Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/708ffe25-fcca-3eca-bf27-abef1e697ed6.roa
File:                     708ffe25-fcca-3eca-bf27-abef1e697ed6.roa (raw, json)
Hash identifier:          32esbJ+9u++ggDAdy6ANvtY2Csru3C3eYmRCQ8KVsjY=
Subject key identifier:   44:75:86:04:F1:C0:5E:C4:BA:79:EF:3C:AF:90:2F:B8:EB:F5:6C:4F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848E7011F9A85A3C872606A3480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/708ffe25-fcca-3eca-bf27-abef1e697ed6.roa
Signing time:             Sun 16 Feb 2025 14:00:52 +0000
ROA not before:           Sun 16 Feb 2025 14:00:52 +0000
ROA not after:            Sat 17 May 2025 13:00:52 +0000
asID:                     12025
IP address blocks:        2001:470:3d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e7:01:1f:9a:85:a3:c8:72:60:6a:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 16 14:00:52 2025 GMT
            Not After : May 17 13:00:52 2025 GMT
        Subject: CN=b8846a39-1ef3-48aa-a0c8-25033f941e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:b3:da:66:9b:43:ff:7b:85:26:47:68:29:
                    e4:0c:a4:91:26:f0:c3:5a:2f:e9:a0:35:3b:2a:bd:
                    f2:57:2f:ef:f3:b7:17:ae:49:ef:21:7e:d6:43:c2:
                    8b:bb:95:0b:15:81:26:8c:de:1a:5e:d2:39:71:51:
                    43:3b:25:7f:43:47:a1:41:29:fd:bc:10:cd:40:64:
                    aa:29:20:e2:17:63:40:ea:51:f0:77:01:53:53:65:
                    7a:c2:21:33:b8:0a:5b:29:c0:b3:65:b4:7d:96:6d:
                    52:0a:54:49:6c:b7:10:a2:00:fa:87:d0:6b:d3:1e:
                    e1:31:33:40:ed:ce:bc:6b:6e:9a:26:40:16:70:92:
                    1d:57:6f:d4:42:b1:fb:42:55:66:05:ee:f7:69:6e:
                    7c:10:d6:ed:38:c6:ca:98:b8:9e:5a:fb:71:f0:11:
                    00:bd:a9:bc:6d:e7:fd:ca:4a:34:b8:cf:e3:bc:d3:
                    5b:62:08:de:0e:47:6b:bf:78:11:01:49:aa:bd:f7:
                    df:b2:9d:f8:c9:81:73:40:96:2e:8d:79:ae:8d:a7:
                    6b:e9:de:ec:87:39:7d:8d:a7:bc:58:d8:8e:d6:7a:
                    5e:04:36:3d:61:ae:2c:9a:07:4f:07:03:07:47:73:
                    53:0a:a0:da:03:2d:2c:4b:30:ef:88:77:5b:43:7c:
                    d5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:75:86:04:F1:C0:5E:C4:BA:79:EF:3C:AF:90:2F:B8:EB:F5:6C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/708ffe25-fcca-3eca-bf27-abef1e697ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:da:f9:d5:76:5f:4d:66:a2:c8:a2:5d:26:c9:0f:1e:a0:b0:
         04:1b:92:98:61:5d:9b:39:17:cc:54:b7:4b:f3:8c:32:75:50:
         6f:df:58:09:da:5f:2e:56:cf:8f:c5:5e:28:6d:c5:f6:d7:01:
         32:47:6a:2e:87:b0:65:c5:67:6f:f8:3e:b9:f6:cd:02:75:88:
         b0:ad:2c:0a:07:fb:2a:b5:f7:e0:3c:07:30:2d:1c:b3:e1:ba:
         54:0b:15:12:20:c9:e8:07:3f:b9:8f:e5:ac:f5:03:2d:04:41:
         f3:17:bd:b8:3a:a0:ed:44:a9:97:fc:49:af:9f:6b:77:49:7b:
         91:b2:6f:b2:e1:83:52:cd:89:0d:b4:e4:38:3d:a7:50:60:42:
         6a:19:a7:dd:f1:7f:3d:ec:5d:29:ff:e7:a2:58:6d:4c:05:cb:
         6a:ea:d6:6f:ae:20:c5:cb:59:a6:81:34:7c:31:14:91:20:5e:
         5a:3c:ed:66:b5:b1:af:81:c0:30:1a:c2:34:a0:0b:e0:b1:3b:
         ec:80:35:80:21:0b:1c:45:e2:80:5e:f4:4a:31:78:01:b0:f3:
         6d:b7:d3:3c:4d:8b:54:96:82:96:5c:c0:c2:be:d9:19:50:7f:
         99:41:0b:f2:4b:1e:42:25:27:cf:bd:38:de:0d:d0:de:87:2b:
         36:c3:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:50:29 2025 by rpki-client