Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe0e7217-9ad9-358e-ab5c-5558f41e58fc.roa
File:                     fe0e7217-9ad9-358e-ab5c-5558f41e58fc.roa (raw, json)
Hash identifier:          sGllc2ETlQXio4uBoU33akl3hzSm1hBATOHjfanuTLQ=
Subject key identifier:   CE:A3:77:4F:B3:1D:20:9F:2B:9F:CD:20:E9:CF:86:BC:8F:4B:D1:F9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849F2E5558B84B1F2338F489B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe0e7217-9ad9-358e-ab5c-5558f41e58fc.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     397593
IP address blocks:        2001:470:141::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:55:8b:84:b1:f2:33:8f:48:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=0f78e19a-59fd-4ab1-ab24-1925a8d414f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:c9:e2:dc:1e:2c:85:82:19:5c:f8:9e:a2:
                    5f:6b:da:22:ee:7a:09:30:5f:f5:af:9a:5c:e5:8d:
                    ca:81:9e:c9:86:74:27:36:3a:97:4c:b4:a3:07:08:
                    7b:e4:ed:43:9d:80:54:c2:24:92:bd:b5:8b:d7:3b:
                    7c:1a:57:99:98:bf:92:28:32:14:06:c9:05:20:71:
                    be:b1:55:0b:bb:f8:9c:a4:8d:33:58:5a:00:da:fe:
                    19:65:f7:9d:61:c9:be:08:7b:0d:3e:9c:4f:67:c6:
                    45:3c:4f:91:a4:ff:f7:ca:22:e7:f9:bf:02:97:f9:
                    3c:85:aa:70:1a:43:e3:96:6e:bc:2a:9e:35:26:de:
                    d6:7f:e4:10:48:ae:0a:2d:e6:8a:40:b1:b4:76:2c:
                    5d:38:6d:ad:d5:72:16:20:18:94:53:dd:4b:f5:0d:
                    98:a9:aa:c0:d0:8d:49:2e:a7:a6:67:4b:8c:6d:b7:
                    2a:9b:73:d0:9a:bf:8f:85:19:3a:9a:ab:a6:e6:e1:
                    90:c8:25:19:12:12:c8:91:28:80:21:79:84:ef:2f:
                    0c:bb:8f:e0:de:1d:14:99:d9:cc:83:f2:31:9d:c2:
                    35:2e:7f:c0:be:0b:da:0e:61:49:f3:12:8e:4d:03:
                    a9:4f:81:52:8a:5e:f4:b5:94:57:17:9a:0c:de:14:
                    e1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A3:77:4F:B3:1D:20:9F:2B:9F:CD:20:E9:CF:86:BC:8F:4B:D1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe0e7217-9ad9-358e-ab5c-5558f41e58fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:141::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:53:f7:95:76:3c:ea:84:5e:80:9a:13:8b:42:89:3f:90:7d:
         2b:fb:f2:a6:c4:dc:a9:78:12:68:8a:51:29:06:bd:71:40:cc:
         0f:ae:56:8d:56:09:2b:26:58:3a:e4:10:20:42:dd:b2:d5:18:
         f8:bb:19:bd:bc:a6:35:d5:42:5f:cc:61:8d:b6:a1:9f:4c:1a:
         7d:85:7c:96:4a:38:99:15:2b:86:75:a7:ce:cf:2a:57:29:fc:
         a1:fd:ab:56:0e:ec:ff:15:1e:af:e7:0e:e1:8e:95:c5:5d:9b:
         98:5d:df:52:50:7b:aa:d3:7d:ce:43:ab:96:08:ff:08:12:a3:
         ae:44:a1:df:1b:a6:0b:e1:90:b0:0c:5c:ff:a2:07:b3:7e:cb:
         1b:d7:a0:04:2d:a7:5c:05:75:47:6f:85:fb:94:19:3f:df:17:
         e9:9c:d7:a4:2e:bc:a9:f1:d7:8f:09:62:d4:c8:ba:32:4f:84:
         df:d1:36:91:9f:1a:78:0b:36:ab:c1:8c:b0:1f:10:89:94:fd:
         fb:7a:31:68:74:f2:af:f1:79:f4:f5:5c:28:50:0f:16:08:c5:
         c3:7f:14:15:ae:9c:79:e6:ae:45:90:64:86:62:48:58:d5:68:
         7e:28:4f:94:87:7e:98:03:d8:16:09:40:b7:78:64:80:63:ef:
         d0:74:d2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:11:41 2025 by rpki-client