Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa
File:                     afe4b7b2-223b-38b1-8752-565def625b63.roa (raw, json)
Hash identifier:          b5N2mpEKL414RAjDcPyBUrFNj1hw571snmUsg4vDbYE=
Subject key identifier:   06:E9:B1:8F:9E:5B:21:F6:28:56:81:79:04:AA:8C:04:EE:D9:A9:08
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819CFFDC90CDE1D93F527FB50
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     132046
IP address blocks:        2001:470:25e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:fd:c9:0c:de:1d:93:f5:27:fb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=99b9244b-e0f9-40a0-b1b2-a8e9e06a86b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:13:11:d7:9b:7c:fc:95:40:7f:8c:19:0a:
                    43:80:4d:e6:ef:74:ce:88:e8:b6:0f:98:e7:4b:6f:
                    8d:1a:26:21:07:b3:5a:51:e0:9a:18:00:9c:b6:58:
                    2e:8c:38:31:ad:18:ee:4f:07:27:02:b7:f9:b6:8c:
                    e5:93:35:c3:43:dd:8f:a9:fb:b9:f3:6c:cb:56:e6:
                    03:76:3a:e1:a9:02:23:00:5c:46:35:ed:2d:d7:27:
                    b1:01:9f:45:b4:21:49:fc:a2:e6:d7:13:fa:37:6c:
                    a4:5e:28:25:8a:61:1a:e7:bb:6f:1b:08:e3:c9:70:
                    6f:0e:46:50:e1:8f:eb:63:64:56:57:77:70:e7:12:
                    63:3a:b7:ce:44:f9:da:1b:98:67:ec:3a:1c:ef:92:
                    82:a0:39:df:85:85:60:39:e3:e6:7c:a7:53:78:b3:
                    6a:7b:6a:31:ea:d6:8b:eb:cf:43:51:06:95:fc:58:
                    44:27:65:f6:49:08:74:dc:ed:ab:86:d0:fa:38:a8:
                    34:a4:3e:c8:e6:ab:e5:f3:f5:2a:34:74:fa:bc:45:
                    70:a0:cf:f6:88:58:c8:43:ed:73:52:24:b1:75:e8:
                    95:24:af:68:32:f1:72:a3:27:cb:40:cf:4b:85:4d:
                    61:d7:8b:f7:5f:7d:fa:ad:a2:a3:e3:f0:20:97:b5:
                    96:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E9:B1:8F:9E:5B:21:F6:28:56:81:79:04:AA:8C:04:EE:D9:A9:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/afe4b7b2-223b-38b1-8752-565def625b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:25e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:24:d9:a8:e6:2a:cd:39:fb:f7:ca:1b:64:8e:3b:07:53:fe:
         9b:3e:b2:0a:e5:b8:d0:f8:9a:c0:8d:2e:bc:11:52:a7:d3:24:
         fd:95:50:11:7c:60:61:04:23:cf:ab:af:4e:68:6f:29:a2:50:
         9f:4d:5e:98:c0:5b:be:7a:3e:8b:10:e8:af:5b:03:49:ab:54:
         30:2d:84:ea:d9:b3:32:60:d1:79:55:b0:1d:bb:88:eb:68:2f:
         27:61:5c:c7:07:a4:a8:3e:3a:86:d0:5b:7d:dc:12:06:a8:9a:
         bd:4f:b0:b0:70:f0:68:71:83:e1:f3:d6:b7:c7:86:eb:e8:b4:
         33:f9:99:eb:9f:ce:a0:5a:b2:b9:2f:10:f0:d8:68:e5:6d:8b:
         05:fe:a1:ab:85:67:15:31:2a:01:7c:2a:55:c7:64:94:5e:79:
         18:e0:84:09:07:73:df:14:66:46:36:2d:62:7e:f0:be:ff:c1:
         d6:79:eb:b8:76:69:b2:de:19:fb:27:f8:85:ef:54:00:ce:e8:
         d6:26:13:c7:80:65:19:b7:04:e2:fb:b4:d3:a9:8d:2b:9c:67:
         ca:b7:97:c5:22:8e:c5:35:a1:d3:cc:f7:33:ea:cd:92:86:2b:
         2b:1c:8e:75:d6:c3:30:96:b1:0a:5c:d0:3a:22:6c:4e:bb:52:
         ba:95:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 17:06:44 2025 by rpki-client