Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f62d774c-63e0-3978-be04-29a55eec605b.roa
File:                     f62d774c-63e0-3978-be04-29a55eec605b.roa (raw, json)
Hash identifier:          C1gAxPYV8OQJX3dmSg7QX0dy1BE5J8AxUXGBjOMo7so=
Subject key identifier:   E2:AB:B9:3A:BD:52:9B:24:5F:51:CE:24:9B:DD:2F:EA:EC:B1:5D:84
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926C3C3AF80AD6999603CC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f62d774c-63e0-3978-be04-29a55eec605b.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     149493
IP address blocks:        2001:470:162::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:c3:c3:af:80:ad:69:99:60:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=71c897ba-bcc3-4a83-bd8c-71f6d98f11eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:e1:e0:ea:ce:b7:24:39:f6:39:9f:36:6b:
                    97:fb:24:4e:79:98:05:e2:60:4d:55:25:d4:b9:50:
                    e9:1b:40:eb:c4:ce:d5:3e:ef:3e:40:af:3f:dc:49:
                    ec:01:b6:bd:66:58:1a:d9:b4:6d:a2:f4:91:7b:17:
                    46:20:c9:1e:5f:f5:84:c8:75:6a:17:e3:fc:4f:d3:
                    0a:c8:cd:3c:18:6d:ee:ae:62:fc:62:c7:0d:54:cb:
                    87:40:aa:74:eb:30:72:19:1a:75:50:e7:ec:61:6c:
                    86:5e:2c:5d:15:cb:30:f1:3a:61:0c:3e:c1:a7:3b:
                    b4:b8:73:dc:34:e4:67:63:30:e1:1e:a7:da:8e:62:
                    85:20:8e:79:72:32:3e:0d:6b:dc:ec:ed:67:ca:7b:
                    df:d4:c6:5a:23:4c:9c:e1:de:35:ad:03:64:99:af:
                    59:c6:5e:28:6c:26:15:15:7f:c6:df:59:0a:05:b4:
                    d4:18:39:15:12:87:44:16:d3:a5:9a:dd:ea:aa:db:
                    cf:71:40:db:6c:00:1b:f0:43:40:a0:1c:f6:f9:ad:
                    25:8a:c1:49:7f:a9:b3:d4:5c:99:e1:4d:2d:de:f9:
                    af:2f:02:60:b8:09:a4:8c:4c:bd:97:da:f9:37:3e:
                    5f:41:bf:dd:8a:67:c9:58:14:76:3c:49:c1:1a:f6:
                    d5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AB:B9:3A:BD:52:9B:24:5F:51:CE:24:9B:DD:2F:EA:EC:B1:5D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f62d774c-63e0-3978-be04-29a55eec605b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:162::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:77:97:99:54:5a:b2:17:4e:8c:9f:03:4a:c1:4e:48:d9:
         73:d5:d3:19:c1:40:be:09:ee:7d:1b:f8:57:20:02:3d:a9:f7:
         23:ac:21:cb:9f:fb:61:8b:29:94:d6:51:e3:02:86:5e:98:36:
         cf:8d:e6:e8:68:bb:32:ed:cb:7b:62:f0:bd:f2:6d:96:c9:8b:
         ea:7c:01:75:4e:81:dc:ad:b5:9f:17:95:03:43:09:89:30:a7:
         52:42:cf:c8:14:7a:41:b6:53:b5:70:8c:f6:13:f7:d8:b4:22:
         6f:62:80:35:95:23:3c:2c:62:91:50:bc:29:d1:31:fb:6b:e2:
         b0:fe:af:86:5b:a9:7c:a9:1c:36:8e:69:93:5d:10:ba:05:e0:
         b2:a6:66:cb:53:2b:02:fd:9e:c5:bb:b5:f0:82:1a:8b:14:7f:
         4e:1a:df:b2:5a:43:b6:20:e9:bd:1e:e2:46:db:fd:e5:8c:a5:
         3c:4d:49:1b:e1:5a:e7:2d:f4:e8:a3:3c:f4:12:b5:0e:8a:8c:
         99:ba:24:e3:ce:40:d4:68:f9:31:31:35:b9:45:68:b6:3c:a0:
         83:43:57:b4:cf:0c:03:c2:7f:88:f7:8d:6d:13:35:bf:19:a0:
         ee:fd:ca:80:ba:73:f9:1c:54:9c:ae:52:4f:76:ce:89:aa:14:
         87:29:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:50:31 2025 by rpki-client