Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6aa02105-780d-32a3-90d6-5b3599928828.roa
File:                     6aa02105-780d-32a3-90d6-5b3599928828.roa (raw, json)
Hash identifier:          KaAR4+PTxzsnUaHhsfQfVa7blCinyZbwCDmgsn0CFj4=
Subject key identifier:   E3:AA:BE:55:8A:FC:D4:5B:D0:59:03:6B:9F:B6:40:B5:C2:D8:79:46
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849AD1A1CC6430CCA14A65B5400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6aa02105-780d-32a3-90d6-5b3599928828.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     153183
IP address blocks:        2001:470:3c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:1c:c6:43:0c:ca:14:a6:5b:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=f48cfd0a-7b0b-4647-90ff-88af8049b555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:92:4f:dc:c8:16:1a:c0:a6:be:83:77:98:
                    59:8e:95:ef:a9:ce:c8:b9:8c:00:23:ad:39:31:7c:
                    4e:fa:92:ce:62:c8:40:40:ea:c8:3f:44:6e:fa:0a:
                    64:ef:e2:00:12:30:01:5f:1d:ba:63:42:86:6d:4e:
                    16:7d:30:cb:94:2b:51:9c:64:38:a4:b6:ac:f1:de:
                    91:73:11:07:ef:9e:63:c5:63:c2:da:73:01:7f:e2:
                    b9:78:3d:be:59:6b:bf:0d:8a:f7:13:ec:7e:64:91:
                    a5:7d:ec:17:b0:37:f1:b3:cb:00:8d:45:2c:55:a1:
                    96:50:77:a9:4d:ef:62:62:7b:45:82:69:68:78:11:
                    ba:27:f6:e3:40:da:d3:0d:3a:da:7f:6a:59:ad:9d:
                    67:6a:a0:cd:43:20:02:b5:b5:b5:3e:c0:84:a5:4e:
                    1f:24:92:7b:08:ae:0c:9f:23:51:81:87:00:49:e3:
                    f8:48:76:ab:8d:2b:11:e3:4b:3d:f3:6e:82:33:77:
                    58:f9:4a:80:26:32:6d:03:ff:32:70:82:02:bb:e2:
                    f4:bb:25:ef:21:52:77:63:18:3b:7b:6e:97:41:d0:
                    33:ed:f5:c7:6b:35:ac:96:ab:90:da:24:06:ee:b7:
                    ef:15:ed:bf:6d:d8:8b:80:9b:2e:5a:d2:41:21:34:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AA:BE:55:8A:FC:D4:5B:D0:59:03:6B:9F:B6:40:B5:C2:D8:79:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6aa02105-780d-32a3-90d6-5b3599928828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:80:27:91:ac:de:f3:0b:1e:52:9c:5c:85:78:9f:e0:37:6f:
         20:3f:2d:b1:57:41:6b:26:02:87:33:65:c6:10:0e:ff:7e:bb:
         a5:98:96:33:fb:09:b8:c1:ef:dc:3a:8f:c2:76:34:fb:2e:14:
         c4:a3:28:79:b5:2a:fa:5c:f6:b9:46:2c:bf:86:47:9d:ad:ba:
         99:d3:89:f8:fd:06:bf:55:6d:9f:db:ed:16:11:10:5e:59:ac:
         2f:a0:ce:36:72:c7:1a:68:ff:34:f4:37:50:40:66:9c:e7:0d:
         39:96:11:06:a7:6d:ca:03:f2:88:55:47:98:4a:7e:3f:79:b9:
         be:57:4e:36:3f:3f:5b:93:1c:80:9f:78:39:3d:eb:7b:ba:2c:
         c6:ae:31:e4:16:eb:06:7b:b2:91:cc:86:c7:9f:6f:f5:93:a0:
         0d:75:3c:67:d2:79:3a:42:ff:9e:d9:be:5e:e5:5f:8c:c4:68:
         a5:67:36:cb:9d:4c:2b:5a:94:12:f1:c4:f3:d8:95:9b:f2:8b:
         1a:5c:ae:e8:a4:26:53:6c:27:3d:76:3b:66:93:9f:18:ab:c7:
         00:13:36:b2:79:3b:2b:3a:f6:37:e7:85:69:e4:09:e6:e9:8d:
         74:34:4d:da:60:4e:31:32:71:5b:6b:16:81:fb:72:f1:1b:fb:
         f1:84:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:26:55 2025 by rpki-client