Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa
File:                     6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa (raw, json)
Hash identifier:          JRvzNjIuOvjo7dk7A1mpk7srjMEyH4jilQ9yFSsG2jo=
Subject key identifier:   57:6C:C3:2C:AD:84:25:83:3D:05:A9:BE:96:1B:3C:98:01:2C:BE:87
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285848EC9685B98788EF4516BF4C40
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     4181
IP address blocks:        2600:3400::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:85:b9:87:88:ef:45:16:bf:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=82e5f288-a8ab-45cd-989a-28380a3d625e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e2:49:93:d8:5f:d7:f3:1c:f1:8b:c7:35:0e:
                    af:3e:f4:37:13:5f:5f:70:94:72:ca:48:76:35:2c:
                    c0:b1:7a:1c:7c:84:42:a5:3a:bd:3e:f5:70:04:d9:
                    e9:bb:0a:7f:e6:48:a4:5b:ff:dc:ef:40:81:bd:af:
                    bf:10:5e:73:7e:fe:4d:e8:89:b4:c4:b7:61:54:e7:
                    14:33:23:ce:a5:39:2f:3d:86:f0:b7:7e:9f:dc:9c:
                    61:af:13:cf:e3:2d:8f:14:b1:bf:97:6c:7e:c8:1f:
                    f7:ae:5c:d6:59:ae:5e:1a:b5:0a:d9:10:f7:b2:70:
                    b7:51:6a:e6:da:c0:64:6c:6a:83:19:b2:95:c1:b3:
                    d2:3c:98:d4:39:db:b0:f1:6b:00:2a:bc:ca:9f:b5:
                    a4:62:60:85:9a:80:3b:ac:35:24:40:32:b4:09:81:
                    2b:07:82:1f:15:76:54:79:b0:7f:1e:8b:a1:a3:b0:
                    df:0e:6a:a1:0e:96:32:c6:1e:68:ff:fa:7b:ee:e0:
                    e1:23:e6:e7:ff:64:3a:1d:3d:ba:22:e3:25:85:c6:
                    82:b8:e0:a8:08:dc:15:1e:2b:f2:0b:5e:aa:93:c9:
                    8f:c8:61:40:aa:99:71:c1:46:40:25:89:32:2a:7a:
                    91:87:9d:ea:d1:0f:c6:df:a1:d5:d9:8e:b7:a8:97:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6C:C3:2C:AD:84:25:83:3D:05:A9:BE:96:1B:3C:98:01:2C:BE:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/6fb12a3d-949f-3ab1-bc3a-f4a698faa8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3400::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:74:c5:43:0f:af:9d:45:a2:04:55:bb:54:60:ed:e4:84:d1:
         34:f8:ca:0e:97:57:2f:71:97:66:21:b8:7b:4b:15:54:76:cd:
         e5:61:42:af:0e:76:c2:b4:41:86:cf:0b:8b:43:db:d5:1e:11:
         45:77:47:b0:cc:cd:6a:4c:8a:6d:1d:2d:28:dd:76:33:b0:33:
         4b:63:3c:c2:de:7b:20:09:d2:b3:b0:ff:3c:93:a8:45:e6:f5:
         53:a8:e3:ba:34:e1:b8:10:7a:6c:3d:23:99:0f:00:47:79:21:
         ec:1b:bf:0b:7d:df:50:57:cb:18:b1:00:95:0c:98:8f:b2:be:
         cf:de:e0:17:4a:d2:cf:d7:e3:29:4a:73:5f:ac:07:67:89:62:
         d8:bc:26:de:c2:df:12:f8:fa:89:bd:30:c7:b3:36:7d:e2:0f:
         57:85:95:8a:be:93:01:b0:f9:80:4f:3c:5d:97:64:8c:ce:21:
         1d:c1:5a:d9:b2:a8:98:f7:07:58:e1:2e:65:6d:ac:4f:ec:d6:
         cc:eb:ec:d3:ea:36:9f:06:79:be:a0:36:2e:83:3f:fc:da:aa:
         3c:42:b1:d3:8e:e9:87:46:41:d3:74:63:06:24:64:f4:2e:45:
         9b:18:9b:18:c1:45:20:ba:20:18:8b:0f:84:cf:62:c2:b9:2a:
         c7:c6:f3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:36 2025 by rpki-client