Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5387381b-ecda-3c66-b507-6cc44cac79fa.roa
File:                     5387381b-ecda-3c66-b507-6cc44cac79fa.roa (raw, json)
Hash identifier:          T8N6xFRrzb8woM+4L1cN8nQgfXCJ1TRb4H+QExtDFhA=
Subject key identifier:   E5:56:56:D6:7B:3C:55:80:75:94:C3:B3:16:88:54:17:C1:AC:6B:2F
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F432858496B7ED5C6BA699C2C57CE8300
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5387381b-ecda-3c66-b507-6cc44cac79fa.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        2602:f99c:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:d5:c6:ba:69:9c:2c:57:ce:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=9dcfe9d5-918e-427f-a788-deb0d8299532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:45:d3:a1:53:dd:78:89:47:64:2c:c7:23:38:
                    3c:48:a3:0e:95:05:2f:ad:aa:b2:16:40:01:6b:48:
                    90:9a:85:3b:bb:64:f5:6d:d8:e9:44:ff:c9:4e:b9:
                    ad:f5:9b:d6:2c:6f:81:54:19:fc:2f:9d:36:37:74:
                    5c:77:9c:d7:3b:9a:08:7d:30:e8:1e:c1:a0:21:83:
                    0b:9c:9b:48:69:20:e1:71:63:61:98:f8:1c:0d:d1:
                    3f:e5:40:ef:27:ff:60:c2:31:a2:11:5e:cd:e9:af:
                    8f:d4:c3:29:c5:da:14:5b:d4:11:6c:dd:c5:7b:6f:
                    b7:dc:57:5a:e2:f9:f3:f6:bf:07:7e:48:f3:f1:f8:
                    01:a9:ad:8c:27:1e:48:74:2d:d7:07:86:47:40:cb:
                    2d:bb:d4:08:4b:df:8f:f1:aa:3d:eb:4a:a4:48:24:
                    e2:46:cc:68:74:33:c0:32:ae:11:c5:e6:f9:0a:81:
                    14:33:ef:22:0c:78:e2:d1:19:07:cd:b0:21:7d:0f:
                    1b:ef:15:3b:7a:dc:e2:68:3a:a6:95:04:b9:9d:53:
                    3d:12:74:c9:e6:27:72:c7:24:54:f8:a6:cd:1d:bb:
                    3b:ed:39:26:b1:b5:28:1f:06:e0:8f:07:70:12:06:
                    f5:4d:d5:d9:04:fc:2e:98:62:59:c2:61:f0:8d:77:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:56:56:D6:7B:3C:55:80:75:94:C3:B3:16:88:54:17:C1:AC:6B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5387381b-ecda-3c66-b507-6cc44cac79fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:5b:9a:24:e7:e1:eb:81:a0:19:33:03:2b:0f:56:97:7e:af:
         ba:45:6d:f9:7c:98:49:35:2b:92:2a:9d:35:33:8a:59:f5:5c:
         8f:5c:da:2f:5b:e8:d6:22:da:84:c2:53:e8:52:cb:08:e2:77:
         b0:e3:3d:4e:d7:09:5b:a3:d3:15:17:9e:7f:ce:29:2a:e0:b3:
         38:7c:37:6a:74:17:33:2f:6d:2d:28:6e:76:dc:55:f3:b5:d3:
         9e:bc:bb:59:51:89:92:85:24:cb:6a:29:7d:51:4d:39:65:6a:
         10:41:59:ae:d9:4e:a0:40:5c:9a:83:7b:95:2f:ac:bb:68:9c:
         e7:e1:af:da:bf:48:98:e1:14:c3:1d:fd:62:1b:0e:d1:75:dd:
         36:0d:db:f5:f5:af:0a:5f:a2:36:24:cb:2f:36:6d:38:fc:ee:
         c1:c4:5e:e7:ca:16:84:15:50:c7:ac:04:a2:e5:2e:92:da:9f:
         1d:6b:0d:d5:9c:ea:2d:d2:4a:af:19:de:8f:95:44:84:d2:c9:
         bf:3c:f7:fd:c3:b6:dc:d0:42:cd:13:af:77:54:98:4a:b1:12:
         39:02:4b:fc:36:99:2e:fb:a8:87:1c:b9:dd:ff:4a:cd:51:ec:
         04:93:df:db:ed:21:be:3d:1e:7b:60:64:82:59:18:68:ca:6f:
         8a:88:69:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:00 2025 by rpki-client