Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f032d287-0e73-353b-885a-96a49e64dc8b.roa
File:                     f032d287-0e73-353b-885a-96a49e64dc8b.roa (raw, json)
Hash identifier:          r/4i1gGWWpm4ZgKEX+NKTe6w/K0wqy9Dl90+oX8iLfk=
Subject key identifier:   41:46:0F:A2:73:83:C7:26:C7:FC:3C:A3:00:28:EF:A3:6C:B1:A0:3C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A10353154FD7B432476B64960
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f032d287-0e73-353b-885a-96a49e64dc8b.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     44209
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:31:54:fd:7b:43:24:76:b6:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=a0871a95-a970-4d37-ad87-0fd864c573aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:0b:bc:92:04:49:59:63:4f:62:45:77:34:
                    a8:7b:c1:30:f5:2f:cf:ee:45:94:88:cd:32:b3:d0:
                    58:9d:b0:45:2a:d5:b4:9f:21:09:1f:c3:8d:42:92:
                    24:1d:09:c5:09:d7:d1:9e:ed:41:1c:22:c5:71:8e:
                    16:0b:d4:a0:65:99:9e:be:b9:32:e5:56:f1:6f:c8:
                    ab:eb:7a:f0:27:c1:fd:8b:95:56:d9:7f:c1:db:55:
                    35:3b:47:cb:ce:90:00:c1:4a:4e:90:d9:9e:74:f7:
                    14:01:8e:3f:0b:20:b5:7b:67:3b:d9:7b:ec:e6:d7:
                    55:47:e9:a2:52:60:d6:2c:e1:b2:82:d0:b6:0a:d0:
                    e2:fc:a4:fa:41:48:bd:74:25:f6:7f:9d:ab:f3:43:
                    d1:55:e1:62:11:5e:0c:08:be:5a:a2:4e:45:3a:da:
                    78:0f:35:82:19:2d:dc:6b:78:1b:c5:07:6a:9c:a9:
                    af:05:3c:c2:0f:32:fd:e8:fd:ea:14:f7:24:74:d3:
                    e0:26:f2:63:bb:dd:17:b0:27:5a:1c:36:3c:d6:f2:
                    9d:22:00:1b:ad:0d:d1:63:f4:61:2f:df:e8:08:45:
                    0f:d2:48:e8:f2:e7:6e:46:7a:dd:b0:c0:1a:56:ef:
                    57:a1:be:32:71:bc:fd:a1:2e:2d:a2:ec:fb:be:ca:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:46:0F:A2:73:83:C7:26:C7:FC:3C:A3:00:28:EF:A3:6C:B1:A0:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f032d287-0e73-353b-885a-96a49e64dc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:db:bd:d3:76:63:cc:e1:2b:c1:68:4d:72:a9:6d:7f:6e:62:
         bd:5d:43:e3:ec:ec:8a:47:6b:d3:54:91:f1:dd:91:16:96:e7:
         2b:dd:3a:42:1b:e8:e1:fa:ed:50:21:cb:84:60:46:b9:20:ca:
         e2:e0:d0:b9:63:92:8b:e5:f2:42:45:80:0f:15:c1:b5:e5:ce:
         09:9b:c7:a9:c7:2a:27:1b:5f:84:25:dd:cb:27:f0:b8:54:cf:
         7f:e0:5e:3b:9e:81:aa:bf:7c:8e:b9:f1:18:ba:38:1d:b6:e6:
         d8:f9:e2:48:f0:b2:fb:7a:27:54:a2:9d:c2:00:bc:93:06:9a:
         1b:5e:02:97:44:ec:79:b6:64:bc:88:7e:17:8c:6c:f1:f2:36:
         2c:8f:1b:14:b3:12:13:ba:cc:ce:b4:3e:09:ef:b6:67:5e:d1:
         ca:c0:93:73:75:a8:7d:93:db:04:b5:bf:33:82:a6:c4:62:b6:
         c3:08:d8:86:9e:db:d9:fe:6f:9b:67:fe:e9:36:af:91:9e:80:
         a0:0c:1e:dd:20:ec:88:6b:fd:21:60:d1:ba:f2:10:15:7d:ec:
         90:d7:c2:b5:7f:a7:cc:66:e8:56:51:b2:8e:e5:e4:66:42:54:
         a9:f2:00:da:91:e4:90:2c:f5:08:91:69:69:1f:51:b4:73:c4:
         7f:06:c8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:53:44 2025 by rpki-client