Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7a788042-3a40-38a7-a085-0d49e73e0d57.roa
File:                     7a788042-3a40-38a7-a085-0d49e73e0d57.roa (raw, json)
Hash identifier:          YQ32Xu58vIuR6lCMVDW9Qk1GW8zGwL0pacw6SjXpsik=
Subject key identifier:   DF:69:47:71:26:C0:E6:5E:AB:36:24:55:05:92:96:69:3F:01:BE:83
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849CA78A1D7C4EA8A63E1EF6A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7a788042-3a40-38a7-a085-0d49e73e0d57.roa
Signing time:             Fri 09 May 2025 01:30:10 +0000
ROA not before:           Fri 09 May 2025 01:30:10 +0000
ROA not after:            Thu 07 Aug 2025 01:30:10 +0000
asID:                     23657
IP address blocks:        2001:470:460::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:78:a1:d7:c4:ea:8a:63:e1:ef:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  9 01:30:10 2025 GMT
            Not After : Aug  7 01:30:10 2025 GMT
        Subject: CN=4e10353a-81c9-435d-88dc-1a6017e6c654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:3d:04:27:03:ea:64:a1:e7:77:c4:54:d3:
                    9e:6d:f7:15:b7:0f:86:0b:b9:13:49:6b:28:85:de:
                    fb:21:02:d7:51:b5:28:30:d4:86:60:03:23:7f:7f:
                    05:c9:9e:18:96:b1:90:77:6e:90:3b:aa:6e:ee:a1:
                    bc:cf:6f:69:68:14:2c:85:30:03:c8:62:ee:94:2a:
                    da:3c:d3:34:b2:3c:b9:fc:e6:e5:34:1d:3a:67:a8:
                    89:26:de:67:4c:ca:59:5d:09:8a:cf:1c:1d:3b:34:
                    52:de:32:44:68:83:12:06:5e:96:1e:6d:4a:10:18:
                    c6:ac:c7:ef:7c:d5:64:4a:b7:b7:38:ba:10:fc:a0:
                    55:ba:a2:b1:7e:49:60:ec:14:39:72:04:f1:3a:41:
                    8a:1b:3c:e1:4a:27:a3:7f:cd:06:e3:d6:1d:1b:39:
                    a4:be:7f:92:60:72:5c:05:ca:ec:fb:74:e9:0f:da:
                    60:e8:6a:5e:d8:46:99:ac:12:24:a7:ef:e8:51:68:
                    bd:a0:9e:cd:91:fc:5a:95:56:31:c4:39:99:b5:ea:
                    ec:58:18:a2:16:4a:47:11:d8:99:97:7d:64:c8:e5:
                    1d:ce:93:fd:f6:70:bb:ea:58:0e:a2:d6:99:cd:8b:
                    6f:78:c7:26:fa:4b:d5:e8:61:59:c0:82:a8:e2:3d:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:69:47:71:26:C0:E6:5E:AB:36:24:55:05:92:96:69:3F:01:BE:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7a788042-3a40-38a7-a085-0d49e73e0d57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:460::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:53:f2:04:8c:0a:1b:1d:bf:c8:94:ce:94:70:b2:d6:33:
         68:85:e3:4b:3f:23:bf:88:e4:c0:2a:ff:39:30:62:b8:1d:68:
         3b:12:3e:12:a3:43:85:b6:e6:8c:9a:45:08:1d:a0:2b:95:35:
         9c:a8:03:d5:4c:67:21:06:45:88:89:35:3c:81:5e:2f:54:e1:
         c1:b8:53:f0:ec:54:83:e7:e0:4a:8a:fa:97:15:b7:65:04:5f:
         4b:4d:c7:50:67:c6:7e:42:09:1a:26:3c:9a:5a:0e:66:4a:03:
         97:e2:0c:96:ba:31:b8:2a:6b:6a:79:42:54:d7:c3:77:9c:90:
         a5:a5:76:5e:e0:f8:ee:b8:0a:56:81:14:36:d9:14:a1:eb:91:
         c0:c2:73:82:5d:14:73:61:36:56:58:bc:b7:94:0d:1d:20:d7:
         a4:dc:dc:9b:2d:05:4a:87:8d:da:2e:ee:7e:2b:f3:e5:3b:d3:
         a0:57:d1:c9:79:32:d1:a5:3b:92:1c:6a:9c:c7:71:a8:b0:a8:
         b4:5e:55:f9:31:db:7a:c3:e8:dc:22:e9:04:85:6f:1d:c7:9e:
         75:6d:64:8f:ba:13:d0:1a:9e:5f:ff:72:d6:b7:a9:f5:69:b2:
         e8:58:8f:82:37:35:bb:11:bc:3b:ca:9f:94:a1:36:88:10:87:
         d5:10:82:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:43:22 2025 by rpki-client