Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa
File:                     f6509623-abdc-366a-9b44-a90f59cbe42c.roa (raw, json)
Hash identifier:          6JmpUUi8SRiGPklE8So9TnBLct3YvHMW4Fu4bkvmZY4=
Subject key identifier:   F2:5E:CA:61:04:F4:1D:2F:C5:9F:C1:1D:A0:5C:0D:16:DE:01:5F:D4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848B36A0733D4DF3B839B068474
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa
Signing time:             Wed 29 Jan 2025 02:30:13 +0000
ROA not before:           Wed 29 Jan 2025 02:30:13 +0000
ROA not after:            Tue 29 Apr 2025 01:30:13 +0000
asID:                     34979
IP address blocks:        2001:470:405::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:6a:07:33:d4:df:3b:83:9b:06:84:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 29 02:30:13 2025 GMT
            Not After : Apr 29 01:30:13 2025 GMT
        Subject: CN=e0c9b178-e0ae-400b-8d62-4c4acd86a207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:cf:ab:c0:0b:fd:44:1e:5b:e4:9f:c4:8a:
                    69:4f:33:4d:af:32:b4:45:a9:e8:b9:33:19:c5:de:
                    48:18:ac:e5:a2:e9:28:0a:cd:a1:19:e4:2c:c8:07:
                    12:2a:7f:e4:d6:37:40:9b:23:a1:1c:6d:b8:63:cc:
                    00:87:ab:a6:6e:53:70:97:c1:05:8c:d0:4c:c6:b3:
                    4e:11:0f:2f:95:86:76:12:bb:0c:a7:1e:db:c6:d0:
                    7e:ad:9c:60:47:ea:f5:3e:72:f0:8b:1d:a0:d9:6b:
                    ba:85:7a:96:31:35:f6:a2:77:db:26:c3:b6:2b:bd:
                    31:dc:77:ef:ee:b3:81:1c:a1:97:f9:cb:02:5f:aa:
                    75:b0:07:36:0b:7e:dc:18:bd:73:af:6f:8f:8a:bd:
                    b3:74:ad:bf:85:b0:8d:57:89:de:14:08:b4:ac:87:
                    42:db:1e:be:84:7b:1b:d9:5a:a9:ed:0a:95:38:fe:
                    13:a7:2a:a2:7f:68:6f:59:cc:f8:2f:f1:f1:63:d8:
                    d9:04:f1:9c:aa:20:3e:f3:2d:b4:27:ef:62:cc:a0:
                    0e:f3:ce:05:51:de:4c:e9:71:95:ff:76:66:f4:6a:
                    aa:36:0f:3b:88:6d:8d:9c:bb:e0:1b:87:b1:a9:ec:
                    85:f9:53:85:68:03:8e:30:a1:c1:2f:e3:34:08:04:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5E:CA:61:04:F4:1D:2F:C5:9F:C1:1D:A0:5C:0D:16:DE:01:5F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:405::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:51:1f:aa:10:70:7c:84:f5:9d:0a:0f:8b:12:a8:a1:0f:a7:
         56:39:92:a2:10:9c:55:38:7b:be:f2:ab:bb:c0:10:08:55:c8:
         f8:16:5a:63:eb:d2:af:53:d1:8e:0e:b2:06:73:a4:06:50:4c:
         16:a1:e6:31:92:f0:77:6c:42:c0:56:ae:16:96:fa:45:2d:d2:
         73:0e:6d:83:e5:fa:dc:77:5e:4b:62:32:d8:80:70:43:d3:97:
         06:6b:15:ef:21:5a:f7:42:16:63:60:c9:80:58:07:2d:96:34:
         6a:4c:92:ce:47:36:8f:fd:71:a0:2c:86:b0:ac:3f:29:e7:2a:
         76:1e:3b:a9:77:bb:d9:67:02:ea:40:5c:6d:6b:3a:d2:f7:95:
         91:21:78:4e:fa:3d:d2:cc:95:83:7f:ad:98:de:33:b0:82:a6:
         9b:1f:c5:a6:61:af:9b:58:bd:6f:76:11:11:46:04:e3:86:f0:
         41:1d:58:20:8f:8c:e9:35:e1:5f:c4:32:32:24:9f:7d:7f:61:
         8d:21:fb:02:25:89:06:8b:9b:fd:a9:9b:e7:07:45:e7:58:69:
         aa:e8:ca:24:8a:04:f0:70:a5:36:8e:09:9e:0b:ec:2c:33:fd:
         94:46:e6:f4:41:e2:a8:69:8c:da:4b:bf:a3:f0:1a:2a:34:cd:
         a6:1d:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:44:08 2025 by rpki-client