Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f5b03d4-cf9e-398d-89cf-b90d2f89d18a.roa
File:                     7f5b03d4-cf9e-398d-89cf-b90d2f89d18a.roa (raw, json)
Hash identifier:          hLgBmeu9omtuZICym6swDdC0ObM9QfqP00vgEjdozFw=
Subject key identifier:   1F:C2:3E:D2:B9:61:30:DB:01:F9:88:80:CF:D3:AB:E5:FE:BF:0F:C7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926CDCDC9DD95C3DF12F340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f5b03d4-cf9e-398d-89cf-b90d2f89d18a.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     56347
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:cd:cd:c9:dd:95:c3:df:12:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=a7303467-7cbe-47f5-b2f4-0feb9d9d6671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:66:88:84:60:0d:2c:c4:10:cb:7a:3d:fb:
                    c4:00:c8:72:26:e4:11:cc:10:6e:ef:f8:87:fc:bd:
                    51:71:f9:ab:25:31:6e:e4:bd:23:0a:e0:d6:90:34:
                    54:06:7d:e6:10:88:b6:1c:83:17:0f:a9:d0:6e:52:
                    29:39:1b:32:77:78:6f:77:fc:bc:41:bb:5c:30:48:
                    54:05:30:d4:f3:98:bb:27:f2:a7:9c:35:df:46:99:
                    b7:c4:57:8a:a8:bf:9c:8b:69:94:59:2e:5e:f1:2e:
                    56:c0:8d:ca:51:50:97:fe:cb:b6:f8:bb:ce:ba:f5:
                    0a:43:db:d6:08:36:67:d7:3a:30:f0:99:f3:45:db:
                    04:0a:08:31:da:3c:93:4e:27:06:c7:59:65:26:54:
                    f8:bf:4b:7e:79:9d:36:30:2e:e5:78:db:23:cf:41:
                    94:d7:48:fd:b3:48:d0:b3:b2:96:99:14:0f:c6:57:
                    77:ae:6e:8b:31:8b:4c:91:5e:79:fc:09:bc:8c:10:
                    c0:cb:28:63:6c:ed:78:bc:a4:a9:ad:fa:b6:5c:2e:
                    94:fe:b3:aa:47:63:88:0f:ae:73:03:e3:d0:70:c7:
                    0d:d0:21:55:60:e9:b2:e4:b7:4c:66:c4:9e:9e:8d:
                    97:96:40:8a:8a:fa:b9:bd:00:6c:4f:77:8d:fb:19:
                    9a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C2:3E:D2:B9:61:30:DB:01:F9:88:80:CF:D3:AB:E5:FE:BF:0F:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f5b03d4-cf9e-398d-89cf-b90d2f89d18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:61:4e:77:6a:b2:db:87:3d:d3:40:55:e0:e9:b0:a3:cc:78:
         e0:9c:39:99:a2:d4:b2:d6:61:45:c6:cb:54:85:70:8c:70:4a:
         ad:3b:d7:91:4d:69:f2:1d:9e:74:30:fc:b5:26:7d:a6:f1:20:
         89:19:90:e3:06:6f:dd:a4:a5:bb:3c:36:b5:ba:fb:80:cc:77:
         c3:ec:66:c6:1d:7b:ec:49:83:d4:99:46:0f:42:44:84:4d:eb:
         2d:c9:d6:ec:86:40:54:54:1d:2b:02:69:f3:f8:09:f8:ab:cb:
         d6:0e:13:ae:46:72:8e:3b:35:45:50:f7:d0:18:9c:53:b0:d7:
         c8:b5:fd:73:96:0e:44:9a:4c:45:88:bf:61:15:e2:82:28:21:
         42:8a:10:51:87:64:28:99:71:52:ca:66:80:80:89:08:40:54:
         56:50:ee:ae:13:70:f4:e7:1a:f4:ec:0b:fb:3a:b8:e6:a7:9f:
         45:24:79:f6:7f:16:9f:fd:11:30:0e:96:a8:3f:9e:3d:66:1b:
         33:c2:55:f5:4d:87:62:bc:97:6b:0d:68:80:32:c0:c5:13:a3:
         e2:c9:78:54:9c:d0:ae:cd:b6:aa:12:a1:1c:8d:9d:1a:3d:3b:
         1a:d9:f2:54:7d:69:90:07:87:ef:86:d6:f7:29:74:c2:e9:9e:
         22:01:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:44:12 2025 by rpki-client