Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b075ac90-1cbf-3dea-9c0e-10ba89d7beed.roa
File:                     b075ac90-1cbf-3dea-9c0e-10ba89d7beed.roa (raw, json)
Hash identifier:          qlsCSHmjnZc3PiPYHvKYtr9gwmh6ar9TX8J3b7LhUYI=
Subject key identifier:   DC:3A:1B:B3:89:77:6A:55:75:8C:CD:61:74:A9:62:B8:FE:8E:4F:3C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E5BE445FE8D1282D1180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b075ac90-1cbf-3dea-9c0e-10ba89d7beed.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     57332
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e5:be:44:5f:e8:d1:28:2d:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=c0aa2410-e615-4d35-a33a-2eda91713387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:79:ff:9f:90:96:44:d0:65:65:e4:37:30:36:
                    71:dd:98:79:fe:59:78:d7:b9:ad:da:89:89:a6:63:
                    f2:71:bb:76:26:5c:c0:86:e9:4f:7a:85:d0:da:88:
                    1d:76:ae:81:f6:6a:06:33:e3:60:96:71:1a:de:6b:
                    e9:da:4b:e9:0c:99:26:02:21:93:76:5e:5b:09:db:
                    b6:28:6a:96:6c:7a:f2:4b:19:61:10:1a:29:45:9e:
                    5c:08:31:ad:b0:0b:fe:b1:cc:1f:8d:86:93:6b:4f:
                    5a:79:7b:72:10:f8:ca:7b:0c:7d:02:ae:6f:ec:cd:
                    26:02:16:fa:04:66:4c:e3:6c:99:a5:c3:f2:74:33:
                    55:70:6e:71:fe:cd:d9:bf:08:18:b7:36:dd:02:8d:
                    e4:74:09:ff:c2:13:1e:4b:38:96:ca:84:47:24:eb:
                    f6:08:b9:91:de:9a:93:01:19:d3:5f:8d:30:55:c5:
                    42:f0:fb:24:ed:1f:82:3a:0f:dd:c3:c0:9b:89:83:
                    ad:d2:72:a1:55:c4:d2:41:96:cf:c9:1e:e4:ee:7b:
                    2e:30:7b:3f:35:20:8d:4b:1e:ce:29:3c:ce:2b:70:
                    1c:f7:bc:65:7c:e0:01:c0:6d:fa:e8:ca:2c:a0:ea:
                    27:ef:d2:77:8e:78:71:60:c0:52:63:bb:be:97:9f:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3A:1B:B3:89:77:6A:55:75:8C:CD:61:74:A9:62:B8:FE:8E:4F:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b075ac90-1cbf-3dea-9c0e-10ba89d7beed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:df:0a:89:27:8a:65:77:b2:1b:bb:f8:1a:cc:e5:0c:2c:93:
         d0:cd:b4:ab:dd:42:3f:6f:c1:08:9e:94:fb:39:fe:6c:40:9a:
         28:84:b6:ab:6b:58:f4:89:88:23:f0:ad:7e:77:15:5b:11:38:
         0c:e6:45:42:1a:9e:0a:a5:d0:02:61:95:ac:a5:b6:cb:e9:eb:
         d6:3e:0d:a2:42:55:93:57:3a:b9:ad:64:3c:44:e5:0c:5d:2c:
         4e:99:b9:28:fa:63:70:4d:d3:bf:e7:f0:b9:06:cf:30:6e:3d:
         57:b6:76:29:f7:94:d1:b9:a8:d3:8a:38:be:67:37:8d:de:b4:
         bb:0c:d4:7d:bf:63:48:c3:22:4c:b5:0f:a3:0b:98:98:4c:1d:
         80:06:62:12:65:61:48:bc:ea:57:d5:ff:29:ab:59:56:a8:6a:
         35:a9:48:7e:4c:e1:71:02:ac:ac:89:94:09:83:a7:d5:d7:03:
         57:d8:34:08:3a:ac:6e:a4:8f:9a:77:d1:7d:d0:78:a5:19:df:
         71:e1:af:9c:42:e6:7a:fb:1e:98:7a:5a:c6:6c:15:fb:ad:5a:
         51:0e:84:83:fc:29:47:4e:47:13:1b:4b:86:ce:e1:bd:40:26:
         0e:0b:d9:ae:8b:d3:75:9e:c1:07:88:e4:30:a1:66:08:68:e9:
         c9:d8:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:54:06 2025 by rpki-client