Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa
File:                     c868022a-c81f-37f1-9880-bdac50bec316.roa (raw, json)
Hash identifier:          C7CXPvibFSSQJe/90VFxfCuXAByZklleQZUDBZysn/w=
Subject key identifier:   39:CA:F3:72:F8:33:E5:AC:98:E5:24:07:DA:0A:89:D5:C0:C3:67:70
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848E16BF1D892CE7130FFDC9C40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     393238
IP address blocks:        2001:470:381::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:f1:d8:92:ce:71:30:ff:dc:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=a5530fc9-1cc9-4898-983b-4618e514ccb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:89:db:f1:60:1e:c5:8a:0c:a2:4f:95:7a:
                    ae:30:1f:bf:06:ba:0d:c5:6c:f1:5c:b0:b0:4b:6b:
                    33:c5:79:52:79:77:8e:3a:12:1f:8a:9f:b1:58:18:
                    eb:0a:43:85:da:96:2a:f1:8b:39:bc:10:be:aa:5f:
                    35:5a:79:50:5b:7b:06:dd:b5:e2:8e:8a:7e:e8:24:
                    c6:1f:3c:3f:40:4c:e2:32:3f:e5:69:bf:fc:85:a3:
                    10:c3:99:59:af:a0:89:8a:d1:b8:3b:ca:c7:d8:c7:
                    2e:1a:4b:40:70:1e:e4:76:0b:fc:b7:c4:ae:69:78:
                    59:71:8e:17:8f:f0:c2:c7:ce:31:fb:1f:3d:31:46:
                    c2:30:77:8d:65:3b:df:86:8d:66:8b:5c:79:9d:d3:
                    99:36:6a:dc:aa:35:7d:1e:99:26:b6:54:79:20:b7:
                    6f:43:75:07:79:14:30:4b:12:52:64:58:9c:d2:84:
                    b3:98:00:6c:5f:bc:00:74:ea:01:38:5f:df:a6:3a:
                    bd:99:fa:45:7f:a3:30:ce:0f:7b:b5:55:c2:c5:ec:
                    58:79:18:09:d6:3a:59:c2:c3:36:ec:89:1d:3a:60:
                    14:e9:35:23:c6:24:3a:3a:aa:f7:ab:28:be:90:23:
                    fc:84:a5:38:1f:03:39:80:69:c7:e9:42:2a:f4:fa:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CA:F3:72:F8:33:E5:AC:98:E5:24:07:DA:0A:89:D5:C0:C3:67:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:381::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:5b:51:62:df:1f:d7:cc:16:b3:9d:ef:03:d9:e6:f4:ee:33:
         b6:f1:95:21:97:19:f9:a2:b9:ef:3e:79:ab:a1:88:d2:22:f7:
         e2:c7:5a:7d:00:95:a0:57:05:e1:51:52:0c:c4:86:ba:3f:fd:
         75:5b:94:03:ec:ef:fb:e1:c0:dc:cd:a8:b8:3f:4e:d9:42:b2:
         bc:e1:40:1b:69:d6:d9:0f:23:8d:cb:a3:bb:c3:b0:99:9c:aa:
         ab:73:fa:a7:82:6b:09:7b:bc:5e:1e:58:bc:b1:1c:01:99:3f:
         ad:08:5d:10:7d:2a:9a:de:23:1b:2e:4e:21:bd:44:c3:56:01:
         47:6f:d4:3b:e0:ea:d6:40:ca:4e:91:ec:e0:d6:7e:43:56:d2:
         72:bb:19:76:02:57:5d:50:60:e5:14:bb:48:ff:41:ae:e4:d3:
         1c:b0:f6:65:42:4c:c8:dd:59:13:89:3e:98:6f:6d:d1:2c:99:
         d3:e7:2c:af:8c:76:a3:59:f7:1c:f4:9a:7e:dd:c2:00:d4:35:
         42:48:d4:75:0e:99:8f:00:6c:d4:aa:52:15:49:cb:f7:73:e3:
         79:8d:d6:ca:c4:73:0f:04:36:87:d4:10:99:10:d1:92:b6:d2:
         48:cf:d4:8d:82:56:9d:a1:89:6f:19:6f:3b:c3:a7:8a:ac:14:
         e2:5f:dc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:53:09 2025 by rpki-client