Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9135eb9-9a0d-3543-9a81-ef75464f30d1.roa
File:                     f9135eb9-9a0d-3543-9a81-ef75464f30d1.roa (raw, json)
Hash identifier:          nJ2IX9qppeXU9/07euh3YtyYZkcnlovZUIlgynyR3dw=
Subject key identifier:   A5:C6:DB:AA:22:6F:9E:19:03:F7:1D:AD:71:A6:3A:0C:97:44:48:2A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926CE6FDD25F1F318D4C2C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9135eb9-9a0d-3543-9a81-ef75464f30d1.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     150770
IP address blocks:        2001:470:25e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ce:6f:dd:25:f1:f3:18:d4:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=725b9c02-9f90-4c78-8a42-81265adad995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ed:5e:42:07:9e:bd:22:52:99:5a:fd:31:14:
                    de:43:da:a7:43:fc:aa:e2:4e:62:9c:56:c9:0e:64:
                    05:da:c4:3d:74:af:48:0e:b9:18:d3:f7:e0:fc:62:
                    3b:5d:88:f7:e8:b7:fa:df:be:ed:1c:23:a2:2d:1c:
                    c6:5a:e7:f5:cc:4a:f9:7f:76:0f:d7:91:21:5d:60:
                    a6:2a:d6:b6:12:db:4b:78:e9:58:4c:0b:4c:90:b9:
                    e9:61:f3:3b:57:0b:ea:4d:d9:ac:ad:40:b0:00:92:
                    6d:4b:89:d6:f3:78:f9:18:2d:3c:ce:fe:79:aa:e1:
                    d5:41:27:d5:19:31:76:bf:df:bb:ec:50:76:fe:e0:
                    50:9e:02:1a:10:70:40:13:df:f8:b6:6d:fc:96:ae:
                    19:bd:a6:e3:55:df:67:02:df:6c:ff:e5:af:ee:e1:
                    5e:49:8c:88:fa:e9:0b:f3:88:39:19:a7:82:ff:f6:
                    00:a1:b3:be:5f:0e:0b:6f:c2:3b:63:f7:61:2e:68:
                    63:68:b7:e7:0e:ed:65:d5:d4:26:a6:e5:9d:38:77:
                    f0:d9:ed:c9:a4:01:e0:e2:85:57:7c:ab:f7:ee:a9:
                    14:93:53:72:b1:4b:f3:ed:ad:49:80:c9:f7:f3:a2:
                    59:c2:2e:eb:38:a5:66:59:5a:ec:a7:cd:07:2e:00:
                    01:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C6:DB:AA:22:6F:9E:19:03:F7:1D:AD:71:A6:3A:0C:97:44:48:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9135eb9-9a0d-3543-9a81-ef75464f30d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:25e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:88:3b:50:ba:a7:82:82:9b:e2:29:a0:27:14:32:cb:a1:c1:
         32:3a:94:0e:46:54:17:54:70:0a:77:e7:25:56:10:8d:ae:d2:
         a4:4d:98:48:0c:d8:7a:a7:36:fe:fa:1f:47:f3:26:b6:65:b8:
         ef:d0:36:09:da:0d:59:fd:d3:af:3e:c1:1a:29:f2:77:bf:30:
         04:9a:a8:6f:b4:4f:15:ac:fb:70:85:96:ee:b6:16:ba:0d:75:
         aa:69:e5:c3:27:0d:12:ed:e5:73:c7:ea:2d:42:41:f3:d4:02:
         d3:30:24:4a:7b:fb:06:78:07:c4:e4:40:90:94:6f:bf:8a:1d:
         95:06:38:f7:6e:0f:87:4e:fc:8a:b0:04:57:6c:74:75:28:03:
         99:44:14:68:cf:66:f6:f0:2b:1c:dd:98:60:f6:90:da:59:a3:
         c2:22:b0:9b:24:8d:29:12:00:34:77:a0:af:86:f5:d4:dc:db:
         6c:96:fb:a3:7a:db:eb:5a:92:bb:ce:e4:c6:a8:fe:b0:22:9b:
         2a:f1:6f:05:63:27:8c:f2:22:23:72:57:0e:7b:ed:c9:ac:9a:
         78:ce:02:1a:30:a0:38:7a:75:80:93:c4:99:af:b0:ca:d3:84:
         33:57:c0:f9:fe:9d:ef:f6:0a:fc:d1:25:93:5b:af:a9:b4:f3:
         1f:fa:2b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:58:34 2025 by rpki-client