Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa
File:                     5d880a95-6ca5-3b0f-baeb-46602f238d82.roa (raw, json)
Hash identifier:          1xhamz8EpGoFgB14HGIUDfwnA8dfq3sdNOXN4Ho/J04=
Subject key identifier:   CC:E4:3C:A5:11:1A:86:51:EC:CE:45:D3:D6:6F:B2:67:23:91:9E:26
Certificate issuer:       /CN=6534ebb8-2490-4f36-a6d0-f7741019122a
Certificate serial:       010D0C9F43285848E2D1164C7302CA3C62F43C00
Authority key identifier: 16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     27553
IP address blocks:        2604:e000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:16:4c:73:02:ca:3c:62:f4:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6534ebb8-2490-4f36-a6d0-f7741019122a
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=cdd10d73-a2a1-4f47-9196-d9961381849d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:5b:a2:39:46:53:c4:7f:3d:24:31:06:b2:
                    cf:7f:6c:ed:78:9e:69:81:6d:93:54:bb:05:b7:ba:
                    36:d0:28:18:eb:63:92:54:4e:87:c9:40:fe:7a:bb:
                    ae:7e:dc:de:a7:7e:1e:c6:e8:2e:57:c1:32:44:65:
                    51:d5:e3:c9:07:e6:93:62:cf:c5:99:23:ed:ba:91:
                    4f:e6:10:66:34:e1:bc:f8:6f:d6:1a:a3:0b:51:1d:
                    8e:a0:d7:bb:ad:a6:8f:90:63:c4:65:65:6c:17:86:
                    d8:71:f8:b8:ed:ad:73:b1:7b:54:79:92:00:d3:08:
                    b0:0b:14:1d:f0:99:9f:ad:23:c7:38:31:a2:69:90:
                    ba:09:a7:43:a3:1b:30:98:c3:0a:f7:16:8b:23:04:
                    b4:ae:61:5f:29:1b:62:e3:eb:64:d2:43:fe:b4:e9:
                    f4:90:99:38:c9:97:04:e6:a3:83:30:f1:e1:db:4b:
                    50:07:af:a8:cc:63:8f:54:71:b7:01:d0:7f:fb:94:
                    fd:e1:0a:7c:fc:f8:9a:bc:77:bc:09:eb:82:92:93:
                    3c:23:9e:7d:03:54:7e:81:da:f7:28:29:b5:73:b8:
                    8d:c0:5f:52:6d:f7:85:dd:16:8e:de:b7:a2:7c:47:
                    1d:73:6e:0c:8b:de:d7:37:50:05:a5:c5:ae:d6:7b:
                    4a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E4:3C:A5:11:1A:86:51:EC:CE:45:D3:D6:6F:B2:67:23:91:9E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl

            X509v3 Authority Key Identifier:
                keyid:16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:2e:20:ce:8c:49:a2:fd:ad:34:09:03:f8:68:4f:17:4d:38:
         36:66:83:8c:64:da:fb:44:7a:53:1c:86:40:75:a3:44:7d:b1:
         51:24:21:9a:72:1a:e6:7a:19:e9:02:dc:a7:4d:cb:a9:72:f8:
         aa:e6:03:8b:52:b5:68:b7:1f:c6:f8:42:73:e1:63:58:c5:6b:
         42:af:f3:b0:b7:3b:92:73:35:46:f6:64:ed:d8:4f:52:f0:15:
         5f:cf:df:d4:27:97:55:8f:b7:5a:03:90:e5:09:cc:5e:f6:5e:
         34:6d:f6:96:9f:c7:66:d9:58:3f:86:d9:6c:fd:c9:22:3f:4d:
         12:51:f8:71:79:0f:b1:91:59:12:9a:df:82:4a:d6:83:e9:25:
         8d:2b:4f:83:8f:52:78:88:5b:53:95:b1:7d:82:78:b8:1c:18:
         4b:f5:35:e3:79:a7:90:c0:82:3b:d3:cc:f2:ee:d9:91:cd:2b:
         17:22:eb:a9:1f:dd:0a:19:77:94:36:ac:78:87:69:f3:7f:fb:
         08:3e:2a:03:4a:b2:5e:9f:8c:23:61:75:d2:63:a0:96:33:7d:
         8d:5c:36:89:81:db:b4:76:f0:33:7c:21:8a:c5:6b:65:28:05:
         96:71:84:9f:17:7f:5d:b2:b5:a2:f9:6a:d5:27:e9:39:e4:41:
         37:fa:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:21 2025 by rpki-client