9:1c:e1:2d:
         11:df:d8:11:a9:81:b6:06:8a:29:c5:58:b7:d8:af:b5:50:7c:
         fe:f5:fb:88:1c:6d:01:6c:ce:7e:e7:26:28:0e:c2:b4:a2:62:
         2a:0e:0d:c2:f5:ce:76:e9:de:bc:be:d7:8f:16:0d:6f:58:e6:
         d7:f2:74:aa:ab:a0:d1:60:77:6f:88:c3:e4:07:f2:b0:91:33:
         f7:80:b8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:08 2025 by rpki-client