Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87c63927-49e1-3747-828d-410824d5ce31.roa
File:                     87c63927-49e1-3747-828d-410824d5ce31.roa (raw, json)
Hash identifier:          1OsdzLxRLyM8/hRWVB3srWCsJoP1VaaWYe9M3lSmGqM=
Subject key identifier:   DE:97:E3:EC:0A:3D:67:E8:D6:1D:68:54:EE:C8:69:3F:85:82:58:07
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE1BBF07215B6C767A400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87c63927-49e1-3747-828d-410824d5ce31.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     29066
IP address blocks:        2001:470:1e4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e1:bb:f0:72:15:b6:c7:67:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=7c14d277-6fb7-4590-a158-3ec0ca0dbc6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:a7:eb:27:de:cb:19:d1:c5:d8:fd:05:4a:
                    18:bf:17:e3:db:55:b8:bc:00:be:ea:52:ba:c2:1a:
                    ac:1f:17:22:ab:cf:a2:e9:3a:de:05:f7:e4:a3:f1:
                    cf:57:66:90:e5:cf:cd:80:cf:ac:67:2b:98:66:6c:
                    0d:3c:58:f6:ac:7f:01:6e:de:1a:de:6a:44:36:49:
                    ea:d0:9b:bc:bd:d1:90:ae:ac:b6:74:46:fc:e5:16:
                    42:5f:a7:04:59:a9:31:5f:2e:4a:e8:b5:07:05:8c:
                    db:ee:11:bf:cb:f7:96:2a:58:77:ab:8f:dd:00:6d:
                    02:3a:8d:21:05:45:38:64:86:9f:9d:44:50:82:d0:
                    b7:70:2f:72:97:5b:c2:e6:e4:51:e8:06:18:72:b0:
                    f5:bf:d0:02:ad:3f:c1:3b:2d:f7:71:27:87:90:38:
                    b1:98:33:1e:8b:5d:11:f1:c7:e1:33:d7:cd:27:71:
                    58:30:71:ba:43:91:d1:a1:2e:94:d1:7c:81:05:fc:
                    d3:1b:d5:cf:fb:47:c6:38:cc:4d:68:d3:b7:00:5b:
                    29:48:c6:1f:36:ed:97:e2:fd:19:1e:a3:d5:45:c3:
                    db:7e:97:34:18:56:72:4d:59:51:22:21:df:6c:9f:
                    03:39:11:a6:5e:60:1e:04:8e:14:23:3e:5c:11:6f:
                    eb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:97:E3:EC:0A:3D:67:E8:D6:1D:68:54:EE:C8:69:3F:85:82:58:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87c63927-49e1-3747-828d-410824d5ce31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1e4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:a0:1a:b0:f2:c8:96:ea:2d:a6:47:0d:8c:d3:07:b7:e7:7a:
         0b:27:32:37:56:93:4a:6d:eb:95:36:94:89:8b:73:dd:9a:48:
         99:46:65:12:46:f5:52:5e:f4:15:79:8d:fe:c4:2a:d7:79:96:
         1d:27:39:4f:18:20:48:fc:c0:ff:d3:cf:d3:1b:99:fb:0d:61:
         22:a3:89:2d:4b:14:c9:19:88:50:a6:74:4c:4e:0d:f1:51:60:
         64:ce:5a:af:91:c5:43:27:c5:43:f6:f8:d2:0f:0e:58:94:a8:
         ed:43:97:1e:d1:5c:a2:3f:25:0c:6a:82:61:a2:ea:34:e6:31:
         39:79:35:01:c0:d3:bb:b7:66:03:d8:0a:e9:ac:6c:62:60:0b:
         20:e2:ef:49:41:5f:f7:42:bd:69:69:ac:4f:73:fe:45:82:58:
         58:54:11:57:a9:96:ac:3b:a0:c4:f2:e8:8f:77:f1:af:91:d5:
         37:76:ba:bb:22:41:0d:ec:ba:dd:2f:f1:38:0d:36:c6:32:45:
         3b:16:e9:cf:e2:bd:21:3c:31:72:0f:e2:bf:e4:63:b2:0d:19:
         ed:d8:4c:09:e0:3f:8e:49:84:60:e1:a0:11:94:9c:d0:98:6b:
         bf:06:e2:97:c5:07:5c:fb:e4:d7:58:b2:cf:b3:4c:39:44:01:
         bb:b1:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:38 2025 by rpki-client