Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/119a5b2d-d36d-31d1-aa2b-25c354c2974a.roa
File:                     119a5b2d-d36d-31d1-aa2b-25c354c2974a.roa (raw, json)
Hash identifier:          D1ioGHLvoQpeahtfJPqgjri9dpfhK+a3SgivAWt4HRo=
Subject key identifier:   99:65:1D:00:A4:F0:81:BD:FE:A1:98:45:4F:90:BF:66:C5:E2:FF:72
Certificate issuer:       /CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f
Certificate serial:       010D0C9F432858492E13C6AD9EE44C9211CB0FC0
Authority key identifier: 54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/119a5b2d-d36d-31d1-aa2b-25c354c2974a.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     1742
IP address blocks:        2607:fb60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c6:ad:9e:e4:4c:92:11:cb:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=5758634f-cb2f-4296-a852-e9f9558e12d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:bd:01:f1:66:23:87:ea:62:03:4b:7f:c2:
                    b6:f2:40:82:da:c4:82:fd:7f:86:a2:5b:92:cb:6c:
                    88:6c:fe:87:48:35:ac:34:06:09:eb:d4:0d:bb:32:
                    06:e9:c2:8c:ad:0f:26:0c:3a:38:20:3a:33:c3:9c:
                    68:6a:ce:e7:3e:6c:9b:8e:88:eb:df:e2:7b:0a:33:
                    5d:0b:e5:33:2f:05:b8:ae:f3:a0:f0:22:ec:6f:e5:
                    1c:dc:78:86:6f:01:ab:55:c9:37:8d:d7:40:17:40:
                    b0:3b:8c:d3:78:88:e7:aa:b7:1e:16:7a:fe:fb:b4:
                    bb:73:82:d3:f6:87:8d:56:34:3a:d2:6d:ad:ad:e6:
                    06:20:2d:73:d6:98:b8:5b:be:95:f4:db:ba:d8:6b:
                    8d:af:dc:a0:95:bb:ee:85:f8:b2:fe:32:74:45:ba:
                    a5:ea:e7:99:8a:15:98:79:5b:86:21:8b:a5:b8:b0:
                    98:7a:3f:63:85:49:18:20:1d:b5:d0:12:06:d3:62:
                    48:84:04:e2:41:3c:81:c5:50:8a:ae:bb:69:e9:08:
                    fb:de:ab:70:3a:d1:41:ba:fd:14:65:b0:b1:1a:81:
                    24:f3:6c:e2:2b:c9:83:6f:bc:38:3d:90:e2:07:01:
                    d3:0d:25:97:1d:cd:c1:c2:92:9a:fe:b4:dc:2e:7c:
                    7d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:65:1D:00:A4:F0:81:BD:FE:A1:98:45:4F:90:BF:66:C5:E2:FF:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/119a5b2d-d36d-31d1-aa2b-25c354c2974a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.crl

            X509v3 Authority Key Identifier:
                keyid:54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb60::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ce:30:1a:57:15:1d:36:8a:4b:ea:d5:44:80:6a:55:3e:fc:
         3d:1b:2b:a3:05:4f:db:e1:29:b9:df:0d:05:8d:66:68:c9:2f:
         2e:60:f5:5a:ea:4c:e8:0a:28:8b:9d:56:53:56:ec:cc:ba:07:
         96:dc:ae:ab:a8:f3:e1:5f:51:ca:1b:a7:92:6b:ae:52:f7:87:
         91:17:01:40:1c:19:01:d3:c8:10:75:5c:b2:cc:bb:ef:15:20:
         17:c2:f1:dd:26:bb:40:93:31:8e:22:ab:cb:65:9c:69:43:0d:
         23:b1:92:20:04:11:c2:11:6b:f4:af:6f:7d:a5:f6:61:ba:c6:
         30:c3:6e:71:d3:fa:60:df:dc:0f:df:97:93:e5:30:7c:14:f8:
         91:78:e9:c0:db:27:44:ad:36:4d:dd:56:a6:15:7d:71:73:56:
         a6:04:de:1d:b7:7d:49:4e:e5:4b:d6:4d:9e:8d:51:4c:c0:3c:
         a9:a9:b5:6b:09:c4:46:cb:84:f4:d7:60:a1:fb:33:73:8a:ec:
         de:d5:ad:93:62:0c:9c:14:7e:f3:4b:ab:f3:f1:02:86:7a:bd:
         69:42:3e:86:8f:50:23:d6:e1:b8:ad:21:59:92:76:1a:0a:11:
         fb:0a:6d:d4:a7:4c:3c:33:e6:50:ff:77:53:d2:c5:b2:b9:0f:
         b4:e3:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:21 2025 by rpki-client