Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4b7672c-c910-399f-8339-5fcbe1d106f9.roa
File:                     d4b7672c-c910-399f-8339-5fcbe1d106f9.roa (raw, json)
Hash identifier:          9NunA179WoEDiwUW03RPV7RYehL3wMjeu9x7rCzIVpE=
Subject key identifier:   AF:87:06:F9:90:7A:F0:45:05:E9:8B:E1:DD:47:D0:F3:A6:BF:A1:52
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FEB765A3E783B25BFD3C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4b7672c-c910-399f-8339-5fcbe1d106f9.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     133734
IP address blocks:        2001:470:313::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:eb:76:5a:3e:78:3b:25:bf:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=83ef84ab-b696-4911-8946-4853556ec700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6b:c4:55:d7:86:ca:f0:f4:38:26:2f:a7:1d:
                    63:b6:ab:a7:81:44:9d:32:e4:39:dc:44:fe:8c:ee:
                    2f:47:74:6a:12:81:b5:95:e2:44:4d:c2:8b:9f:3b:
                    01:f2:2c:cd:a9:88:b0:b5:15:60:89:96:cf:a1:32:
                    f7:5a:b3:dc:69:b6:f1:c8:22:c3:70:5d:fd:4e:d2:
                    cd:bf:c9:29:f3:b9:c9:f0:d4:6c:51:37:e1:de:f7:
                    54:3a:9f:49:09:6e:5b:5b:cd:17:02:0b:cf:b9:30:
                    ac:be:7a:e3:fc:a5:05:1d:5b:9e:45:fa:aa:0b:7c:
                    24:5e:a4:02:f2:34:64:50:19:71:62:0c:ce:b6:71:
                    d5:f6:e5:8c:06:d6:2b:e6:88:90:b7:76:bb:02:c7:
                    49:28:89:55:f6:a8:cb:fa:97:90:8d:7d:dc:2f:1c:
                    57:cd:ec:6a:01:90:ac:af:ae:17:2c:9f:44:69:85:
                    75:43:b8:71:f1:71:44:26:e6:b3:39:f7:94:83:98:
                    31:d6:e1:1a:19:29:72:cd:2a:83:d2:85:e3:48:d4:
                    7e:8e:27:08:31:af:86:d0:60:96:28:f3:3f:c3:3a:
                    25:7a:8c:2e:ee:69:b2:9c:12:1b:ae:9f:37:47:ad:
                    50:d6:a5:50:0c:a6:d1:3e:5c:f2:d8:4f:e9:a8:ef:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:87:06:F9:90:7A:F0:45:05:E9:8B:E1:DD:47:D0:F3:A6:BF:A1:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4b7672c-c910-399f-8339-5fcbe1d106f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:313::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d5:73:b6:cc:51:0e:80:2f:2e:99:09:dc:bc:af:b3:48:1b:
         7c:aa:91:80:62:13:53:05:0f:50:57:e9:00:94:10:13:bc:e5:
         5e:ae:93:54:cf:00:14:46:27:1a:df:97:d8:49:e6:15:29:bb:
         a4:71:28:11:0d:f3:5d:a4:e3:29:55:9c:ab:a2:bb:e1:5e:ff:
         21:2c:ff:70:62:92:60:c2:f7:f6:4e:34:6e:77:07:7d:9a:42:
         b4:e1:00:d0:c3:c8:a5:95:44:88:e8:5a:7a:67:47:a8:8e:c1:
         0e:af:e3:1f:76:91:cc:cd:3c:23:45:b5:bf:94:62:bd:6f:52:
         92:da:af:33:35:ca:d8:6b:78:e9:1a:35:52:a8:76:3d:ea:63:
         72:4f:48:2e:c2:0e:73:46:bf:3f:d8:fd:fb:26:16:c0:3e:6c:
         65:e7:28:95:44:13:41:f6:76:30:bc:25:f3:75:bb:b2:7b:c9:
         b1:d7:27:cf:56:a4:4c:3e:67:9a:5e:41:79:26:8d:e7:02:75:
         f3:6c:ea:85:f1:4c:78:d0:72:60:6f:95:5c:20:6c:95:51:1e:
         e9:94:ab:63:7f:ab:c0:8e:73:41:8e:39:22:ed:49:9c:33:ab:
         92:c0:c9:ae:34:a1:63:f7:ae:fb:e4:0e:7f:23:d8:1d:23:4d:
         a1:a7:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:24:51 2025 by rpki-client