Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88e2eef6-b4b0-3067-83c5-567346cf4c23.roa
File:                     88e2eef6-b4b0-3067-83c5-567346cf4c23.roa (raw, json)
Hash identifier:          AakbGLEBKUFwKtfbCWhM4/fik3aUiahdWZHsjthfI0E=
Subject key identifier:   46:FF:57:8B:47:BA:DC:3D:DA:13:0E:3C:58:45:9C:B4:2E:2A:6C:01
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E98A39027DD742889CE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88e2eef6-b4b0-3067-83c5-567346cf4c23.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     399486
IP address blocks:        2001:470:311::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e9:8a:39:02:7d:d7:42:88:9c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=c6ecc28d-7475-45e6-8402-d1def902bd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a0:83:a5:bf:20:e2:1f:92:e8:96:52:35:23:
                    13:89:2b:9b:2b:3f:db:bf:98:e9:f3:e1:2f:34:9c:
                    3f:3f:d8:97:ef:bc:9e:96:b4:77:74:82:74:3a:18:
                    07:da:92:6e:50:27:3f:56:e2:b3:69:f3:0b:2d:d5:
                    d4:06:a2:0e:19:2d:7c:8c:41:60:67:27:88:ad:fd:
                    79:bd:76:9f:3f:5a:0b:28:81:7d:af:a0:e7:ac:42:
                    1b:57:5b:8a:e1:96:21:6a:14:3a:34:94:be:17:17:
                    a9:b0:1b:d8:53:7f:b9:be:9d:b8:e3:0f:5f:2e:3c:
                    9b:cb:6b:5f:d0:59:75:d2:16:1e:cb:6e:6c:05:2e:
                    29:ec:b7:ec:d5:07:66:3b:c4:53:ba:a2:81:43:f0:
                    fa:df:61:18:93:92:1f:96:06:2e:76:8f:3f:7f:56:
                    6f:82:97:7b:ca:db:4d:cb:a4:f4:9e:3c:f9:44:69:
                    79:f8:92:f6:f5:63:33:13:59:11:f3:b5:f2:fa:99:
                    93:ef:7b:36:8b:92:f7:75:f7:73:e4:b2:a2:ac:dc:
                    15:e4:72:c2:0f:bd:ad:d0:17:b4:ba:c6:b2:20:d7:
                    1a:ad:0e:23:a7:81:6b:95:2d:d6:3c:87:2f:6a:da:
                    5e:9a:d0:9c:42:f4:69:f4:2f:12:51:fe:d4:67:ae:
                    cf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FF:57:8B:47:BA:DC:3D:DA:13:0E:3C:58:45:9C:B4:2E:2A:6C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/88e2eef6-b4b0-3067-83c5-567346cf4c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:311::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:92:bb:a9:6b:28:62:18:6f:6f:33:91:f9:e1:48:4b:74:ec:
         12:d7:b1:8b:21:d5:8a:8e:74:b5:f5:06:b5:d1:e5:be:31:aa:
         36:63:21:7f:eb:2c:8e:20:90:a4:17:8c:26:0c:0e:cd:dd:d9:
         2a:25:90:67:f7:2f:c9:ad:5a:95:cd:72:1f:30:34:6e:69:65:
         80:05:64:7a:f4:b8:7b:65:33:eb:9e:67:72:64:11:98:58:27:
         36:10:51:6c:a8:2d:6a:74:58:06:10:02:43:99:ec:58:4f:f5:
         cb:90:1a:1f:62:d5:8d:a7:e0:92:bf:dc:6f:ce:6b:63:d0:22:
         76:56:d0:4a:cd:77:7d:b3:8d:46:97:5b:59:eb:85:93:09:43:
         bb:eb:d4:e4:a5:1f:33:80:1b:5a:3e:c6:6f:19:33:be:3e:2f:
         84:3a:47:93:74:51:e6:91:ef:4d:ca:c9:ad:c0:6a:02:bb:4f:
         44:cb:5e:02:e7:79:a4:e7:e2:c9:07:92:0a:3c:3b:db:90:2e:
         de:e6:83:93:ae:c5:9e:dd:1b:5c:6e:bf:73:ed:86:02:41:2b:
         9c:ee:27:53:38:9f:b1:95:a5:63:ed:63:42:8f:17:f8:46:c5:
         ef:d8:c2:e9:bd:8d:03:3c:22:a3:79:80:4e:60:f4:04:01:72:
         50:a3:0a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:00 2025 by rpki-client