Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/db49ca76-2138-3339-b404-80f4e06256ea.roa
File:                     db49ca76-2138-3339-b404-80f4e06256ea.roa (raw, json)
Hash identifier:          kp+d/nbKkHAW/1cSZeetaQ/HfP8MzG8NP/Af14ug1Xc=
Subject key identifier:   8B:2D:64:D8:0B:A2:8B:DA:9D:A6:40:E8:AE:1E:57:55:C8:40:1C:23
Certificate issuer:       /CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Certificate serial:       010D0C9F4328584902EC23350446DD2A465E4800
Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/db49ca76-2138-3339-b404-80f4e06256ea.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        2606:2c0::/48 maxlen: 48
                          2606:2c0:1::/48 maxlen: 48
                          2606:2c0:2::/48 maxlen: 48
                          2606:2c0:3::/48 maxlen: 48
                          2606:2c0:4::/48 maxlen: 48
                          2606:2c0:5::/48 maxlen: 48
                          2606:2c0:6::/48 maxlen: 48
                          2606:2c0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:23:35:04:46:dd:2a:46:5e:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=af8431d2-b442-4e2f-99f2-d40270ec6d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:f1:70:a0:bc:6f:b1:1e:01:aa:22:06:3d:
                    a9:37:1b:9c:45:73:eb:af:81:a5:0c:67:a9:2f:3f:
                    32:47:ca:94:93:93:27:05:3a:06:b9:bd:a7:36:f7:
                    87:ea:ea:30:7a:55:fb:01:9e:eb:3a:a2:e7:46:fc:
                    a3:07:d8:83:57:5d:b6:8e:4d:ac:aa:b9:d6:28:85:
                    bb:bb:bf:a5:e7:91:01:25:a9:cc:10:40:ba:5f:99:
                    5f:b0:67:7e:ad:9b:0f:b9:de:e5:7c:19:8e:30:7c:
                    e5:df:33:be:53:4f:5f:39:2c:a6:cc:fc:6f:a7:9f:
                    fa:dc:1b:42:af:18:96:9c:6a:d5:a2:ae:5c:b4:21:
                    13:23:6c:e0:06:25:2d:1f:5b:8d:f0:34:8b:6f:00:
                    43:ab:35:d2:1c:fd:0b:ae:05:a6:3f:d4:9f:91:f8:
                    08:79:bf:0c:88:fe:a3:49:bb:24:42:80:ea:e7:88:
                    8f:1d:18:cd:bf:76:92:bb:d1:fc:79:b1:b0:5a:9e:
                    eb:f7:e2:67:68:cc:10:e3:1a:77:d9:27:7c:6f:0c:
                    56:92:d3:6c:b4:a7:47:f6:a3:27:b4:83:28:e1:3b:
                    6e:dd:9b:8f:f2:ea:c4:bd:06:f5:47:7a:db:e3:b4:
                    81:b6:bd:33:ff:16:64:84:51:52:3f:79:23:03:ff:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2D:64:D8:0B:A2:8B:DA:9D:A6:40:E8:AE:1E:57:55:C8:40:1C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/db49ca76-2138-3339-b404-80f4e06256ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl

            X509v3 Authority Key Identifier:
                keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2c0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:e3:a0:f9:61:76:36:96:b0:69:26:0e:a2:a4:7a:1c:b7:
         8c:b7:05:a7:76:72:ec:ae:bf:6b:41:4c:85:15:7f:d0:7d:46:
         9e:3f:b2:10:8c:d5:35:62:08:b0:1d:bb:d8:8e:60:df:4e:57:
         35:27:8d:1e:3e:97:63:c4:d4:53:3f:90:a1:97:2c:38:e0:f8:
         9b:1c:fc:8f:32:38:b0:02:1a:8a:3a:bb:ee:2a:6f:80:01:e9:
         2d:06:49:ee:09:e9:9f:9a:82:21:2d:be:03:e4:a7:be:77:2e:
         db:af:ce:6c:49:1b:70:4a:74:4a:61:9f:53:4a:09:72:7a:41:
         bc:d1:95:fb:7e:c0:87:24:c9:46:25:60:0d:33:b7:40:84:08:
         de:e2:17:06:bc:f1:4e:bf:ec:6f:23:5c:c6:21:a2:c8:af:e6:
         a3:4b:92:3c:df:49:58:d2:92:a5:51:47:1b:8d:53:0e:26:87:
         bc:36:06:60:3a:15:93:f2:89:61:08:35:07:70:c8:fc:cc:42:
         e9:df:b0:4f:df:f7:6c:eb:e3:aa:a9:e2:d4:6a:ab:6e:b2:f6:
         99:77:ef:2c:6c:0b:51:11:47:fe:f0:22:e5:ce:d3:dc:f8:f3:
         ca:35:b5:3f:54:c3:8e:11:6b:c9:82:fd:0d:cd:6f:b2:7f:7f:
         60:c5:2e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:06 2025 by rpki-client