Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92561d87-9e51-3c09-bdc8-0f657dca15e0.roa
File:                     92561d87-9e51-3c09-bdc8-0f657dca15e0.roa (raw, json)
Hash identifier:          cgPLQ6XsWd6NvVVGf7pw5DkVFKHOixclL0OTAvHcUH4=
Subject key identifier:   88:6C:86:8E:44:39:6F:0D:EF:49:59:7A:82:CC:82:85:4C:F7:2B:E9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FE4D6236B5658E26D9280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92561d87-9e51-3c09-bdc8-0f657dca15e0.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     41435
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:e4:d6:23:6b:56:58:e2:6d:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=85cb735c-8aaa-4ef8-aba1-8c49b51cc6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:01:f7:c4:62:9f:fb:b9:53:36:62:ce:b3:8f:
                    e8:04:9a:a9:01:b2:51:fe:16:19:21:5d:e6:4e:ff:
                    70:2b:15:09:af:e9:1a:6e:96:aa:a7:a7:5d:7d:fd:
                    12:15:a7:a0:73:e1:85:10:68:94:d3:d2:1d:33:fe:
                    86:21:24:f4:c2:86:82:54:9f:25:f5:d7:6f:53:82:
                    aa:1d:3f:53:78:67:45:8f:23:50:1f:72:3a:2b:a2:
                    c2:76:f4:9f:45:39:33:78:66:d6:9a:47:89:ce:45:
                    6d:59:92:c0:1c:94:87:da:22:71:9d:02:ad:a1:93:
                    e7:c3:01:38:24:9d:2a:e6:49:e8:bc:d0:49:69:66:
                    6b:f8:c1:f3:7b:fa:3a:4e:a1:fa:84:89:4c:98:b6:
                    77:1f:9c:a7:65:08:40:91:2b:83:6e:70:16:16:6d:
                    3f:8f:dc:0a:f1:fe:42:34:4a:b0:0d:a3:71:c7:95:
                    b1:95:ad:88:87:b9:a4:01:09:4b:25:9e:c5:a9:60:
                    48:60:d9:6d:82:b3:84:c1:f9:ee:82:31:df:16:60:
                    0d:92:6b:b7:89:1f:3b:a6:84:9e:b4:15:59:15:42:
                    7a:2d:5f:21:ef:4c:7d:b8:9d:00:e5:8a:fb:0b:88:
                    a3:76:c9:18:4e:5d:fb:6d:7a:a6:59:0a:ca:28:b4:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6C:86:8E:44:39:6F:0D:EF:49:59:7A:82:CC:82:85:4C:F7:2B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92561d87-9e51-3c09-bdc8-0f657dca15e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:05:94:a9:23:76:78:32:d8:45:3f:e9:f1:56:84:26:8e:de:
         cc:5c:de:fa:60:8c:f7:c9:d5:d4:53:52:08:29:b3:c1:2e:78:
         8e:27:38:d1:14:0b:5d:17:64:59:d7:f8:df:30:8d:e0:53:cd:
         5e:12:cc:93:1c:10:c6:25:ed:28:5d:46:3c:20:8e:28:ce:19:
         02:9f:e9:f5:ca:64:3a:9c:86:b4:9c:89:70:b2:8c:62:45:d4:
         fb:c3:dc:8b:7c:8f:93:5d:83:12:39:7a:b0:35:e7:cf:dd:55:
         23:0b:5b:49:50:31:4e:e2:f8:80:e7:fb:53:21:10:07:6b:b0:
         cd:52:26:c9:87:b1:a4:fc:77:c7:52:9b:5b:f9:fb:b8:1b:ec:
         1e:70:63:57:53:f5:72:8f:b9:2c:12:b5:4c:44:f7:97:24:af:
         19:8c:a5:77:07:6f:7d:27:9d:2c:b9:94:d4:41:db:01:e8:2c:
         1b:38:5c:6a:8d:67:cd:0e:e1:65:b6:dc:2d:db:33:17:eb:6b:
         14:ec:06:d3:19:9b:92:25:5a:80:67:ef:fc:79:2c:4e:12:73:
         15:1b:6e:b7:97:b3:cc:9e:57:de:68:77:b8:1f:65:ba:ee:56:
         fb:0a:a7:42:17:00:b0:cc:84:4f:ef:20:44:54:a0:df:63:24:
         e7:46:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:55:21 2025 by rpki-client