Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cb849a5-90e9-36bb-a62e-4e67ac11ef8d.roa
File:                     9cb849a5-90e9-36bb-a62e-4e67ac11ef8d.roa (raw, json)
Hash identifier:          rW1nU3faXuQnKhsK9+itWPrhXkMieS8Lt5jkk9EUjhA=
Subject key identifier:   E0:B6:7D:60:7B:43:52:55:5A:28:D0:82:66:FF:2E:EA:23:B3:63:A5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926D14C3D527CF6C0C0ECF0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cb849a5-90e9-36bb-a62e-4e67ac11ef8d.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     212754
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:d1:4c:3d:52:7c:f6:c0:c0:ec:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=87eba5a5-35a6-4fe7-937a-5e19ee8058b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:59:2c:a4:0c:fa:50:d5:22:61:71:92:d3:
                    38:a0:a3:55:81:96:80:18:ff:6c:fb:b1:b6:82:20:
                    34:1d:ef:47:bc:ef:c5:de:a0:05:2c:ce:5a:a6:dd:
                    c1:b1:32:dd:91:22:71:6d:d1:61:82:b7:c8:1f:05:
                    55:09:7f:4d:8f:fc:7e:11:9d:b6:cc:68:f9:34:f5:
                    5f:44:e3:55:e8:d3:56:1f:31:a7:83:2c:cc:a5:90:
                    c3:8b:1c:e6:34:e1:72:b8:41:25:33:81:11:b8:a1:
                    00:c3:ad:7f:f0:a3:ed:54:e9:e1:b0:6b:b7:42:63:
                    84:4d:ed:48:25:f5:4f:42:01:af:78:9b:19:94:02:
                    86:65:ad:6e:c8:45:04:ed:e5:78:70:28:d4:54:87:
                    af:cc:3f:78:06:a6:ef:65:4b:94:c8:c4:20:51:aa:
                    9d:db:80:88:15:c1:1e:90:c2:94:ba:fd:6e:64:3e:
                    9d:1f:13:2f:b5:51:75:19:14:26:9f:e2:5b:8e:d1:
                    34:e4:91:4a:e4:58:e7:25:72:64:6f:01:4e:81:d6:
                    00:ad:c3:c9:e1:8d:52:ee:39:9c:fb:04:11:35:b5:
                    79:6d:9f:0a:02:8c:d0:2a:58:8c:cf:81:e4:66:7d:
                    ca:0c:b1:bb:eb:6b:d5:da:49:32:cc:bf:e1:c3:a2:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B6:7D:60:7B:43:52:55:5A:28:D0:82:66:FF:2E:EA:23:B3:63:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cb849a5-90e9-36bb-a62e-4e67ac11ef8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:82:9a:0f:1b:35:d7:d8:39:0b:f5:18:83:4e:aa:ca:31:fc:
         5b:ce:4e:fd:09:ca:4c:c0:c4:69:c0:9d:77:eb:43:d6:8a:3b:
         9d:27:50:66:37:52:85:c6:c0:99:75:76:8c:5e:a0:f4:df:5c:
         63:00:e8:3c:d3:c1:dc:39:29:9f:54:81:17:1f:b8:96:3e:7b:
         49:f3:18:26:ca:e5:28:e3:88:31:6a:0a:83:01:ee:28:9e:4c:
         6f:d5:0b:da:68:b0:0e:8e:88:c0:17:e4:20:02:a7:f1:6d:01:
         d4:02:86:c1:f8:25:31:3d:95:6f:7b:55:4c:f7:05:f2:4c:71:
         0e:d1:4a:74:8d:ca:73:ed:16:cd:4e:43:f1:5e:db:e9:c9:83:
         1f:0e:6b:3e:68:77:2e:00:9a:10:94:d7:a5:bb:ff:52:b4:bd:
         9c:06:33:3e:4f:44:03:d9:bf:af:dd:06:2d:6a:db:15:c0:c1:
         27:c3:1c:62:5f:2d:b1:a5:d5:42:ae:3b:cb:cc:d3:2e:62:3d:
         ba:9f:d1:22:f6:a9:d6:0b:64:8f:35:8e:ab:3a:6e:90:d7:27:
         67:61:2f:f0:a1:d6:86:a9:ad:ab:ce:32:a9:e1:c5:38:c5:03:
         ce:a0:52:0a:e9:7d:ed:11:53:bf:8e:b0:cd:02:53:94:cd:8a:
         a5:0b:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:55:46 2025 by rpki-client