Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fdc448-4b57-38ef-9d9e-c29e88b1b654.roa
File:                     d6fdc448-4b57-38ef-9d9e-c29e88b1b654.roa (raw, json)
Hash identifier:          RxRy4iGk6ngyrMrIzLFwl3m4zjgzWjlJGowG4RJU4F8=
Subject key identifier:   77:22:AD:FF:39:0F:C5:C6:F5:37:50:CC:61:1C:3D:A5:52:9D:47:EA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849EA8547E3DF78152C96973080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fdc448-4b57-38ef-9d9e-c29e88b1b654.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     9664
IP address blocks:        2001:470:27e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:47:e3:df:78:15:2c:96:97:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=faa4e9f7-65b7-493e-a0a7-bc1ccd9c3fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1f:74:08:49:55:1e:da:a7:96:61:1b:5d:84:
                    36:99:c9:d7:df:e0:2d:79:93:f8:0b:ed:f5:a1:f0:
                    5a:fc:9f:52:1a:0e:ba:64:97:24:2c:fa:c7:22:c0:
                    a9:73:69:b0:a5:8f:fd:73:32:a5:e0:b9:a5:7c:a4:
                    75:da:d6:3b:ef:9a:5f:13:c4:e4:21:59:8d:c7:e8:
                    b1:15:6f:f0:86:a3:63:82:1d:4e:cb:3c:a1:51:da:
                    a3:d4:fe:36:d2:d7:e8:c4:6c:88:3d:5b:b4:3a:94:
                    c6:75:c8:1b:87:e2:12:f9:b4:ef:e8:6a:f7:6e:bc:
                    e1:18:a4:e9:26:37:a8:82:43:a9:30:3a:42:20:db:
                    b9:3d:ec:c2:32:fa:cc:f9:15:df:43:86:63:fa:c5:
                    7c:04:a8:e1:e7:1c:2f:bf:9e:51:15:b1:1c:64:ff:
                    66:66:e1:0b:cd:ce:dd:3f:3e:b1:ca:6f:d1:86:ce:
                    84:1d:4a:de:fb:f5:91:36:28:d9:fa:47:24:d3:05:
                    e7:a4:b0:d2:cf:2d:af:8f:38:d7:82:fc:70:ce:2f:
                    42:13:ba:ee:81:b2:fb:6b:6f:c5:b5:21:cd:fe:0e:
                    e6:8e:1e:54:27:38:47:29:43:93:64:bd:d9:30:e1:
                    6f:9b:cd:b1:2e:7f:63:57:52:4b:6c:bd:21:9d:33:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:22:AD:FF:39:0F:C5:C6:F5:37:50:CC:61:1C:3D:A5:52:9D:47:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fdc448-4b57-38ef-9d9e-c29e88b1b654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:27e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:84:a1:ff:81:e2:a1:ee:32:d4:98:96:02:9c:a7:59:be:16:
         28:c7:c6:67:c9:28:d4:c2:e2:f6:ab:33:46:2b:69:8c:f7:06:
         7b:35:8d:9a:f8:e5:54:04:de:f3:ff:80:d1:fa:45:43:d1:60:
         e2:fe:b3:21:58:90:9e:fd:f6:a3:50:ad:b1:a5:d9:fa:3f:ee:
         9e:9e:a8:e4:40:42:74:83:9e:50:c8:4f:a7:08:40:54:6b:dd:
         65:b4:91:00:ef:ff:06:5d:24:dd:e3:a1:fd:25:1b:ec:e2:9a:
         7d:25:02:f9:4c:0c:fa:81:3c:ca:62:3c:45:4d:2b:1d:ca:54:
         30:0f:91:fa:4a:92:ea:0e:e1:1b:34:9c:07:e5:10:ff:db:75:
         9a:0f:6d:2d:26:a7:a1:d0:f2:9e:32:03:e8:b8:06:b1:25:29:
         4c:13:fb:f7:af:7c:bc:b1:db:71:b3:d9:41:93:ad:37:2f:00:
         e5:8b:9b:74:b6:2b:d2:c6:c2:aa:c6:29:00:fd:01:7d:af:88:
         dc:d1:19:78:e0:85:58:30:48:7f:29:24:2b:28:ad:d9:ea:ea:
         85:4b:d5:a3:3a:a5:38:77:65:a4:e4:0c:a2:68:c4:8b:0c:4d:
         d8:71:ae:ff:ce:d4:ad:74:d9:4d:9f:78:69:92:b0:d8:a0:cd:
         34:6e:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:50 2025 by rpki-client