Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76de50f5-e7fd-3521-a9aa-7f92e5b20b2e.roa
File:                     76de50f5-e7fd-3521-a9aa-7f92e5b20b2e.roa (raw, json)
Hash identifier:          UzZ/ePTG/8JBmzPbbgr+j7kapWOtXRL0nFCsUfCTUqw=
Subject key identifier:   5B:CD:12:61:69:23:AE:96:C9:8F:8A:15:F3:18:AC:2A:14:47:29:3E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584905C53551768D02B4AC862F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76de50f5-e7fd-3521-a9aa-7f92e5b20b2e.roa
Signing time:             Thu 27 Feb 2025 14:30:13 +0000
ROA not before:           Thu 27 Feb 2025 14:30:13 +0000
ROA not after:            Wed 28 May 2025 13:30:13 +0000
asID:                     201789
IP address blocks:        2001:470:41e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:c5:35:51:76:8d:02:b4:ac:86:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 27 14:30:13 2025 GMT
            Not After : May 28 13:30:13 2025 GMT
        Subject: CN=f0db1407-ed06-4aab-b43e-3870059b9dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:22:64:37:4f:fc:91:36:05:c6:b8:f7:cb:
                    19:26:45:d2:48:1f:41:dc:95:78:d0:99:4b:63:f7:
                    39:ae:c1:f2:1d:e9:76:95:85:5f:83:61:a9:2f:17:
                    95:ca:1e:93:31:53:81:97:23:76:cc:9c:22:4f:a9:
                    b1:3e:37:e3:73:2e:a7:5f:e5:9c:48:ed:95:f4:7d:
                    92:f8:ad:07:31:93:52:7a:52:59:2f:8c:f3:1a:f8:
                    f5:99:ba:db:cc:84:a2:23:88:6f:95:ce:24:e4:c6:
                    10:26:00:8a:71:f9:a6:df:a7:fb:6f:de:cf:f6:a8:
                    43:da:8a:2c:ab:c3:a0:bb:b8:8f:40:fa:ef:d1:2d:
                    19:ef:d0:5c:29:69:61:be:3e:8e:b9:b3:66:18:70:
                    7c:d3:bb:db:68:be:d3:54:88:75:3a:75:98:cb:95:
                    5c:2a:f6:a7:f2:b2:61:cc:f0:e7:76:5f:58:db:f8:
                    61:47:db:27:cb:df:70:00:57:af:8d:70:58:77:21:
                    a7:d4:bf:c2:ee:09:04:bc:b8:43:35:01:00:e8:4b:
                    e3:d5:1e:1b:e9:28:56:80:f6:35:18:06:0c:b1:87:
                    b7:dd:ee:70:b9:04:10:75:cd:67:66:6b:95:ec:d5:
                    a9:b2:83:77:2f:1e:cf:c2:8f:87:76:1f:c1:dd:f1:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CD:12:61:69:23:AE:96:C9:8F:8A:15:F3:18:AC:2A:14:47:29:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76de50f5-e7fd-3521-a9aa-7f92e5b20b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:41e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e2:6e:dc:b3:0e:86:c0:2f:f3:6d:47:61:bd:bd:db:32:25:
         af:08:b2:64:01:cd:97:07:4d:5f:9d:7d:c1:e7:aa:85:8c:d0:
         1d:f8:88:d3:76:a4:97:84:9d:aa:0a:f0:f6:19:79:9b:9d:92:
         9a:a3:8c:65:7c:4a:e9:3a:72:51:91:01:ab:3b:8f:c5:d8:d1:
         ad:d8:bb:fc:c7:35:a2:71:2a:19:32:52:dc:a8:1f:4d:62:47:
         f0:22:74:89:fa:c0:fe:d5:57:7d:3c:e3:ac:48:4c:57:28:49:
         1e:2c:43:b5:20:c2:2a:30:54:77:ea:b5:95:6b:7b:06:cc:9b:
         95:93:42:cf:f4:ca:8a:38:8b:dc:8c:30:6d:87:e2:19:7b:84:
         49:5d:16:af:9a:cb:5e:2d:55:c0:da:61:df:f0:1d:66:50:c4:
         f9:e4:a8:a2:cf:4b:1d:49:91:12:06:97:e7:35:a7:7d:f1:44:
         c9:31:f3:c9:4f:19:94:7a:3e:13:26:e6:f7:b0:07:00:98:8d:
         34:4f:8c:b6:8c:91:6f:29:56:0f:cb:b8:9a:45:1f:f1:bb:c9:
         22:a6:68:aa:6b:ea:04:e1:70:c4:6a:08:eb:b1:53:dc:f2:a4:
         13:df:84:31:67:22:af:70:ab:3a:dd:85:83:20:79:65:70:28:
         a1:ba:4a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:21 2025 by rpki-client