Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b004841b-030b-31b2-93b8-ab555dde3c91.roa
File:                     b004841b-030b-31b2-93b8-ab555dde3c91.roa (raw, json)
Hash identifier:          ApsrKasIREIMKPTqOCyiFlbjg+L3WBYp5FfF/mxkpP4=
Subject key identifier:   D5:6E:35:D2:D7:AA:C2:10:CD:64:80:78:D8:B6:EE:C4:3B:20:3F:9D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FDEEAEEE1AB6D46735A90
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b004841b-030b-31b2-93b8-ab555dde3c91.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16637
IP address blocks:        2001:470:170::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:de:ea:ee:e1:ab:6d:46:73:5a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=eea7b728-c810-41de-8f38-3c0a129c771c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:03:15:19:6c:8c:1d:d0:9c:73:ad:65:ba:98:
                    54:7f:f4:c2:f3:fb:9f:f6:9b:b0:f3:1c:88:0a:67:
                    07:75:19:be:04:df:fd:75:6d:a0:50:64:16:87:2b:
                    ae:c5:74:33:2e:15:64:82:76:fd:fc:a8:c5:20:de:
                    87:5e:ec:fe:e8:64:f2:df:ad:91:7c:d7:fb:7a:a4:
                    e8:d4:0d:90:df:67:c8:64:f8:ff:1e:47:c5:bd:76:
                    0e:24:ab:a9:72:95:01:84:12:97:2e:1a:79:01:08:
                    6a:31:fc:0c:30:55:81:79:03:3e:20:24:ff:01:b5:
                    ce:bd:6a:aa:5b:d1:94:af:b2:3a:5a:bb:52:2b:af:
                    2c:84:97:3a:10:a6:06:8e:f8:bc:58:eb:a6:e8:36:
                    57:23:80:90:45:86:96:ed:09:cd:bf:2c:21:4e:10:
                    ec:ec:41:d1:c6:df:5f:0d:88:02:46:8a:89:c7:d5:
                    1b:40:4d:90:f4:7e:0c:58:d6:bb:a9:9d:a9:91:f7:
                    e1:37:f9:9a:ff:42:85:d1:2c:54:59:11:6a:86:21:
                    6d:34:21:01:c1:af:e6:b1:5f:d9:61:d1:57:bb:c2:
                    72:60:96:e2:1a:d7:08:93:f0:ba:df:df:a7:01:02:
                    bc:d1:c4:93:62:41:f3:94:b2:e0:95:c3:f6:32:f2:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6E:35:D2:D7:AA:C2:10:CD:64:80:78:D8:B6:EE:C4:3B:20:3F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b004841b-030b-31b2-93b8-ab555dde3c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:170::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:3f:8b:37:07:59:fe:4d:38:3c:4f:51:b1:ca:57:db:17:22:
         d7:a3:2e:61:0e:5d:04:97:c7:97:b5:08:09:08:53:eb:64:f7:
         6f:0c:16:c6:45:32:39:6b:64:ec:8b:0a:08:0e:f5:66:ce:6b:
         75:aa:33:af:19:91:08:8d:b7:e8:ca:55:94:7e:5b:ff:19:c3:
         d1:36:70:e3:00:c4:99:b7:1b:7c:55:02:6e:d8:71:bf:87:90:
         e5:77:30:f3:1c:f4:51:87:97:ce:33:26:09:d2:76:86:42:a3:
         67:2c:13:b1:e1:01:ae:79:d4:f2:d8:12:ab:e0:3e:04:51:49:
         3f:7d:7b:ee:ac:04:fc:b7:fe:11:79:5d:85:1f:8c:33:b8:b1:
         37:d4:86:bc:fb:3c:14:bc:3d:00:33:c2:b4:90:6d:8d:8e:63:
         1b:b9:26:ea:0b:de:93:61:79:a6:4b:f8:f2:8c:4f:dd:4b:db:
         2c:e5:f7:09:2f:78:d1:f6:80:8c:90:db:d3:81:26:e7:3d:03:
         9f:63:cd:fa:5d:c3:56:a4:a4:5c:e8:75:0a:41:3c:a4:71:a7:
         ee:c0:18:50:1a:de:60:60:50:fc:cc:12:da:23:fb:2f:b8:07:
         0b:59:de:10:14:aa:31:5f:c0:29:1a:b5:77:df:30:8c:01:fd:
         ad:a6:13:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:37:39 2025 by rpki-client