Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7d511d69-6c8e-38ec-a419-4635ccd6a956.roa
File:                     7d511d69-6c8e-38ec-a419-4635ccd6a956.roa (raw, json)
Hash identifier:          VRR4zaKy4YjQuEpoE8G/dvzJZEUpxOVFM/7fH5xYNgQ=
Subject key identifier:   C7:4E:84:1C:AE:CD:0A:87:AF:08:5B:20:3A:6D:C9:84:C8:96:CC:DD
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584898D60A81E9091945B6E85400
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7d511d69-6c8e-38ec-a419-4635ccd6a956.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     137409
IP address blocks:        2606:f185::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:0a:81:e9:09:19:45:b6:e8:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=fd892f24-688b-4b28-bbd9-d109c1c24eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:89:e0:2d:0d:ff:45:b0:95:4a:dc:1e:be:
                    89:88:6b:62:00:af:be:4b:fb:e5:41:82:82:ea:48:
                    db:a7:36:14:93:74:af:53:b4:3d:42:35:b7:19:bb:
                    2b:97:f0:3f:43:35:fb:b2:d3:75:81:0a:2f:0a:3b:
                    db:31:17:54:bb:8e:bf:ba:b3:b6:2e:7c:5f:4b:d1:
                    bf:b7:8e:c3:9d:a8:cd:0e:94:d9:e1:ab:d6:02:58:
                    f7:5d:72:66:1d:d8:e0:fd:24:e2:ee:21:e0:95:2d:
                    f6:4e:1b:3c:09:e2:3d:c6:5a:db:da:60:cc:a2:2e:
                    9d:af:4d:ea:29:5c:23:2f:35:28:28:6a:c8:7b:a6:
                    3e:ac:17:c9:66:6e:9a:56:ef:de:cb:80:f2:ad:60:
                    5b:bf:e5:40:1e:2c:c4:8a:4e:e1:29:27:75:b0:04:
                    fa:e4:89:06:86:47:c0:23:dc:66:1f:70:08:b3:36:
                    e3:da:c5:b4:cf:9d:32:4c:2d:db:23:f8:1f:98:4c:
                    7d:09:14:2f:d9:2e:5f:85:b8:b2:45:8c:c4:bd:e6:
                    93:88:18:95:a5:8c:a0:e1:2f:a2:e7:d7:2b:33:1b:
                    63:5e:b3:6b:71:19:fe:6c:a1:02:82:49:b4:56:4f:
                    7f:24:ad:c9:ca:cf:81:74:d5:7d:33:77:63:f6:44:
                    ad:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4E:84:1C:AE:CD:0A:87:AF:08:5B:20:3A:6D:C9:84:C8:96:CC:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7d511d69-6c8e-38ec-a419-4635ccd6a956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f185::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:2d:f0:fb:a9:a9:bb:23:37:dd:87:24:45:bd:f4:07:f0:
         55:54:64:e5:35:75:09:87:d4:45:b1:db:c6:f6:02:db:0b:d6:
         e6:e5:23:eb:20:da:71:61:e6:4a:b9:af:8a:69:a0:96:29:fb:
         7d:29:16:d9:61:3d:12:e0:94:0f:48:39:49:14:cd:c6:31:0f:
         af:7c:29:8f:a4:dd:a5:7d:b5:c1:de:ac:f9:66:75:57:f0:68:
         ec:3b:78:d3:b9:ea:cf:b3:0a:c0:61:c5:fa:51:db:bf:fb:15:
         7c:26:79:28:93:8e:2f:e8:93:1d:92:70:b6:a0:1f:7f:e8:c8:
         bb:fc:c8:8c:06:8c:4a:21:55:ab:00:f5:51:8c:43:2a:f4:65:
         66:5b:ad:4f:f8:7f:80:e1:bc:d9:48:9b:e7:0f:99:d1:01:6c:
         b4:64:3b:2d:24:c4:32:04:97:52:5b:b7:c0:be:57:9b:fa:be:
         95:84:0f:e9:a3:00:28:d9:df:b1:ee:e0:ff:86:00:7b:ae:82:
         9e:61:3b:a6:6d:43:d7:d5:59:d9:cc:08:f7:f0:7b:eb:55:06:
         1d:a3:69:32:18:b5:f6:8a:95:e4:dc:54:c1:ac:f8:f9:ed:9f:
         f4:20:fc:50:f3:ea:27:37:7c:e3:05:fe:55:08:44:11:10:12:
         1b:7f:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:17 2025 by rpki-client