Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70ecbf30-5ffa-3ca8-9c97-a89a69ce7277.roa
File:                     70ecbf30-5ffa-3ca8-9c97-a89a69ce7277.roa (raw, json)
Hash identifier:          3rHhNzJc0g96L90zgJr4277u19X1ipbTFvZ0UM0EKKY=
Subject key identifier:   E5:6D:AA:1D:52:4D:40:DF:8A:DA:33:AC:62:68:F5:10:07:04:B1:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F77682E66F20A8290D2FE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70ecbf30-5ffa-3ca8-9c97-a89a69ce7277.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        2601:406::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:76:82:e6:6f:20:a8:29:0d:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=cc733235-b807-4fc9-b310-ef0cdece84e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:be:e0:7b:0d:37:8e:79:a2:f3:5d:d2:15:
                    a0:ea:dc:d2:14:e4:be:62:68:1e:1a:07:1c:d2:d6:
                    d6:5f:07:fa:8f:17:90:d1:8d:69:44:57:50:38:f0:
                    0e:57:21:41:77:2d:05:32:b5:36:75:8f:3d:25:11:
                    f4:bb:a9:e0:4e:ac:8d:67:51:69:5c:c7:95:9f:71:
                    65:a1:1d:a9:05:82:0b:d8:dd:2e:d6:57:9c:2c:84:
                    10:ad:22:dc:d7:73:f6:ff:96:5e:ff:e4:69:a3:a3:
                    95:46:4c:ea:c5:ff:25:cf:1f:3f:60:5a:63:1d:14:
                    42:7f:81:a4:68:4a:b6:55:29:27:3e:96:ed:ab:81:
                    b4:64:95:da:87:35:cb:19:08:bb:37:44:13:2a:5a:
                    34:e1:8d:23:d9:d4:be:99:1a:87:b0:54:13:b0:51:
                    a2:77:30:52:aa:1b:c7:35:61:60:10:b1:5a:ed:3a:
                    c3:98:30:ff:ef:0c:04:08:c6:3e:8e:96:a8:e6:9e:
                    c5:cf:40:b3:68:70:78:c3:35:5b:c4:9f:ff:3e:2b:
                    fa:c9:f6:ce:c3:99:38:7d:7c:f2:7b:91:49:e9:ae:
                    c6:17:44:60:6f:4f:70:68:01:09:55:fe:45:49:cf:
                    a5:07:0c:49:f3:dd:35:6c:11:9e:53:1c:c4:7c:25:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6D:AA:1D:52:4D:40:DF:8A:DA:33:AC:62:68:F5:10:07:04:B1:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70ecbf30-5ffa-3ca8-9c97-a89a69ce7277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:406::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:5c:23:ce:4b:f7:00:9e:26:59:f1:70:a0:b4:f1:25:8c:c0:
         40:37:a6:74:e0:84:2a:da:02:c8:b5:9e:8b:64:7c:d2:e1:b5:
         d0:d0:78:ff:04:70:ec:bd:47:fb:31:87:6d:ac:88:2e:b2:24:
         27:9e:8d:80:92:89:c9:4b:3c:c1:0c:79:11:62:06:8c:34:ee:
         14:f4:e2:7d:53:05:0e:a2:8e:bc:26:fb:4a:7d:5e:ad:46:e0:
         8e:bd:0c:04:e0:93:b8:b7:d2:b8:24:81:9d:a2:54:f6:2a:cc:
         5e:7c:5a:1f:00:f5:98:3d:ac:bb:7e:4e:a2:5b:15:a2:24:57:
         02:a6:d8:ca:ff:a8:bd:6c:f5:c8:13:5a:3e:a1:3b:e1:9d:52:
         42:5a:f8:75:b1:bc:bf:bb:04:aa:4b:c9:14:47:91:28:c8:49:
         23:40:7d:16:54:6e:52:7a:e2:93:ff:8a:d6:f3:f5:15:37:d8:
         df:34:4d:04:0c:4c:4d:ff:ef:c2:5f:bf:fc:77:a3:43:35:b8:
         02:e3:84:e2:1c:d5:d7:a3:d5:c8:31:e9:8c:aa:83:6b:59:77:
         04:30:72:85:09:89:ef:ea:6a:3e:1f:fb:73:8d:9d:8b:95:60:
         a7:3a:d3:d5:9f:7d:87:9a:9f:69:5c:9c:a5:ad:fb:ec:fa:85:
         b5:b8:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:59:04 2025 by rpki-client