Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/72108140-60f9-3365-9ff0-7a6a1f633cc1.roa
File:                     72108140-60f9-3365-9ff0-7a6a1f633cc1.roa (raw, json)
Hash identifier:          a1h/BkBP5MU7wJvne1qDKLC47slpXhg3Z35b+js7ydA=
Subject key identifier:   F5:2A:B6:F7:03:49:91:72:9F:08:91:E9:76:A1:66:96:55:6A:47:25
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285848F7BB1E8B74B06B7547177808
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/72108140-60f9-3365-9ff0-7a6a1f633cc1.roa
Signing time:             Sat 22 Feb 2025 13:48:34 +0000
ROA not before:           Sat 22 Feb 2025 13:48:34 +0000
ROA not after:            Fri 23 May 2025 12:48:34 +0000
asID:                     64286
IP address blocks:        2606:f180:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:bb:1e:8b:74:b0:6b:75:47:17:78:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Feb 22 13:48:34 2025 GMT
            Not After : May 23 12:48:34 2025 GMT
        Subject: CN=663ed4b5-c4fd-4eee-9fac-c221e9caf521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:d5:f1:0a:37:5f:72:df:c2:fa:5a:2b:c9:
                    08:16:31:0d:94:6a:c8:6e:19:04:44:98:68:27:79:
                    db:77:66:f4:23:7b:f4:34:0f:7c:80:08:0a:37:4a:
                    0e:42:42:72:3a:77:05:6f:d3:4f:06:d0:99:79:60:
                    45:b6:57:9d:bc:c8:93:53:64:b2:ec:c1:d7:5e:91:
                    fb:ef:d4:63:c2:39:67:cf:1a:73:39:bd:56:0b:12:
                    66:37:90:41:cb:0f:7a:9a:61:92:0f:67:b8:05:0b:
                    b9:b9:42:68:4d:ca:75:60:45:33:98:49:a0:a0:b7:
                    b9:01:d1:62:22:cc:00:1c:8b:a5:e6:23:1d:f9:ff:
                    a4:d3:bf:56:71:a1:a4:05:20:3e:eb:aa:02:63:29:
                    1a:af:45:e5:c4:8d:0e:83:c2:ca:e5:06:af:9f:e4:
                    0f:4e:62:05:37:e9:f2:e7:1c:0a:8b:54:44:af:ec:
                    12:59:d7:82:81:00:55:58:e5:9a:4f:d0:97:09:c1:
                    c6:0d:bd:88:20:bc:57:65:eb:35:1d:db:66:c1:05:
                    b4:05:be:02:3d:bd:fa:88:98:50:00:5c:15:a9:95:
                    60:cf:b3:d4:35:72:87:a1:92:74:94:b5:9f:7d:62:
                    a6:a6:54:4d:65:f9:61:8e:af:b0:15:a7:b6:ca:4b:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2A:B6:F7:03:49:91:72:9F:08:91:E9:76:A1:66:96:55:6A:47:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/72108140-60f9-3365-9ff0-7a6a1f633cc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:2e:f7:80:fa:10:09:e2:bc:f3:8b:e2:8f:e7:21:45:69:66:
         cf:44:9f:47:41:6d:59:32:40:d8:67:39:2f:f8:71:fe:99:91:
         29:76:52:a5:1b:63:a3:91:14:46:f8:c5:59:ae:00:e8:26:0d:
         67:93:dc:79:c4:8b:b7:f6:0d:bb:fc:bb:72:14:68:9b:2f:f7:
         21:b9:2e:1b:bf:01:44:40:32:85:af:e5:f8:51:c3:76:2f:59:
         7f:c3:b4:d0:65:1b:97:f6:4c:f4:b4:08:6c:ca:6a:02:92:10:
         e3:e7:fb:78:27:aa:bd:57:e3:4b:68:47:8a:52:b1:d3:06:39:
         f6:20:5f:5b:2a:bb:87:64:c0:c8:a2:e4:e8:bc:a8:cc:82:4c:
         d4:a5:5d:c1:ea:b9:8d:8c:8b:8a:97:e9:55:fb:26:40:da:f3:
         46:25:cc:d4:94:98:f9:9e:1a:36:d7:7b:a8:66:27:5e:b5:12:
         b8:07:26:25:0f:9d:6d:07:ee:2c:54:e5:5c:62:87:e5:5a:4e:
         b3:e5:3f:ef:3a:a6:e2:03:81:5d:41:d1:f0:b1:a8:79:2f:61:
         97:75:28:e4:e7:2a:70:62:9f:a2:4a:52:c8:4c:fd:68:26:40:
         3c:2a:7a:1f:75:ed:ae:87:75:ac:d6:92:23:72:50:5d:37:28:
         29:67:df:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:52:26 2025 by rpki-client