Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76cb45c8-5127-3efb-b822-9199514a212f.roa
File:                     76cb45c8-5127-3efb-b822-9199514a212f.roa (raw, json)
Hash identifier:          NP+oFD2u9N9ihgfHuv9vFW8fduQfDX+8Ij/yKlXyNrk=
Subject key identifier:   C3:AE:6C:87:2D:20:06:5C:41:79:48:77:45:75:03:E0:47:14:00:3B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926DED6FEB26D29E20CC740
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76cb45c8-5127-3efb-b822-9199514a212f.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     31515
IP address blocks:        2001:470:1d6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:de:d6:fe:b2:6d:29:e2:0c:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=838086c7-4e9b-4bec-9c38-ebf14f6c950c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:45:86:e0:89:11:6a:32:f4:2b:db:85:85:8c:
                    0c:f1:bd:50:40:a0:23:b4:cc:26:f7:89:31:0e:5d:
                    1c:12:e3:39:7a:cc:a4:97:0f:82:f2:5b:d4:05:8f:
                    20:e7:39:f4:eb:c4:5d:e7:e8:ec:30:de:ad:70:56:
                    7c:18:7c:12:bb:d9:1a:b8:57:c4:67:da:fd:4c:1f:
                    b3:25:27:af:b8:62:06:6a:08:df:20:b8:7b:b3:13:
                    e8:69:73:8c:64:62:99:fe:d2:47:85:fa:ff:e1:73:
                    52:1a:44:59:cf:48:35:f6:16:55:2f:a1:c0:a6:f1:
                    fe:f3:55:d6:fd:33:98:f9:e5:f2:e3:d3:43:36:bf:
                    51:c0:96:97:3f:26:cd:e4:34:fe:ca:06:b4:27:08:
                    da:7c:53:49:e3:45:da:94:e3:a4:97:22:04:ba:b4:
                    c4:95:94:0f:aa:41:42:b2:c2:10:47:b1:fe:20:a1:
                    04:1e:ba:bf:8f:59:ab:93:e4:41:a0:39:2a:2b:a2:
                    cc:5d:34:b4:00:99:57:e0:d2:25:ee:c5:a1:22:db:
                    62:49:79:73:e0:1f:0b:57:3a:de:1a:ed:fe:3b:94:
                    56:4f:d7:4e:cf:d1:b4:aa:23:32:a8:b3:3a:e1:1f:
                    5f:ee:eb:1e:c8:a7:eb:89:e7:89:9f:d6:50:d0:1d:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AE:6C:87:2D:20:06:5C:41:79:48:77:45:75:03:E0:47:14:00:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76cb45c8-5127-3efb-b822-9199514a212f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1d6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:8e:3a:ff:92:14:ca:b2:64:a4:9e:69:7d:52:79:6c:2b:87:
         c9:d1:1a:22:f5:7c:40:17:d6:85:a2:49:8f:65:4d:7a:b2:d7:
         8c:1f:e4:d6:f1:24:8f:b9:59:48:30:57:b9:cd:67:77:62:68:
         6e:d4:24:91:b9:b5:0d:4b:ae:b9:a1:91:5f:a2:b9:0f:3c:a7:
         b4:f1:4e:8e:d9:e3:6d:19:3c:0e:e4:6b:11:77:d8:62:07:0d:
         cd:1f:bf:88:22:d6:50:61:bc:38:06:49:85:df:bc:c7:97:87:
         bd:dd:e7:b2:b6:39:2c:10:b8:ea:0a:45:81:44:46:d6:4b:c6:
         a5:c0:d5:b0:18:ea:ff:1a:1c:04:ef:d3:5b:d6:36:8b:39:81:
         6f:2c:02:f8:9e:e8:69:59:9f:6c:09:85:94:55:33:ec:9e:7c:
         a6:07:24:a0:cf:79:24:e4:6b:8a:cd:f4:ba:59:f1:a3:cb:de:
         73:96:53:b1:c3:6b:3a:d0:23:bd:79:52:6d:7e:a1:1f:e5:7e:
         0b:f6:d6:74:dc:b2:9c:a0:a9:f0:b0:c0:d6:d7:65:e8:f4:4d:
         37:73:f9:8a:f3:e7:62:4e:9c:8b:34:1a:24:63:1b:f4:50:7e:
         6d:42:4a:de:89:a0:29:f7:81:b7:5f:2d:1c:c0:39:32:c6:0d:
         fb:b1:e6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:34 2025 by rpki-client