Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd85ba51-3995-301c-94a0-29d6a1c65314.roa
File:                     fd85ba51-3995-301c-94a0-29d6a1c65314.roa (raw, json)
Hash identifier:          4GnUZqvjx/Y8CZWKS616tDCxBSsAV0GbvEbNJ6RDbzA=
Subject key identifier:   85:28:B6:CE:35:56:CD:4B:FA:3D:2C:13:17:1A:13:E2:4F:1D:01:8A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A35E5863ED4E707D559C03B40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd85ba51-3995-301c-94a0-29d6a1c65314.roa
Signing time:             Mon 16 Jun 2025 13:01:03 +0000
ROA not before:           Mon 16 Jun 2025 13:01:03 +0000
ROA not after:            Sun 14 Sep 2025 13:01:03 +0000
asID:                     34774
IP address blocks:        2001:470:42e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:35:e5:86:3e:d4:e7:07:d5:59:c0:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 16 13:01:03 2025 GMT
            Not After : Sep 14 13:01:03 2025 GMT
        Subject: CN=577f326a-f6a5-44d1-a30f-89bb9bc44b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:ec:7f:fa:a5:5b:e9:9e:df:2b:06:5c:ed:
                    81:74:44:38:67:5c:00:bb:29:13:d9:a2:34:11:f0:
                    52:25:eb:2b:07:94:3b:54:44:0a:b6:7e:73:01:b6:
                    ff:72:b7:1b:d6:85:18:71:4f:f3:96:3b:de:9c:27:
                    2a:ec:1e:3f:d3:95:90:06:ba:52:01:b0:fe:61:4f:
                    a1:c7:e5:64:07:b8:40:e1:82:39:1b:6c:ea:ef:b2:
                    2f:11:03:98:c3:a9:4c:4f:ae:58:0b:b4:d3:6d:24:
                    e7:25:3f:5b:2a:53:70:e8:c9:d0:22:ef:1c:4f:cc:
                    22:7e:d1:1d:bd:3f:c6:68:d5:f9:1f:03:81:a0:44:
                    2f:78:60:6e:91:0e:a2:a7:12:80:db:af:92:c8:41:
                    da:06:74:12:09:f8:a5:94:17:e4:29:83:d3:b6:57:
                    ac:8e:6d:ce:95:35:fc:6e:75:0a:48:6e:14:d8:6c:
                    11:74:dd:89:ad:c9:7a:64:ba:92:ac:87:13:25:30:
                    a2:b7:c8:35:28:a7:7a:8d:0d:55:ef:a0:a0:9d:08:
                    c1:cb:56:a8:54:46:3d:e5:c3:a6:e1:57:68:f8:b1:
                    95:c4:6f:3d:70:3a:b9:72:e8:ad:bc:a8:5e:41:ab:
                    30:79:ca:2b:82:9d:b8:f6:99:6a:e0:86:27:37:7b:
                    63:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:28:B6:CE:35:56:CD:4B:FA:3D:2C:13:17:1A:13:E2:4F:1D:01:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd85ba51-3995-301c-94a0-29d6a1c65314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:42e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1a:11:0b:ae:fb:40:d9:f5:68:77:8d:b2:9d:cd:db:c8:3e:
         2c:9a:5d:c2:63:f5:77:45:d2:8e:f8:69:6d:4a:71:0a:4d:a9:
         c3:81:bf:33:04:1e:bc:d4:ee:92:2e:3d:e0:9f:ae:f4:5b:9a:
         5d:7a:17:6e:41:e7:3c:d1:3b:c1:01:15:f3:8a:37:60:7e:b6:
         36:08:fd:75:d6:75:71:28:be:4b:9e:a5:7b:a0:61:10:fb:e2:
         24:b8:81:c5:82:f4:1d:26:cb:a0:a0:97:19:cf:f0:f6:10:b5:
         97:ec:01:e9:50:5e:9c:f9:1a:72:83:1d:b1:ad:cc:b0:a5:23:
         06:b3:ba:46:7d:cd:05:c0:82:56:ff:a2:18:ac:ad:f5:82:d3:
         39:87:ac:51:74:06:f1:8b:ed:78:06:b8:dd:40:5c:2e:4f:4e:
         d8:03:16:66:6c:92:0e:5c:db:76:d3:18:09:5f:69:01:7f:56:
         7f:6e:10:58:7b:04:1b:83:66:7d:e0:19:34:14:75:04:cf:ff:
         f1:92:29:6e:a4:8f:8f:ec:e1:ec:e7:48:e7:24:2d:7c:b8:3a:
         a4:e4:d4:03:f8:2a:56:9e:10:df:79:1b:83:cc:44:27:fb:48:
         23:1d:70:c5:d9:cf:0b:33:32:aa:7f:0e:63:f2:c2:70:97:e9:
         36:87:0c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:57:39 2025 by rpki-client