Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e579baaa-e296-3709-9501-81b95ecba700.roa
File:                     e579baaa-e296-3709-9501-81b95ecba700.roa (raw, json)
Hash identifier:          eS16ugyiHrxAYx3lnimRTqTthCDfrFZQ2Hj0eaYCbaE=
Subject key identifier:   1D:17:37:4F:0D:64:45:6C:9E:17:6C:F9:9B:C4:A3:72:EC:C2:16:80
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858490E16BDCCF6211833689C95C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e579baaa-e296-3709-9501-81b95ecba700.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     20454
IP address blocks:        2607:ff00:100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:bd:cc:f6:21:18:33:68:9c:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=52c9c9c6-6159-41b1-88be-7aea0cf34709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c9:55:9b:09:1c:0f:d6:86:ef:7a:ac:3b:bb:
                    73:85:b8:e7:57:cb:f9:21:8a:7e:a8:71:6f:40:80:
                    c9:c8:5a:24:7f:3b:2c:3c:aa:18:49:53:4d:e7:ff:
                    c8:73:32:91:a8:03:9c:3c:64:c1:5d:95:d2:bf:76:
                    73:67:c1:ec:98:fb:89:a0:fa:3c:6d:92:b0:17:22:
                    ea:79:76:4e:cc:53:8e:58:10:80:c7:c3:d5:c4:b4:
                    51:65:9f:4e:d1:c9:ed:a9:7f:2e:15:98:9b:34:a4:
                    ba:32:77:38:6e:c1:60:6d:84:c7:9b:bc:91:6b:3c:
                    0f:7e:bc:8f:b5:41:a6:e6:90:1d:eb:a0:5c:44:9a:
                    45:23:ac:3e:62:cc:c9:eb:6b:34:40:b8:00:6d:34:
                    e3:43:bd:6b:9d:f6:84:7a:ed:3c:03:27:2e:88:36:
                    27:c0:ef:af:d8:5f:20:64:0b:0d:88:4b:ab:3d:f0:
                    ee:66:2d:cc:9b:bf:b9:e2:7d:15:bd:a2:79:8e:b9:
                    22:b2:1c:01:8a:ce:09:6c:02:4d:9f:c1:c1:5a:e2:
                    ed:91:ac:3c:2c:95:55:af:fd:b4:74:57:04:33:34:
                    17:78:ab:f1:ef:14:c0:35:e0:78:3e:f9:63:ce:cb:
                    11:79:b7:d3:6a:ea:c1:91:8b:57:56:d1:3b:fc:ae:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:17:37:4F:0D:64:45:6C:9E:17:6C:F9:9B:C4:A3:72:EC:C2:16:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e579baaa-e296-3709-9501-81b95ecba700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:44:25:a4:60:d3:2a:59:38:8a:0d:c2:c4:06:89:e6:00:b5:
         b9:d5:aa:17:c2:9c:7b:27:82:0c:5e:37:55:5e:a8:af:34:f3:
         26:23:a7:6d:8c:85:3c:bd:14:ee:6d:85:c8:95:c1:9d:73:8a:
         7c:68:05:ed:21:c2:b3:6f:89:69:26:ce:aa:a5:0a:9f:74:1b:
         c5:52:f6:1f:04:c5:62:e3:28:1d:69:b6:5e:45:9b:fe:b3:2b:
         e3:9c:a5:32:75:33:e5:40:fe:7b:df:95:83:20:98:b9:55:c4:
         95:5c:ac:65:78:28:7c:0e:53:eb:31:04:35:f8:70:a5:3a:0c:
         9e:0b:fe:ee:ef:2f:e3:5e:2d:d6:1d:13:34:db:e2:13:ab:e1:
         9b:b6:9f:a4:82:11:7f:e4:b2:b8:5e:06:cf:3b:82:00:43:bf:
         42:28:43:95:a4:c2:5e:1b:7c:f9:42:28:50:55:4f:42:65:fc:
         c1:ab:68:67:13:4c:06:c7:98:43:d3:d0:04:61:cf:68:28:f4:
         9f:9c:18:55:45:fd:91:b6:d7:d6:06:e5:7d:06:2e:62:05:d7:
         85:59:d3:d8:45:e4:a3:cd:09:7a:81:7b:54:e9:47:f0:e5:ea:
         39:75:de:0e:69:84:c2:00:6d:16:3d:ba:59:8d:d6:d6:83:eb:
         5c:a3:e5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:22 2025 by rpki-client