Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa
File:                     89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa (raw, json)
Hash identifier:          cDf3bweTYgKpyeI9iHXHykQfM6XZotB5jvOVad7AyRo=
Subject key identifier:   6D:42:E6:15:40:A0:A1:D5:22:33:95:95:91:89:AD:CA:38:E0:EE:54
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FBD6832E29F2633242B40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     63370
IP address blocks:        2001:470:8d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:bd:68:32:e2:9f:26:33:24:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=75bbf5e7-cfb1-47ea-b2e1-a2063d873671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:21:47:04:f3:5d:5f:32:04:6e:26:da:0a:
                    68:dc:4b:b8:7f:ca:91:3e:fc:d2:7a:9a:dd:c3:e1:
                    97:b8:cb:18:02:dd:6f:49:5c:29:62:75:eb:35:e2:
                    18:1d:0a:9b:ae:5c:5d:00:77:91:87:a2:3b:fd:55:
                    21:5a:00:ba:70:16:8d:76:24:20:eb:2f:22:67:78:
                    e0:43:65:30:7c:0f:55:78:1f:f5:0d:3f:a7:5b:78:
                    46:ee:a0:13:58:ab:7d:0e:b1:fb:b9:a4:3e:47:fc:
                    e2:a7:65:d8:21:ad:39:72:92:91:89:10:86:5d:24:
                    6a:b2:69:48:1c:43:04:b4:f4:aa:3c:43:62:30:79:
                    f8:51:26:fb:04:94:8a:f0:b9:4f:89:2f:2f:1a:df:
                    9a:48:7a:cd:ff:20:f3:5e:bf:b1:cb:82:4f:6a:ed:
                    80:77:a4:b6:0f:16:72:d2:e3:13:74:79:3f:77:6e:
                    b2:33:a5:1e:b6:a9:1a:94:d5:59:d1:98:fb:df:a8:
                    49:fa:48:3d:96:c9:12:ed:cc:5f:28:6f:26:c6:db:
                    da:a8:e8:46:bf:39:d4:1a:3e:91:0d:1c:2d:6c:04:
                    69:eb:bd:e0:1e:1e:2a:ac:7d:cd:a6:46:16:1c:fd:
                    9c:b9:e6:1a:9a:b8:1b:25:8b:5a:ee:ba:9c:b0:24:
                    40:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:42:E6:15:40:A0:A1:D5:22:33:95:95:91:89:AD:CA:38:E0:EE:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:8d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:20:82:d1:0d:8c:c1:61:51:b0:14:2c:db:80:65:49:8d:5d:
         ab:70:09:ae:6f:12:63:be:f1:ec:c1:b2:51:90:b7:c6:18:61:
         b1:15:ba:62:a8:fa:57:7a:a4:3f:50:43:3f:74:ee:9b:a2:ad:
         eb:d3:eb:91:ed:a1:e7:75:6a:b4:3f:f1:c7:2c:5b:6c:e1:88:
         be:36:e4:cd:10:e4:16:31:97:94:79:3e:31:54:73:24:a3:b7:
         72:a5:23:bd:d4:a7:5f:1f:10:56:ae:80:c0:dd:16:1d:e0:4e:
         8a:c7:8e:d1:eb:d8:6d:64:f3:67:35:7f:a6:ff:4c:82:77:73:
         8b:c0:0b:34:5a:22:ac:8b:ce:56:55:5e:97:ba:ea:d7:07:90:
         4c:51:4c:1c:9a:84:4f:da:9e:f8:e6:3b:d5:21:b1:e6:0f:41:
         15:99:fd:55:86:3e:75:96:98:c7:da:36:ce:d7:c3:9b:7e:e6:
         4c:68:46:a5:79:0e:2a:75:43:f5:ab:8d:39:0b:03:48:8a:1f:
         e5:c6:36:9e:99:c7:c2:b0:8d:a2:23:15:b4:0b:40:e3:64:4f:
         9a:e3:8d:72:f2:61:0c:60:c0:ba:d7:43:53:5c:52:33:90:7b:
         bd:99:60:34:fe:cf:55:7f:35:57:52:79:d9:ce:a9:9e:7b:44:
         d9:71:5c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:51:30 2025 by rpki-client