Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ead95fc-edba-3812-b1c2-c7cd4cf1dd4c.roa
File:                     7ead95fc-edba-3812-b1c2-c7cd4cf1dd4c.roa (raw, json)
Hash identifier:          R8sPwqZCRsBQpxTdr19lRM+of3+Gr8m42yehjF1gCkQ=
Subject key identifier:   79:52:7E:40:2C:BD:86:C2:63:BA:CD:43:2A:80:93:14:2D:8C:B0:0E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE3A23C1BFE18B2209780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ead95fc-edba-3812-b1c2-c7cd4cf1dd4c.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     983
IP address blocks:        2001:470:21e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e3:a2:3c:1b:fe:18:b2:20:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=1802782c-fd97-4c2c-94df-7ef61634e2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4e:f0:dd:12:f4:e7:9f:56:7c:4e:7f:f3:8d:
                    69:61:16:37:cd:ad:b7:da:08:77:b0:9c:27:38:6d:
                    8f:38:b0:fd:eb:a8:35:d7:33:7a:aa:ef:81:ac:34:
                    fb:1c:01:17:ac:52:06:04:12:43:d5:f1:1a:a9:49:
                    b5:e2:41:79:1a:04:1f:98:ae:93:a5:96:61:bc:f6:
                    53:7f:b1:ed:cd:72:d5:d5:08:ec:98:f1:86:c8:aa:
                    eb:79:91:6f:2c:af:03:59:ff:8f:8f:1d:20:cf:dc:
                    b3:1a:17:5d:03:af:7a:42:fb:ee:0d:93:24:ce:57:
                    30:14:e4:a9:75:fe:3f:54:dd:1e:bd:70:56:2e:f5:
                    d6:1a:a8:b2:49:67:4a:4d:49:5e:33:99:7a:bc:4a:
                    9b:7a:6e:99:7e:f7:d2:22:d6:cb:71:87:e0:ea:a8:
                    f0:e5:65:31:df:8b:a0:ef:f5:22:cc:5f:34:65:00:
                    7b:84:56:24:33:28:a0:7c:96:0b:98:77:ed:9b:89:
                    a8:1b:5d:fc:e5:6a:c4:57:4a:e5:33:de:a1:9e:4f:
                    38:ae:58:52:14:5b:b7:12:b9:f6:cd:1c:54:2f:ed:
                    2c:b4:4e:61:82:4f:e9:da:52:fe:de:88:f8:7c:a4:
                    2c:e0:e2:c1:7c:41:9d:75:6f:5b:1d:d7:ee:ce:49:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:52:7E:40:2C:BD:86:C2:63:BA:CD:43:2A:80:93:14:2D:8C:B0:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ead95fc-edba-3812-b1c2-c7cd4cf1dd4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3e:70:87:a3:f7:77:8d:72:47:8a:4e:d3:d5:09:26:28:b1:
         f2:2d:17:10:8d:87:7c:cb:33:1f:b1:f7:82:e7:5e:b8:f0:27:
         f1:01:5c:75:dc:62:59:3d:f0:11:07:ae:5d:e3:75:d1:77:2e:
         5e:a5:ee:a9:f8:b8:be:97:9a:ef:bc:06:2d:5c:18:f8:1f:74:
         96:af:10:cf:d0:de:1d:ab:c1:83:27:24:c9:89:91:09:42:86:
         1d:2d:85:ff:c2:3a:a8:be:82:87:82:da:e8:36:4b:30:4a:f1:
         ea:2a:83:ab:f1:dd:eb:26:c4:cf:94:bc:d0:d0:e4:06:a7:db:
         21:a5:20:64:29:f5:ac:1e:3e:54:f3:eb:bb:c6:18:50:f0:31:
         4e:55:8a:b1:ce:62:43:c0:49:9b:2b:f1:ff:9e:d8:64:ad:bc:
         bf:93:d5:17:cf:ac:bc:0e:a4:96:d5:3b:5a:df:8f:b0:c2:f9:
         e2:83:23:98:b1:73:0a:b8:01:95:76:a7:52:19:75:65:25:a5:
         cb:a6:f1:27:b4:07:64:7a:02:e6:45:f0:da:2c:67:1d:ed:f4:
         92:fa:fa:a0:f8:08:96:94:62:6c:f5:0c:3a:23:9a:91:e4:d7:
         70:2e:72:0b:02:58:d0:33:af:cc:92:9e:e8:84:e1:f8:e8:9d:
         b0:60:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:33:32 2025 by rpki-client