Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7a5d10-250d-3abe-a9b9-2cff852e5361.roa
File:                     7c7a5d10-250d-3abe-a9b9-2cff852e5361.roa (raw, json)
Hash identifier:          DrGLr11J0SU7yEAAHAeDWxDePv2YrLkRwDssfY6eQ4s=
Subject key identifier:   25:A4:36:26:4E:8A:7D:90:9C:BE:F5:22:B6:A8:F3:8F:D0:92:1D:5C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E165D870562D80DF1960
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7a5d10-250d-3abe-a9b9-2cff852e5361.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     53904
IP address blocks:        2001:470:229::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e1:65:d8:70:56:2d:80:df:19:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=b0c911cf-c5bd-4560-ae2c-298f9bbfd579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:07:4f:5c:ac:03:92:10:1c:bc:00:5b:2e:a4:
                    a8:f5:c9:4c:27:d3:d0:80:e0:84:d4:09:8b:ba:9b:
                    72:a4:d4:d8:ca:a9:e9:58:62:03:d4:dc:ec:60:f4:
                    e3:1b:9b:3a:2e:19:09:fa:ae:b1:03:4b:67:88:8d:
                    05:24:79:01:4c:55:27:3a:03:76:f0:05:e5:b4:d4:
                    5c:3b:20:6d:a9:2e:ff:3c:cb:63:0b:4c:d8:1e:6a:
                    a7:ad:90:1b:d2:9a:6d:8e:ca:18:99:93:6c:aa:a0:
                    9c:e8:27:d9:12:d4:d6:e2:87:1e:64:be:6c:a7:11:
                    da:4a:8c:96:65:0e:ff:4f:a2:77:9a:4c:e4:bd:e0:
                    33:6f:97:12:6b:98:bd:b5:7a:05:fe:33:66:93:e0:
                    6c:14:b2:55:33:74:b8:cb:d8:4a:65:97:5d:a6:3e:
                    cc:1c:55:7c:1c:b7:50:08:b6:94:25:89:4a:41:f5:
                    d3:2b:55:92:99:6d:1e:8c:ae:2b:13:71:26:19:c8:
                    c9:cf:f3:b0:d6:d6:6e:0a:cc:68:d7:82:52:79:5e:
                    50:29:09:4b:f3:16:36:6e:2e:30:b9:9b:ee:03:b0:
                    a6:da:0b:86:88:a1:22:c4:c7:47:f7:4b:b6:79:20:
                    92:62:1a:2a:77:50:16:a7:49:3e:22:07:50:f7:65:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A4:36:26:4E:8A:7D:90:9C:BE:F5:22:B6:A8:F3:8F:D0:92:1D:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7c7a5d10-250d-3abe-a9b9-2cff852e5361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:229::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:25:1e:6c:e1:78:1d:52:d9:b2:cf:86:a7:9d:c0:47:74:e6:
         b8:f1:40:a2:6e:29:ba:ce:38:69:31:95:6d:2b:46:b1:76:7e:
         fa:bc:41:7d:0a:70:f5:d0:c5:c9:4b:78:68:5f:ff:61:e0:1f:
         bb:2b:13:a3:88:a1:9b:4c:0f:b4:93:d1:99:f8:61:13:66:de:
         d8:bf:65:28:92:ee:1f:4d:09:ea:b5:41:d3:21:ee:c5:e5:be:
         6d:a4:1a:3f:0c:56:d7:2d:87:18:c3:15:7d:e4:ea:31:e2:ed:
         7c:41:bf:94:81:ff:b5:5d:f3:49:70:d5:31:e2:e1:03:4b:75:
         0d:a0:fb:c4:5a:c8:fb:f3:e6:a2:dd:54:64:38:45:40:a2:d2:
         e9:3d:7d:b3:26:7e:68:01:10:15:33:a0:99:43:6b:ca:38:f1:
         95:0b:ed:3e:8d:fa:5f:5e:6b:0b:29:c4:0a:dc:2e:15:41:fd:
         6a:09:ca:e2:52:e2:c6:e4:2a:fa:90:dd:20:17:a3:c8:7b:21:
         11:34:aa:62:b1:59:13:02:be:29:b7:6e:b5:f3:95:2e:34:92:
         3f:ea:a4:55:8c:0c:4d:64:41:ca:73:ce:88:98:03:64:a9:2a:
         73:2b:4d:f2:5c:77:c2:51:44:c2:26:c7:00:fa:d7:b0:53:2e:
         4d:12:89:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:37 2025 by rpki-client