Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa
File:                     3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa (raw, json)
Hash identifier:          XG5wqKcfO2eyeidodSAaZeOcpyx7IGfvT8lbQhpMVX0=
Subject key identifier:   9D:AB:D9:EB:1B:F0:A8:B7:31:58:69:A2:03:31:B5:DD:40:65:43:2B
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F43285848E00656B13CCC93CC4F47E9C0
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     32982
IP address blocks:        2607:f368:a004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:56:b1:3c:cc:93:cc:4f:47:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=9693c995-de52-4fde-aa14-baeef9cca032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:3c:75:fb:fc:a7:17:49:6d:1c:d0:cc:57:
                    d4:77:82:39:ab:e1:ae:5c:f1:f9:9d:c8:a7:48:54:
                    7f:a8:80:c1:a7:ff:4c:40:45:da:cc:03:58:8b:5b:
                    51:de:4a:5e:84:9d:13:e8:c5:b6:05:30:17:1f:de:
                    56:04:e9:4d:2a:95:01:41:51:20:22:a6:eb:3d:52:
                    a0:83:75:0c:5e:e9:6f:ad:24:21:6b:1e:a8:b8:29:
                    87:ba:f7:c5:ca:5d:90:4d:4f:51:71:e8:17:5a:eb:
                    45:d2:ce:57:0c:be:c3:50:ce:a7:59:20:dd:11:38:
                    49:62:a5:98:ab:31:04:6f:27:dd:f8:90:ec:2d:12:
                    19:42:fd:f5:5a:fb:a5:3d:47:b3:d7:3a:76:26:67:
                    6a:96:f0:1c:cf:74:64:09:14:13:c1:e2:10:61:21:
                    55:b3:ac:e8:6d:b7:95:38:b3:e2:d8:f1:f9:8e:ca:
                    91:56:17:6b:3c:a3:3a:aa:76:0d:35:50:9b:95:bf:
                    d2:60:7a:21:9e:1b:78:22:12:65:ca:37:f3:da:c0:
                    af:38:c0:4f:90:bd:49:d9:50:e4:8f:35:58:94:f7:
                    36:3d:ae:43:80:6e:e7:f5:7e:51:c0:f7:e9:51:4c:
                    96:7f:02:f8:03:91:67:05:6a:94:dd:37:4e:67:c2:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AB:D9:EB:1B:F0:A8:B7:31:58:69:A2:03:31:B5:DD:40:65:43:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/3d51ff96-2f88-34fd-975b-1a32cf2f1fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:a004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:42:00:29:2e:a8:52:6f:9a:f9:90:c4:56:be:d9:3f:3a:a8:
         79:e2:bb:9c:d3:55:4d:77:56:46:cd:65:a4:5d:73:4c:1c:a4:
         06:69:c1:34:59:77:df:c5:58:3d:13:90:c1:4a:41:c1:b9:9f:
         52:33:48:9d:cc:88:00:1b:1b:dd:5f:77:2c:06:db:5c:e9:a1:
         7f:41:85:40:5a:4c:2f:03:7e:ea:69:85:52:2a:8b:57:eb:90:
         6e:d7:19:6a:4a:85:b8:18:87:58:51:02:81:9d:f8:b3:bc:26:
         4a:a3:e5:3e:b2:fd:14:80:12:ee:e0:e1:dc:7b:fb:e4:a9:e5:
         8d:61:c0:ae:00:c0:b2:89:2e:42:eb:0a:3f:15:60:76:a5:0d:
         26:85:36:de:a7:a4:a7:47:e7:b6:d5:1f:d6:46:ba:ca:98:6d:
         f1:49:fc:35:83:ab:dc:99:5d:a1:a4:f8:e2:51:d2:84:27:d6:
         ba:ca:d1:43:6b:9f:4d:c3:d5:20:25:29:56:dd:73:a2:9f:d9:
         09:56:79:4d:b5:02:98:78:8c:8a:6a:55:65:9c:e6:90:42:e1:
         94:06:92:fa:5d:fa:ed:c1:fc:41:98:99:22:6e:5a:e6:83:08:
         37:1e:63:5a:17:7c:3c:76:5b:a4:db:7a:93:71:7b:03:91:57:
         82:57:e1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:03:47 2025 by rpki-client