Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d9b61d6-7c36-312c-a4e8-d6d14bf11434.roa
File:                     6d9b61d6-7c36-312c-a4e8-d6d14bf11434.roa (raw, json)
Hash identifier:          VuovcYm+GgvUJ031Os2+LJR/lGTvDSV6HwvfwXtwpOk=
Subject key identifier:   3A:91:F2:1B:2C:FF:46:73:B1:A1:F9:FD:AE:52:09:E3:56:B6:96:22
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926CFBC3323D01CF0C71080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d9b61d6-7c36-312c-a4e8-d6d14bf11434.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     132139
IP address blocks:        2001:470:2ce::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:cf:bc:33:23:d0:1c:f0:c7:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=86653db7-8724-49ec-9bcd-601dab3a8d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:12:a6:8a:1b:52:7a:f6:d1:9c:15:35:f7:
                    d1:85:40:4b:90:ae:ea:2c:7d:f5:64:30:f2:f9:b4:
                    85:d6:3a:1f:ef:af:58:66:18:d1:e4:68:3a:1d:d8:
                    4c:10:14:ff:f4:bc:23:ac:04:62:f0:a0:dd:58:2d:
                    17:62:72:80:06:f2:80:db:ab:06:49:4e:01:2f:12:
                    42:a8:72:ce:bf:48:a6:3a:81:db:6b:e3:c8:63:0f:
                    74:54:d4:18:1a:50:44:46:da:41:c6:9a:39:56:ed:
                    ae:c5:df:3e:1e:f9:c0:03:11:4c:53:46:2b:98:93:
                    d2:10:46:2d:c0:b4:0b:ec:19:e9:34:57:28:0e:86:
                    60:fd:c4:1d:e7:b9:b0:3a:d7:b2:d0:38:37:0a:80:
                    43:ee:ee:30:d0:f7:6c:52:4c:c5:7f:c8:2d:9e:3a:
                    a3:c9:d4:55:bd:bd:4d:11:ed:01:46:6f:39:5d:81:
                    fb:9f:b3:30:66:f1:71:79:5d:7e:46:dd:fa:75:4c:
                    b8:e3:c1:e1:e1:92:87:23:97:fa:08:40:aa:3f:84:
                    63:d4:61:71:08:b1:17:b6:66:61:bf:e4:44:df:9e:
                    63:b6:54:93:a4:44:d4:eb:a7:71:b0:ac:49:f5:4b:
                    4b:e0:e2:80:b1:b3:63:0c:19:13:db:06:36:98:04:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:91:F2:1B:2C:FF:46:73:B1:A1:F9:FD:AE:52:09:E3:56:B6:96:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d9b61d6-7c36-312c-a4e8-d6d14bf11434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2ce::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:63:1d:32:82:34:77:4f:f0:51:1f:25:57:05:b1:c0:f6:ae:
         c1:ba:cb:1f:3f:be:30:52:f4:92:08:c5:1d:db:08:92:dc:54:
         fd:5d:01:80:1b:f1:b1:57:a9:53:9c:4e:dc:34:2e:b7:4f:09:
         9e:95:16:7b:de:7b:d2:9c:a6:a4:90:ae:b4:aa:12:36:5b:0c:
         0d:d6:1d:44:58:5f:98:d4:38:4b:52:49:f9:73:1c:c6:78:b8:
         1e:f1:7b:2b:b9:23:db:0e:0b:31:c4:bd:f2:da:53:de:26:aa:
         9e:76:f0:c2:df:b4:66:a7:3c:ee:4d:59:b4:86:3d:89:17:49:
         62:db:6e:3a:af:eb:74:a9:03:08:d2:41:90:b6:5e:39:bb:d3:
         05:b8:d6:5b:42:12:d0:89:1d:d6:02:8e:4f:82:83:c2:57:2f:
         fd:a1:7a:c7:1b:14:1c:0d:09:5b:fa:bd:7a:c0:f6:85:d2:cd:
         88:af:77:b7:0b:4b:12:17:1c:95:66:fa:25:88:2a:34:b0:ad:
         a5:10:0d:71:f1:f8:be:2d:6f:75:53:b4:3c:34:ca:af:ac:ec:
         5d:e4:e2:b3:75:10:11:f3:82:15:30:2a:6d:bd:03:9f:2a:30:
         4c:cb:bb:e2:f9:2a:cd:77:b2:3a:38:4f:0b:20:c3:be:bf:e5:
         2d:c3:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:01 2025 by rpki-client