Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa
File:                     a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa (raw, json)
Hash identifier:          0EYM66p+sOBM/ABCmcxjAmFXeNCU/HF3srXN+Saqt9E=
Subject key identifier:   FC:4D:F9:55:60:E5:46:28:49:BB:C5:96:98:8B:19:E6:66:2A:BF:C6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FD98EE0190D4CFDA911D0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     393350
IP address blocks:        2001:470:58::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:d9:8e:e0:19:0d:4c:fd:a9:11:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=368f6e6f-36a3-450c-9bf9-b6629e070d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:fe:c8:ea:cf:ca:1a:29:99:24:b2:86:25:
                    e1:96:aa:22:d8:35:51:38:ca:7c:77:8d:cb:03:61:
                    8d:97:93:b2:25:c9:32:f0:e3:ba:a6:ea:30:82:1e:
                    1a:39:f4:5f:98:52:bf:63:ee:b4:76:24:0e:bf:2a:
                    fc:c6:bf:96:cb:5e:d4:e6:9d:39:77:91:39:b8:78:
                    20:cd:91:ea:5b:7d:1a:1b:4b:65:f8:d0:ba:a3:f2:
                    3d:a2:66:79:5b:5b:0b:f3:94:e5:df:44:c9:f4:84:
                    a5:da:99:3b:a5:36:43:0c:3b:fb:ae:5f:9f:cf:8e:
                    07:17:20:26:13:1f:39:dd:e4:8a:36:5c:c1:18:cd:
                    57:b0:0c:73:02:93:e9:0a:90:40:6f:19:d3:cd:8f:
                    6c:ba:68:5b:2b:dd:8b:cb:83:68:0b:65:ac:90:4e:
                    79:51:b6:7a:b3:1a:a3:fa:c2:e1:a1:4e:12:ab:7f:
                    80:22:a2:58:6f:20:f5:24:e7:ba:5b:54:e0:b9:1e:
                    b6:36:6f:0e:c1:93:c0:26:00:02:3f:9d:ed:f1:bf:
                    ea:95:fc:45:02:66:e5:8e:d8:00:17:f1:60:a2:68:
                    af:d8:78:73:18:18:72:a5:ea:97:bd:06:ff:cb:dd:
                    46:e6:77:a0:a1:14:be:05:fc:b5:09:f1:0a:cf:de:
                    d0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4D:F9:55:60:E5:46:28:49:BB:C5:96:98:8B:19:E6:66:2A:BF:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:58::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:38:65:f3:d4:94:b9:63:3f:a3:c5:46:78:8b:78:44:54:
         05:7c:bf:bc:c5:5c:00:40:9f:cf:7d:a6:b6:df:7a:a1:91:d5:
         ad:d4:dc:55:0f:cf:a6:7e:ec:bd:a6:a6:a7:1e:22:e5:c1:f4:
         42:17:41:04:77:79:b9:6d:a8:9a:9b:ce:7b:3f:c3:28:01:29:
         59:58:a1:3f:55:ad:f5:44:24:34:32:ad:0f:3b:da:e3:ca:79:
         17:e0:fc:23:2d:ac:a4:a9:76:05:9a:41:f9:d6:69:cf:c6:e8:
         18:d0:da:af:1e:4a:5f:f3:ac:60:ac:0a:83:3b:5c:05:22:59:
         88:73:cb:c7:56:45:88:e2:f8:5e:4d:7f:37:91:0e:75:e2:1c:
         c5:56:28:6f:56:a6:72:31:6d:f1:c1:1e:17:bc:c2:13:d5:2e:
         1c:a6:3a:7e:f9:4c:4c:ed:89:55:c0:99:b6:4d:38:16:50:7f:
         30:e2:35:44:99:af:c6:11:40:c8:04:c9:9a:29:bd:4e:b4:2a:
         11:b6:ec:9a:52:30:28:df:4b:be:38:26:e3:f9:76:4e:30:e7:
         2c:ac:f0:17:53:c7:44:1d:51:75:1e:56:08:ec:4e:b3:c6:b8:
         9f:1f:cc:e7:1f:bd:61:9d:e3:7a:5b:12:57:66:b9:a7:03:af:
         32:f6:73:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:57:36 2025 by rpki-client