Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8d0cce3-234e-378c-aa79-f69293d49938.roa
File:                     c8d0cce3-234e-378c-aa79-f69293d49938.roa (raw, json)
Hash identifier:          dz+B9wfVf49d+mZPLSJE/7UDtkGq9DgdpNcDSo7rjBE=
Subject key identifier:   36:83:B4:0B:5E:B9:18:42:AF:AF:94:EF:8D:14:4D:AF:95:1A:24:27
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848A2A9F424A45F7858FF16B5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8d0cce3-234e-378c-aa79-f69293d49938.roa
Signing time:             Thu 23 Jan 2025 02:30:17 +0000
ROA not before:           Thu 23 Jan 2025 02:30:17 +0000
ROA not after:            Wed 23 Apr 2025 01:30:17 +0000
asID:                     59953
IP address blocks:        2001:470:3f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:a9:f4:24:a4:5f:78:58:ff:16:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 23 02:30:17 2025 GMT
            Not After : Apr 23 01:30:17 2025 GMT
        Subject: CN=2324de8d-0fc3-41f5-8a1d-08d836058fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:88:12:b6:33:36:93:d7:23:ed:0f:61:81:
                    23:51:1c:7c:9e:f9:72:ea:eb:05:11:ca:a3:38:3e:
                    8e:10:ec:fb:38:c1:ca:71:df:49:fb:50:17:8a:c4:
                    2f:7e:13:fd:fd:97:6b:fe:93:35:24:76:1b:6b:7d:
                    1e:19:21:1a:22:71:94:7d:27:39:87:b9:ca:b0:87:
                    9a:e4:26:50:b0:7e:87:c6:e7:e0:72:67:4e:04:1a:
                    00:df:cc:da:a0:9c:35:30:ef:51:c5:f7:c5:e9:a8:
                    c6:66:f9:5c:c7:2d:09:37:2f:b6:1b:ba:b0:37:58:
                    c6:b4:ed:e4:0f:be:80:06:9b:15:29:84:16:4a:d1:
                    f5:4e:65:eb:f1:59:9d:16:36:70:d7:84:c7:92:30:
                    eb:53:95:57:a9:3f:28:3e:7a:b5:66:b4:51:b2:fa:
                    02:a6:24:ba:ac:0a:56:60:20:37:7f:bb:48:f4:38:
                    30:fb:ae:a9:2c:62:80:f3:49:fe:12:3a:9f:fe:8f:
                    6f:67:22:93:91:87:5c:8f:d2:97:b7:e3:ae:02:d8:
                    d8:9c:0a:f9:a2:43:23:8c:31:7b:89:8d:2c:ad:75:
                    e1:4b:ad:a9:3e:44:f8:23:c5:50:3e:95:7a:3b:73:
                    35:59:f2:22:e6:c7:2f:31:66:ad:a7:9b:72:25:3b:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:83:B4:0B:5E:B9:18:42:AF:AF:94:EF:8D:14:4D:AF:95:1A:24:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8d0cce3-234e-378c-aa79-f69293d49938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d5:4c:82:52:14:27:9f:2c:c9:cd:62:be:6b:a1:0e:82:91:
         bf:a7:9d:3b:fb:ef:c6:2f:76:b4:09:f6:08:3b:db:cf:04:2c:
         b1:fb:be:69:d6:56:b4:34:6a:6b:5c:ce:7d:a5:4d:c2:f8:5b:
         a9:4f:be:f5:e5:11:73:32:ec:0c:ff:6f:ce:5e:ba:77:9a:30:
         c7:71:a7:11:1b:57:9f:8b:b3:72:fc:ff:77:81:88:e1:85:f2:
         72:21:bd:6a:96:08:2e:ff:22:7a:e0:69:97:e7:08:04:d5:98:
         96:a3:83:ea:51:12:03:7a:bf:0b:a1:8c:0c:32:b4:de:e1:96:
         1b:6a:5b:9a:75:09:7b:71:df:64:b4:14:b8:ff:17:95:7d:24:
         c8:cb:29:5f:8f:01:86:57:7e:14:a0:6b:76:3e:91:e8:ca:1b:
         be:89:e4:49:07:3e:86:83:70:6d:7d:3b:63:f5:5c:2d:30:b5:
         4c:01:6c:2b:cd:e2:20:3f:47:6b:fa:03:ab:44:44:8c:6f:55:
         c5:63:8b:e1:bc:86:68:1d:9d:83:eb:03:35:fa:e5:64:18:ce:
         80:60:98:91:cf:06:41:26:17:33:f4:72:03:31:23:ab:0a:01:
         32:e7:89:8a:3c:bb:a3:ec:e8:f7:b8:8c:21:f5:75:e5:01:0f:
         c2:15:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:50:09 2025 by rpki-client