Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa
File:                     94cc771e-e665-32c4-8307-085edb945c30.roa (raw, json)
Hash identifier:          MF/wyXzF1DP2KC3Q0uptbW/SjHksp3ZGhfHiWM/fRLg=
Subject key identifier:   BF:6A:42:46:62:3F:17:DA:CC:D2:36:35:22:B7:28:92:F0:6F:55:69
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584902EC0E92408EA395DB0C0800
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        2607:f368:804::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:0e:92:40:8e:a3:95:db:0c:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=e5a803fb-0771-4a7f-9e0a-a86bafceebd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:fa:e7:4c:a7:b8:fc:d6:cf:65:4b:fd:8d:
                    45:87:65:33:08:60:ed:fb:a4:4e:97:9d:55:39:eb:
                    7e:ce:0c:7f:2c:e4:bf:49:fe:eb:56:cf:ca:48:fe:
                    80:f3:ed:82:5a:c2:ad:5e:cc:29:ce:bb:76:b1:80:
                    a1:3a:41:be:48:3f:f1:2a:7d:23:a9:10:bc:e8:e5:
                    1c:30:c5:e5:cd:58:95:2d:b3:0c:01:03:95:c8:ca:
                    5e:3a:2f:d9:e7:39:9d:45:d0:f0:29:85:b3:38:5f:
                    bc:e3:51:54:e1:84:da:43:3c:4e:1a:19:af:8c:7c:
                    da:13:17:8c:8b:c3:dc:b9:9e:d7:03:bb:99:7b:a7:
                    8e:8f:90:a9:34:06:e4:7a:00:43:d1:81:8a:4f:7d:
                    8b:7c:82:4f:f8:8e:da:62:e7:97:e1:3b:c5:e3:52:
                    26:bf:9b:a5:9c:af:1b:bd:87:0a:0e:24:4e:dd:07:
                    51:f0:f9:92:7c:7d:08:5a:84:d8:ac:18:1f:7b:33:
                    a0:38:1b:ce:7d:df:af:c8:39:93:c1:82:94:39:09:
                    34:b4:7e:3e:da:89:06:dc:c0:c5:0f:b4:75:f6:ce:
                    59:9e:bf:0c:95:d2:cd:41:7a:e3:a0:6a:f0:d5:55:
                    84:8e:d0:c2:f8:0d:0f:41:9d:2b:37:bc:93:e9:fa:
                    d3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6A:42:46:62:3F:17:DA:CC:D2:36:35:22:B7:28:92:F0:6F:55:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/94cc771e-e665-32c4-8307-085edb945c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:e1:a3:b2:4b:4f:ab:e3:c7:7b:14:90:f5:6e:56:d7:0b:
         bc:6b:4f:31:c5:e1:35:dc:9a:f7:d7:95:7b:83:da:a2:95:43:
         48:59:06:2f:23:5d:26:87:d1:d4:72:54:67:9a:8a:15:a3:e9:
         eb:68:d9:cc:06:85:5f:16:b5:d5:74:74:d2:72:c7:a6:ec:18:
         da:75:7a:39:66:d2:10:ab:d4:26:7a:2d:93:5d:91:ba:e9:68:
         60:19:d9:7c:82:7a:c3:a6:a1:8a:1b:86:a5:49:76:e4:45:d1:
         57:47:cc:61:1f:77:0f:64:10:aa:de:42:97:bc:57:2a:62:7b:
         0c:b9:be:07:fa:bd:38:8a:48:e4:3e:a5:78:dd:0d:c8:dd:ae:
         75:ec:96:ab:45:65:fa:da:78:00:ab:a1:f8:80:5f:6f:48:b1:
         ae:46:f8:dc:45:f6:4f:a9:b6:8d:69:f4:05:cd:7c:ae:85:38:
         38:78:56:09:5a:76:d6:0c:01:b4:e6:7b:a8:7c:5d:c1:af:51:
         c8:75:d8:72:94:8b:a4:df:53:dc:6c:64:29:37:dd:8e:e8:ab:
         6c:ea:89:6e:c8:43:be:c6:4b:13:c0:c9:d6:af:d8:c6:f5:81:
         9b:8d:31:5a:7f:1e:30:69:76:70:bb:6a:ed:d2:1a:55:50:b9:
         d9:66:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:59 2025 by rpki-client