Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7971e68-22f1-36a5-bbad-e5595b78d79b.roa
File:                     c7971e68-22f1-36a5-bbad-e5595b78d79b.roa (raw, json)
Hash identifier:          ikhcJYEFYV1Z2popDI1F8lgtjhF/yZknDWV15xpt+Dw=
Subject key identifier:   87:B2:5D:34:0D:44:E3:6A:83:AE:97:96:0E:8C:22:51:CF:E1:B6:BD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858490B4C1040D1BCA029523ACC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7971e68-22f1-36a5-bbad-e5595b78d79b.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     63129
IP address blocks:        2001:470:3e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:10:40:d1:bc:a0:29:52:3a:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=dd9f8eb2-7805-4ed9-ad82-c7592066fade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:2b:c4:0a:e6:26:a7:e1:f3:34:49:b6:63:
                    7f:c2:db:f7:3e:1b:78:2a:39:5a:b4:e4:f1:ed:89:
                    52:a0:6f:8e:f3:75:24:38:81:a1:21:3e:71:42:19:
                    a7:5c:c3:45:5d:06:d8:51:80:3a:08:60:b4:82:ae:
                    69:07:a7:cd:2a:19:62:ff:37:9c:bd:1c:d2:05:d0:
                    15:b7:35:b8:30:14:ca:07:2f:5e:ae:00:ec:b3:e5:
                    6e:a1:7b:67:29:ca:e0:58:36:4f:30:ed:ed:93:42:
                    db:6c:d0:11:fa:da:54:a2:38:52:b5:07:4d:93:0c:
                    5f:13:be:ec:ec:63:5a:42:f6:1d:9e:1d:b7:ec:15:
                    ea:64:78:ad:6a:4d:07:c2:f9:ee:ad:88:d7:a5:2d:
                    04:40:8f:be:3a:24:32:12:9f:00:11:4f:80:3c:70:
                    ca:06:82:7c:ec:46:e3:f0:89:86:92:5f:1e:f8:ef:
                    64:24:73:55:ea:aa:bf:b3:ad:11:d0:4e:8e:da:7f:
                    0c:b8:fa:0f:30:45:6a:d4:28:be:6b:05:ee:16:c5:
                    c6:bc:d3:38:68:7a:70:81:a4:8e:33:15:02:ff:88:
                    0e:66:f3:c8:35:2d:cc:aa:08:5e:29:76:f5:f2:5c:
                    60:a8:85:5c:44:0e:2c:dd:0d:cf:2b:15:d4:cc:67:
                    f4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B2:5D:34:0D:44:E3:6A:83:AE:97:96:0E:8C:22:51:CF:E1:B6:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7971e68-22f1-36a5-bbad-e5595b78d79b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e0:8f:e8:00:9f:b8:30:16:07:6e:a4:9c:0d:b3:e6:37:a4:
         52:1c:c5:e2:a0:25:cc:2c:c0:19:cb:59:5f:29:10:d1:ff:4a:
         f7:dd:2f:65:02:46:58:2b:63:b1:9f:eb:57:58:6e:11:59:fe:
         c5:fe:46:f6:79:10:de:4d:b9:55:87:93:48:4f:2c:b3:17:cf:
         5c:eb:15:f4:7f:06:b3:73:80:69:a4:a1:7d:8d:5f:ed:b1:d6:
         6b:28:b8:17:90:2d:47:14:6e:b5:1e:59:e6:13:6e:4e:1d:ea:
         a6:e8:f5:c7:01:2b:a7:fb:96:00:4a:f0:e0:84:d2:1a:e9:e0:
         59:18:d1:39:33:bf:3e:3f:13:1d:8b:0c:b4:55:15:a7:22:c5:
         d9:57:95:ff:f8:16:b2:39:be:5b:63:5b:b7:c6:9d:a0:0a:6a:
         a5:71:22:fc:6c:aa:ac:19:7e:d5:3d:96:b9:3d:18:9a:01:63:
         c5:2f:ce:c1:a7:20:8d:e2:cd:f8:6b:eb:82:cc:91:3c:1e:d1:
         a8:eb:f4:f3:9d:ef:e4:58:d6:00:bf:30:db:e3:ca:65:af:29:
         87:bc:09:3a:fd:ed:90:15:49:a7:c3:09:c0:b0:e1:ab:78:3b:
         90:96:fc:b3:aa:89:b4:48:f2:83:46:9a:3a:bf:43:96:0e:c7:
         8d:4c:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:28:01 2025 by rpki-client