Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edd344b2-5952-3a71-9bd5-25828b792fa0.roa
File:                     edd344b2-5952-3a71-9bd5-25828b792fa0.roa (raw, json)
Hash identifier:          4yRDqbD+M/KvvOdP23U/Zzfvk0b66BbNgWT5v/N18qc=
Subject key identifier:   5F:0F:30:3D:6A:96:1C:0C:F8:FF:C7:82:58:B6:9A:7C:34:82:72:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A103532CEDC16A3063B38EC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edd344b2-5952-3a71-9bd5-25828b792fa0.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     62206
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:32:ce:dc:16:a3:06:3b:38:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=9f96efc0-d7b5-4662-ae56-0bb317770fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7b:02:26:7d:1d:58:6b:2d:70:0e:fa:88:0f:
                    51:dd:f6:ca:9b:2b:cb:42:6b:fa:87:ee:91:cc:24:
                    89:fb:3a:09:9c:04:4f:07:c0:39:55:ba:ed:9f:77:
                    90:66:bd:17:49:b1:39:28:3e:c2:37:23:13:b6:7e:
                    3c:6d:ae:3c:7e:7e:61:6d:ea:72:a2:53:60:62:dc:
                    05:c5:74:11:21:18:05:b3:50:ff:c4:8e:f6:4c:1a:
                    15:5d:46:5e:4d:b0:c8:ca:49:2b:a5:a7:3a:b3:f8:
                    8d:d0:f3:b0:ed:89:9d:a3:e8:d9:6d:63:c8:4d:c6:
                    bf:e5:e5:c3:fb:5f:d8:91:5d:c9:36:84:ed:bb:2d:
                    c8:d3:5d:cb:77:40:19:fd:1e:3c:05:0a:8f:ea:2c:
                    57:33:48:0f:5f:16:61:67:ab:63:48:bf:9e:68:57:
                    cc:de:50:0c:0e:7b:4d:39:e7:da:f4:f7:25:39:9d:
                    7d:a2:8a:cd:fb:6a:95:8c:e5:31:11:24:07:3d:07:
                    73:3d:f3:cf:e0:14:18:04:02:f3:99:1b:cd:a0:b0:
                    94:6d:16:97:b3:4c:04:db:65:b3:cc:38:78:a1:be:
                    cb:a7:3f:5f:d2:dc:23:e8:02:5f:94:28:13:48:ea:
                    e9:34:44:42:ee:38:4d:dd:1c:f8:28:e1:61:71:0f:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0F:30:3D:6A:96:1C:0C:F8:FF:C7:82:58:B6:9A:7C:34:82:72:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edd344b2-5952-3a71-9bd5-25828b792fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0f:13:70:75:cc:e6:48:13:98:d1:4d:54:a2:40:f8:8e:10:
         99:96:67:8e:80:64:3b:36:f7:ab:cf:bc:fd:96:12:31:e6:7c:
         95:6a:84:ad:17:af:0b:b1:35:eb:d8:4c:22:c5:79:01:d5:80:
         7c:cc:53:c4:04:8c:e4:67:98:24:79:ff:bd:47:8f:25:04:7f:
         24:76:d2:1f:3f:18:da:80:cb:3a:e6:c2:2a:0a:d0:f2:67:da:
         1c:d5:36:16:29:2c:fe:f6:d5:e4:85:4b:94:07:3a:d2:c5:61:
         21:47:88:9c:7b:9b:fa:f4:9c:6f:c7:89:61:69:88:4b:45:35:
         34:27:c4:fb:a5:7b:2f:ae:84:13:13:37:8f:b2:d9:f4:22:f2:
         58:39:e2:bc:99:04:f0:07:1c:0b:fb:19:f0:de:63:9c:c0:88:
         ec:c4:d2:05:45:f3:af:ac:90:f0:96:73:2b:c2:5b:f6:3b:01:
         37:a3:81:88:4a:88:db:0a:20:da:c8:40:0f:74:4f:31:29:5e:
         1f:e5:48:de:cd:6f:62:97:4d:81:b1:c6:10:0b:47:88:75:33:
         53:4c:c7:f0:e8:5a:39:2e:e4:73:74:9a:e8:3c:3e:42:44:35:
         7c:f7:64:87:89:b2:f4:49:f5:b8:45:7f:8d:4d:08:03:3a:e7:
         81:7c:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:22:04 2025 by rpki-client