Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed047f78-91b2-3688-b497-fc1002caae62.roa
File:                     ed047f78-91b2-3688-b497-fc1002caae62.roa (raw, json)
Hash identifier:          jVqAfAlhUwMQhAj6753s9V8r76jFsYFkl0pxG5DUdBk=
Subject key identifier:   0B:36:E8:69:2A:96:45:36:A1:48:91:86:8D:A1:79:AF:12:F0:F2:AF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E3718859FC75AE4F9000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed047f78-91b2-3688-b497-fc1002caae62.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     57332
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e3:71:88:59:fc:75:ae:4f:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=ad3fbeec-fa55-4ec1-a5b3-bf5159122a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a4:a0:75:9b:2d:c3:e8:fc:d0:c5:d4:4f:98:
                    ea:69:c6:e7:e7:69:94:8f:df:52:c7:49:54:f9:b0:
                    8f:c5:24:0c:ab:e7:f4:39:97:ad:62:c6:98:98:7c:
                    43:4a:20:93:13:32:15:e3:ec:7d:dc:6c:3a:95:ee:
                    db:39:83:c2:0b:5d:ef:f3:24:a9:67:cd:86:e6:67:
                    da:51:95:a5:6b:13:96:2e:56:9a:ee:ec:d4:2f:40:
                    1e:69:c5:cf:6a:3d:75:d2:97:dc:7a:93:6e:82:86:
                    bf:78:74:fc:96:d6:8e:dd:f9:03:fe:c2:90:48:f8:
                    07:d8:7a:70:48:f5:f0:29:26:26:e2:33:4d:da:99:
                    d4:69:a9:91:2f:ab:96:a5:59:ad:75:e8:19:38:72:
                    ed:f3:28:c9:ef:46:1e:9f:e5:60:92:a0:aa:e4:0e:
                    63:ff:d8:18:95:7d:4c:d9:2f:d8:a9:0a:b0:4b:4a:
                    63:12:d8:34:2c:fb:9f:d0:9b:02:ec:ce:fa:18:9c:
                    e9:de:a9:28:d6:68:a1:26:18:fb:34:0e:a0:4f:80:
                    4b:73:6a:78:e0:36:86:1b:2c:fb:0d:67:1e:c7:f1:
                    cd:d3:8c:0c:ba:40:7b:e4:f9:79:84:2f:ce:22:93:
                    02:ce:1b:4b:98:2d:6f:52:23:b5:4c:fe:30:a8:0b:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:36:E8:69:2A:96:45:36:A1:48:91:86:8D:A1:79:AF:12:F0:F2:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed047f78-91b2-3688-b497-fc1002caae62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e6:d7:bf:cb:61:d3:7f:41:52:6e:7c:17:5d:42:1a:96:d1:
         2b:86:99:48:6b:2c:d0:bd:a8:7f:01:f5:24:ef:56:7a:74:19:
         ab:25:8d:f5:06:9f:fb:d2:95:e6:a1:67:c2:2b:da:7a:86:0c:
         9e:dc:74:b2:fa:b6:4f:7f:6a:f2:af:f5:1c:1f:62:66:bf:ca:
         fc:2a:98:01:b2:b7:f4:1e:e2:15:5c:b6:12:bb:b9:ad:18:b3:
         3f:53:8b:5b:7f:86:79:71:05:16:25:21:ff:b1:ef:29:f6:2f:
         55:4e:ee:8d:5d:25:15:2c:d8:6d:db:86:39:a8:d9:c0:b1:f3:
         39:86:d3:18:ad:40:e4:92:ae:e7:f5:6a:4e:68:62:e8:94:39:
         ce:dc:ae:a1:5f:8a:8a:04:55:e9:b3:00:ae:c7:63:44:e0:7f:
         03:6e:d7:2e:9e:91:88:1f:b8:35:20:5f:4e:c0:0f:18:f9:c3:
         3b:65:7f:84:54:35:81:36:cb:08:b2:f2:65:67:a7:c1:a6:c8:
         8f:97:ed:30:43:16:0b:2c:ff:a3:0b:fb:0d:85:64:d8:e4:45:
         20:59:f1:f2:33:98:2d:80:e7:ca:e5:e8:33:c5:fd:8e:35:0f:
         bb:52:ed:77:c3:6f:03:00:c6:ea:3f:a2:ed:86:07:9f:54:4f:
         4c:db:2a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:00:36 2025 by rpki-client