Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1bcb580-9dda-3d8e-894a-e45b5b7878bf.roa
File:                     b1bcb580-9dda-3d8e-894a-e45b5b7878bf.roa (raw, json)
Hash identifier:          8s5vUed60PHq59NOxhkpwrv0sOYFm2x4mKDG5qoPTrk=
Subject key identifier:   64:BE:D1:12:78:32:23:D2:7D:0D:6D:B7:D6:94:28:BE:58:D4:69:47
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848A6D9F1BF166D693362800200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1bcb580-9dda-3d8e-894a-e45b5b7878bf.roa
Signing time:             Fri 24 Jan 2025 14:30:12 +0000
ROA not before:           Fri 24 Jan 2025 14:30:12 +0000
ROA not after:            Thu 24 Apr 2025 13:30:12 +0000
asID:                     138995
IP address blocks:        2001:470:3fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a6:d9:f1:bf:16:6d:69:33:62:80:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 24 14:30:12 2025 GMT
            Not After : Apr 24 13:30:12 2025 GMT
        Subject: CN=cd73fce5-0c4d-44fb-ab18-87402008b32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:48:fa:c1:29:f1:db:09:6e:43:84:a6:ed:c0:
                    44:4f:23:49:33:a3:be:74:04:04:f7:f3:99:6c:8e:
                    2b:8c:bb:2b:7f:eb:45:24:3e:ba:e5:30:c5:fc:c8:
                    d2:c8:e3:94:e5:ba:5d:95:15:25:99:27:a6:60:e6:
                    17:40:ac:6e:a2:36:3a:fb:45:12:6d:a3:99:c6:8f:
                    74:f5:84:61:33:7e:78:27:6c:92:4d:db:b3:62:cd:
                    d8:65:80:ae:2e:ce:7c:44:f5:f9:2c:89:f3:24:97:
                    f3:3b:a7:5b:6d:92:d1:80:dc:a0:11:2b:1f:57:b5:
                    36:67:b0:40:97:bc:2f:ff:97:25:09:a9:ab:f1:ef:
                    9e:99:1b:b8:f5:37:b2:d6:a8:4f:2b:8e:e8:ad:12:
                    b2:3f:26:ad:e2:a3:a5:d5:9c:21:82:9f:59:f9:7d:
                    b4:c4:00:8b:bc:45:56:4d:2d:68:53:3b:dc:63:f0:
                    83:f7:09:d5:58:39:bb:e8:70:64:8e:4e:1a:3e:6f:
                    08:32:93:5f:c4:59:f8:7d:9e:d2:6a:02:71:49:6d:
                    40:f2:6e:77:c5:37:8b:32:6d:38:ba:9f:9b:96:af:
                    d7:a6:6d:25:92:23:63:f0:f5:0a:4d:a0:ce:ad:0b:
                    5c:ee:bb:6e:88:9b:0e:11:e0:19:84:32:3c:ab:e1:
                    fa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BE:D1:12:78:32:23:D2:7D:0D:6D:B7:D6:94:28:BE:58:D4:69:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1bcb580-9dda-3d8e-894a-e45b5b7878bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:5c:21:ef:9f:d6:e4:0a:47:54:25:4e:3f:51:7e:a5:29:fd:
         d0:71:89:0a:07:a5:18:25:70:73:44:41:eb:08:e0:66:d6:e4:
         e1:8e:05:bd:45:49:08:95:c7:a5:08:ed:c1:90:c9:16:c6:c0:
         65:f0:33:77:79:ec:40:fd:f1:75:c4:c6:75:60:31:da:bd:c8:
         b4:fb:7d:d9:00:59:c9:09:bf:d4:d2:e6:65:bf:47:cc:32:bf:
         48:c9:b2:d8:e9:e9:b2:37:ea:3b:dc:d4:a6:c3:34:cc:c3:6d:
         6c:2f:49:58:ce:59:ad:c9:e2:8c:92:f8:24:67:c1:f8:f9:ac:
         5d:7f:3a:74:d2:f9:60:1b:bb:8a:f1:51:a4:14:99:04:3c:ce:
         a7:86:a5:db:2a:76:ea:04:6b:29:6f:44:1a:20:ef:f2:35:54:
         86:6f:25:54:cf:8d:4d:c4:e3:b7:61:43:c6:d1:74:8f:fe:02:
         c9:b0:4f:6c:58:44:a1:44:fe:eb:02:cb:2d:58:f6:69:9b:3d:
         48:2b:94:ac:a3:69:b0:f6:9e:93:48:0e:61:61:7f:69:b3:c7:
         04:90:bc:57:8f:19:60:5a:a7:5f:63:03:7c:31:9f:62:ec:be:
         5f:2d:a6:1f:61:6f:9f:9a:b1:24:23:74:f5:1b:41:da:7c:ae:
         ee:69:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:54 2025 by rpki-client