Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a96cc9f-684d-3801-a955-05bd23addfaf.roa
File:                     4a96cc9f-684d-3801-a955-05bd23addfaf.roa (raw, json)
Hash identifier:          XREmFVmGQXG+I6548Kg5RS6BTo7ehhK45LNAGQdLmJc=
Subject key identifier:   97:A4:88:48:47:3F:17:BC:74:D7:B0:45:9F:CE:FE:56:F3:F9:98:28
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849B844BCB3C2F16AA18113A8C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a96cc9f-684d-3801-a955-05bd23addfaf.roa
Signing time:             Fri 02 May 2025 13:01:00 +0000
ROA not before:           Fri 02 May 2025 13:01:00 +0000
ROA not after:            Thu 31 Jul 2025 13:01:00 +0000
asID:                     27887
IP address blocks:        2001:470:37b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b8:44:bc:b3:c2:f1:6a:a1:81:13:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  2 13:01:00 2025 GMT
            Not After : Jul 31 13:01:00 2025 GMT
        Subject: CN=6e9563e8-7e5d-4677-b6d4-aeb4fd8c4e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:a9:f5:fe:df:61:85:f1:54:5b:fc:aa:23:
                    74:ff:aa:c9:87:b0:0d:11:7e:e7:01:56:cd:51:11:
                    69:37:64:f1:a2:ec:cc:30:85:ec:e3:50:d2:e3:57:
                    46:99:96:03:c0:e3:c0:98:fd:78:bc:49:00:48:7f:
                    0c:af:ef:7d:e0:ab:aa:87:da:76:bb:40:82:b1:e5:
                    d0:77:31:6f:d8:5f:bb:2e:b7:d6:56:a5:70:0d:49:
                    c2:6c:67:1b:12:2b:f3:35:5b:58:7e:50:f5:3a:a6:
                    09:ee:14:42:0b:0c:c6:3b:11:4d:cc:b4:af:7f:8d:
                    13:3f:c1:c2:60:1f:ad:d0:68:b9:1f:29:62:34:55:
                    ed:67:64:09:38:f9:a8:91:60:f8:96:9d:db:0b:b9:
                    73:f5:81:f4:3e:cb:ab:87:9c:07:ac:95:e9:d7:7e:
                    1b:86:60:4a:4a:8d:47:84:5b:c3:65:20:5e:10:c6:
                    8c:6b:ef:3e:9f:31:20:8b:f2:33:64:a5:4d:ed:94:
                    5e:b0:fc:69:2a:c7:c8:59:b5:dc:39:71:1d:f1:ac:
                    ab:af:29:92:47:5e:f6:0d:61:3d:e4:1e:ac:30:b1:
                    76:bb:58:b7:03:2d:eb:bc:15:44:8f:b2:a2:97:31:
                    55:9d:9c:6f:7d:04:ca:73:e4:9a:46:a4:7e:eb:2f:
                    fc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A4:88:48:47:3F:17:BC:74:D7:B0:45:9F:CE:FE:56:F3:F9:98:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a96cc9f-684d-3801-a955-05bd23addfaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:37b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:68:58:de:ab:8c:3b:7d:ec:40:e5:f6:25:7c:31:ca:a3:82:
         de:3f:5f:5c:35:ea:7f:58:c9:3f:0a:9f:f3:ac:09:48:29:e8:
         67:e6:34:ad:b6:30:84:e9:ff:ac:7d:04:1f:7f:70:38:07:a0:
         19:a0:81:d2:da:73:8c:08:9b:25:17:70:b8:35:a7:81:db:97:
         cc:17:d7:a1:d9:48:11:e4:83:3c:e5:38:b0:f8:3e:9c:ae:93:
         66:08:08:1a:35:11:f2:63:60:2f:7d:04:dd:de:56:7a:eb:77:
         da:ee:3b:f5:80:72:77:03:3f:8b:a3:76:10:1f:6b:52:00:bf:
         99:bf:67:76:a8:7e:af:35:5c:ff:de:54:65:ea:67:b7:9f:a7:
         c8:6c:6f:ac:ad:6f:3d:4d:39:ad:e1:f2:84:46:4e:28:7f:75:
         f1:10:76:ec:2b:8e:c1:16:0f:0b:03:2e:27:8b:2d:63:f0:41:
         31:94:01:aa:3c:1b:ee:af:a5:ac:28:57:1e:57:f7:24:3f:94:
         68:43:74:b5:e1:af:41:91:0d:2c:74:d5:38:7f:58:a0:1c:da:
         af:5a:79:f6:9f:b0:ae:4c:38:88:27:a9:33:95:45:09:74:3b:
         ba:e5:64:68:7d:5a:d7:13:0e:a5:f3:51:81:e9:c2:f1:ab:60:
         48:8a:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:43:58 2025 by rpki-client