Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/fb700d78-4bc1-3d8e-931b-13dde0d7938f.roa
File:                     fb700d78-4bc1-3d8e-931b-13dde0d7938f.roa (raw, json)
Hash identifier:          WHFKcluY39fRvBjc4KxRSFIFUnVPFEO5XMjLk/pbj20=
Subject key identifier:   27:58:86:77:EB:92:E2:70:C3:54:F6:68:41:7E:47:26:11:00:E0:B2
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F432858493ED3C946045A5992F5EF8480
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/fb700d78-4bc1-3d8e-931b-13dde0d7938f.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     55091
IP address blocks:        2606:a840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:c9:46:04:5a:59:92:f5:ef:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=e0023eb6-6393-40c9-9b71-dbcc9481c124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:36:9e:b3:34:cf:d9:bd:2f:a8:17:71:2b:
                    6b:5a:ed:82:ac:72:03:44:79:4b:2a:46:22:6e:5a:
                    d0:b4:93:fc:26:5d:c4:e0:86:81:81:11:40:d4:41:
                    b1:b0:ae:04:e8:4a:c9:19:83:b9:a9:2a:1b:93:2d:
                    be:ab:c3:20:7b:00:48:f2:31:7f:ac:2e:2d:7c:49:
                    c7:ab:68:ec:7f:44:ca:8a:e2:23:72:ff:f4:44:86:
                    6f:43:48:bb:3e:a2:ad:64:7f:d3:35:96:02:f6:61:
                    6e:b6:0f:52:d1:9e:50:be:04:e7:c3:68:70:41:36:
                    c2:24:63:91:45:f4:3e:a9:7f:8f:9c:5c:96:c1:90:
                    35:cf:ba:40:4f:c8:ce:c4:d6:e2:2a:63:d2:3b:f0:
                    3c:16:95:cc:1f:5b:75:a7:91:f7:70:da:07:f2:38:
                    21:e8:59:17:12:9a:f7:3d:7f:3f:58:9d:bc:7c:8e:
                    39:1d:3d:89:6e:d5:1d:52:99:77:15:6d:8c:27:35:
                    c3:31:43:ec:59:89:be:d2:7f:92:25:9c:14:4c:4f:
                    0e:9a:3e:e6:31:48:f2:25:9e:10:18:70:7a:15:16:
                    35:c2:7c:d8:16:6d:7a:7d:c2:4a:c2:15:bd:79:cd:
                    74:aa:74:bd:6a:22:32:d7:b2:e7:2b:9a:93:3b:93:
                    b9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:58:86:77:EB:92:E2:70:C3:54:F6:68:41:7E:47:26:11:00:E0:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/fb700d78-4bc1-3d8e-931b-13dde0d7938f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:98:14:35:6c:5b:c0:cd:d4:67:9a:ed:a0:27:d9:d7:e8:fc:
         81:df:5a:93:83:e8:ab:cf:b2:cf:d3:47:0b:9f:c1:5a:90:f6:
         dc:a2:80:0c:a5:44:db:33:11:7d:01:52:ba:dd:a8:3f:74:7d:
         03:e0:24:48:be:9a:78:7d:ea:3d:ca:38:fa:cd:f0:a0:c7:af:
         49:a4:48:ed:85:61:10:27:c6:eb:c8:d8:ae:76:5d:38:32:38:
         d4:ff:2d:11:c8:49:cf:13:11:80:56:44:a8:4e:1e:75:14:36:
         1c:0c:fa:c1:07:80:bf:a4:78:f8:94:62:58:9d:13:f6:82:05:
         b5:1e:80:32:89:c9:91:5c:74:0e:d0:44:73:b7:0e:e4:39:91:
         4b:80:e1:58:c7:d4:fc:28:06:d2:80:5b:6b:b6:57:b7:51:de:
         a9:8c:ba:be:39:89:8d:dd:01:b7:6c:42:43:32:a3:06:2d:d7:
         87:b7:8e:41:18:28:9f:44:11:13:20:0a:69:de:33:1f:f9:20:
         05:f1:25:8c:50:df:fe:53:f9:2f:7a:c8:60:bd:71:17:19:13:
         94:27:4c:88:33:15:38:fd:d5:e9:d2:20:79:f6:d0:f6:9e:a4:
         17:8e:fe:07:ec:5d:9b:d6:c7:b0:61:35:b3:f1:83:06:30:ae:
         91:fb:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:25:15 2025 by rpki-client