Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e5f939-6a8f-300e-937e-a24e55c52f27.roa
File:                     f7e5f939-6a8f-300e-937e-a24e55c52f27.roa (raw, json)
Hash identifier:          Ut/5CO/CmipfJ3Sr+bEbdsuTiny9yhkUzchaHUY1Q9U=
Subject key identifier:   96:DD:EA:06:E9:CE:6A:BF:6D:45:D0:BA:61:B9:96:D9:A5:A1:56:B9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584843BEAAF2F577FB2EE92138A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e5f939-6a8f-300e-937e-a24e55c52f27.roa
Signing time:             Fri 20 Dec 2024 02:30:13 +0000
ROA not before:           Fri 20 Dec 2024 02:30:13 +0000
ROA not after:            Thu 20 Mar 2025 01:30:13 +0000
asID:                     35075
IP address blocks:        2001:470:112::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:be:aa:f2:f5:77:fb:2e:e9:21:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 20 02:30:13 2024 GMT
            Not After : Mar 20 01:30:13 2025 GMT
        Subject: CN=d6b3484f-659f-4f23-bb1d-76638a350c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:70:f2:66:34:89:e6:91:7e:e5:9e:a8:55:
                    ac:50:a9:2e:c9:b2:ad:6b:bd:5a:e9:ab:27:a9:98:
                    73:1a:d1:e0:01:f0:81:e3:03:3f:1b:d6:35:8e:ef:
                    bb:2b:8a:d5:ab:82:99:29:3f:5b:a2:cb:9c:14:3d:
                    7d:12:1d:a1:64:40:03:cd:0f:bf:8f:7c:24:e8:72:
                    8a:81:a5:95:fd:a4:89:37:e0:3b:99:da:5f:b0:92:
                    07:35:b9:2d:3b:b3:20:79:27:a7:59:a9:9f:0a:6d:
                    84:7d:23:ff:5e:25:d4:32:a4:ac:29:a4:43:e7:99:
                    08:47:d0:56:19:66:fc:be:bc:94:42:d2:d0:0b:a0:
                    2d:0d:e3:eb:83:f0:a0:ad:7f:63:6d:05:29:86:02:
                    32:e3:2e:4b:70:1a:52:98:ab:53:3a:03:02:62:7f:
                    b6:13:46:c5:ab:75:d5:2b:8c:ac:08:be:5a:44:ac:
                    ff:12:18:d3:a0:ac:71:57:52:9b:ee:84:74:1a:6a:
                    e1:18:7f:fc:2e:c9:3f:06:27:dc:32:73:b4:83:35:
                    21:34:57:7c:7e:9b:e2:05:a1:cc:34:0f:08:81:60:
                    3d:ba:b5:86:00:2e:18:dd:e5:2f:49:12:a4:1c:e9:
                    e9:b3:2c:36:54:16:95:a5:cc:5f:a8:7e:c9:e2:e4:
                    6f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DD:EA:06:E9:CE:6A:BF:6D:45:D0:BA:61:B9:96:D9:A5:A1:56:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f7e5f939-6a8f-300e-937e-a24e55c52f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:99:87:70:f9:69:04:9c:94:3c:99:1c:4d:b7:a0:52:b0:8b:
         0e:9d:de:9b:04:42:3c:7b:72:f0:8d:ba:f2:73:9e:41:5e:45:
         9d:a5:4c:47:f8:58:a6:cb:67:4d:d4:7f:d5:3d:d4:e5:13:f2:
         3a:d0:ad:88:e7:08:8a:50:3d:4a:82:c2:9b:d0:5d:20:3b:d2:
         cb:41:32:5c:6d:11:6e:d6:62:73:84:23:42:e8:93:f8:fc:20:
         c8:2b:72:40:a8:5e:c8:6d:ce:a0:0b:d9:51:94:73:47:51:b8:
         1c:7d:80:ab:c9:fb:90:01:31:1d:0c:ca:5b:d4:26:81:c5:fa:
         76:6b:e6:69:32:b8:b0:25:e9:e4:8d:ef:cc:27:2d:b4:00:59:
         97:94:a3:5a:63:11:de:33:48:d9:0a:10:43:c7:d0:ce:d8:0f:
         37:1b:60:1f:8d:82:7f:ab:18:ce:45:ec:88:87:5a:e3:fa:eb:
         4c:89:8c:cf:86:be:6f:38:db:6e:1e:c6:e9:ed:d2:d6:74:9a:
         71:29:66:4e:b5:e1:64:4f:28:0b:8c:ad:00:35:44:e5:e6:5a:
         15:93:3c:13:87:18:1f:91:a4:7c:dc:40:57:1d:52:87:cc:31:
         fa:9e:6c:24:f7:13:eb:50:d5:2d:0f:05:8e:02:94:46:da:5f:
         2f:94:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 14:56:34 2025 by rpki-client