Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa
File:                     a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa (raw, json)
Hash identifier:          GbA6746JbxrppBLtDIIXsXkImkOhKaph6AZ61IvoQF4=
Subject key identifier:   75:32:19:A1:44:AF:4D:76:A5:64:9E:06:B6:F5:AF:99:72:DE:7B:F4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858492F87D520AD3A69F8DEAFD180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa
Signing time:             Fri 14 Mar 2025 13:30:30 +0000
ROA not before:           Fri 14 Mar 2025 13:30:30 +0000
ROA not after:            Thu 12 Jun 2025 13:30:30 +0000
asID:                     62081
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2f:87:d5:20:ad:3a:69:f8:de:af:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 14 13:30:30 2025 GMT
            Not After : Jun 12 13:30:30 2025 GMT
        Subject: CN=d5c3c754-c3aa-4f2f-8586-352369535374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e1:f2:e6:81:ec:67:27:18:c3:72:2a:7d:f1:
                    bc:ba:fa:65:25:44:ad:ba:02:73:b3:0f:9a:44:2e:
                    02:35:1a:05:be:b8:09:80:ff:49:49:1d:51:ae:1e:
                    cb:6d:71:5e:95:3d:97:60:15:ab:e7:65:5e:49:19:
                    fb:1b:72:bd:dd:be:97:de:b2:de:37:1d:a7:28:9c:
                    11:35:da:53:47:7f:69:7e:e2:5c:0d:c8:9e:28:07:
                    cf:88:9a:d8:50:83:07:86:cc:79:fc:72:27:5b:34:
                    10:53:c4:1b:58:27:47:b7:59:9e:a6:38:f5:6f:b4:
                    60:0c:8f:a1:b0:fd:a4:1c:b9:63:32:c3:52:8e:62:
                    fb:d9:53:74:a4:f1:8b:93:9b:ef:e4:85:f8:fa:48:
                    d8:50:0b:8a:45:02:b0:4c:b6:6b:7f:2e:1f:1b:8c:
                    96:5a:d2:c3:a3:23:fd:af:2a:41:f3:42:47:cc:90:
                    71:67:fc:27:80:2f:4f:ee:52:44:11:d0:e1:21:1e:
                    b2:27:76:50:a8:18:f3:3b:dd:42:76:e9:85:dc:05:
                    da:da:5b:b2:b3:b0:a3:a1:7f:d2:fe:58:8a:87:05:
                    25:f1:aa:a9:9a:9d:47:0f:b5:68:de:f2:ed:eb:b8:
                    aa:1f:d2:7d:57:ae:bf:9d:5d:b3:c8:fa:66:33:e3:
                    fe:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:19:A1:44:AF:4D:76:A5:64:9E:06:B6:F5:AF:99:72:DE:7B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:f6:d1:03:02:dc:db:34:95:28:ec:f1:c3:70:3e:b1:d9:b0:
         bb:07:76:9c:30:1a:27:8d:89:4f:a4:6a:33:03:35:cf:f7:6a:
         da:ff:8d:e4:a3:43:f5:1d:0e:a9:80:f7:b0:12:06:1e:c5:d0:
         3c:30:42:ed:b8:98:1e:c5:11:5e:92:2d:09:4d:da:d4:d3:04:
         11:ab:94:63:27:42:13:41:8b:f2:4a:6e:48:5b:03:5b:7f:fd:
         a9:18:42:5d:11:1d:bb:36:54:b6:8f:e7:2d:e1:00:f1:5a:9a:
         75:de:93:34:f6:f5:f1:13:ec:e4:64:fd:df:c1:a7:f9:af:b1:
         79:56:39:ea:f5:d0:e1:74:61:ac:c5:20:6e:46:a5:d9:38:aa:
         15:0c:cb:56:d2:76:2e:60:28:cf:cf:60:d6:62:72:91:9a:2f:
         43:b1:96:bb:a6:fc:ea:b4:32:16:19:60:c1:ab:e9:75:f1:2a:
         96:c2:61:4c:61:30:07:4c:95:ca:9a:12:18:08:8d:ae:4b:c6:
         9f:c5:a1:f0:17:8f:60:84:9f:cd:32:b5:05:73:63:bc:d0:2d:
         24:17:0d:bf:fc:dd:9a:74:20:df:c4:cd:2d:ce:e7:80:5b:b9:
         d1:00:7c:b2:d7:69:4a:12:d8:a2:8d:2c:9d:b9:97:e8:19:6e:
         04:33:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:22 2025 by rpki-client