Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa
File:                     952bc161-991d-39ce-9362-1f60a57f0877.roa (raw, json)
Hash identifier:          ddDR2QEtExvPa7gHSXENDLPszFbRgXSjCHNHXzyLgEs=
Subject key identifier:   B6:55:3B:B0:10:ED:4F:47:16:DB:75:49:1C:22:AF:17:A2:6B:D7:72
Certificate issuer:       /CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
Certificate serial:       010D0C9F43285848EF6134EAE1679F4CA48BDEC0
Authority key identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     11525
IP address blocks:        2606:5d00::/28 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:34:ea:e1:67:9f:4c:a4:8b:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=f417d0bb-7e52-4908-969a-24fb42c81551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:26:b6:84:e1:70:b1:e7:7f:c0:8e:6d:10:
                    82:bf:dc:78:c8:c0:7f:a1:c5:50:e7:b1:04:ee:26:
                    81:01:5c:b1:2e:95:b5:74:7c:7a:38:8d:74:c8:0a:
                    35:08:fe:8c:26:af:fe:03:72:88:12:8c:59:fe:d4:
                    1d:56:9f:a2:ef:58:07:8b:80:4e:53:0f:f1:e4:5e:
                    41:bc:39:ef:e1:16:a7:12:28:41:e3:43:a9:11:0f:
                    b1:dd:28:dd:ca:16:02:7a:e3:56:59:9f:0a:ec:07:
                    ad:5e:5e:0a:80:c2:a5:71:ce:9c:ad:7c:57:5e:72:
                    d6:c6:e6:31:99:36:d5:d2:de:a5:b1:1d:0e:d4:4e:
                    89:08:bd:55:7f:b3:c5:55:00:f9:f4:53:23:6e:ea:
                    d3:4a:ba:86:27:ad:de:db:16:cc:2e:ef:0f:90:0f:
                    6b:1c:8f:6d:bb:6a:7d:bf:5d:91:a6:24:1f:97:33:
                    f0:a9:2a:8b:c2:e6:b7:7c:07:b7:e1:03:6f:ec:96:
                    6d:c7:81:dd:8c:99:ef:be:2c:fe:2a:6d:a3:6a:5c:
                    b6:ef:19:b0:d9:a0:93:ee:46:86:6b:e0:dc:21:52:
                    46:87:02:56:62:56:44:1c:5e:6f:d4:9e:97:21:e3:
                    b0:e3:50:ca:75:b8:ee:f0:c9:a2:f4:96:3f:9f:6d:
                    7b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:55:3B:B0:10:ED:4F:47:16:DB:75:49:1C:22:AF:17:A2:6B:D7:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/952bc161-991d-39ce-9362-1f60a57f0877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl

            X509v3 Authority Key Identifier:
                keyid:06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ea:0a:05:dd:91:56:81:8a:00:18:8d:c1:5e:fc:6f:75:9c:
         f3:24:43:45:57:d4:f7:9c:32:f9:41:1d:4c:15:47:8d:79:ce:
         bc:b9:ce:3f:19:4c:61:01:81:c9:46:de:fb:63:9c:8e:02:ae:
         e3:8d:dc:fd:4e:7e:f8:bd:ed:c8:76:27:3e:15:a5:0c:17:80:
         b7:7b:ae:8a:78:04:ba:43:35:04:53:fc:3a:58:5a:e9:4c:29:
         c7:7f:85:36:0b:ff:9c:57:da:50:f6:45:19:b6:5e:4f:1c:a9:
         41:30:3a:7d:4c:59:f3:bc:e0:b4:f2:c5:a5:25:02:90:b0:46:
         61:b1:9f:6a:bb:db:08:48:04:df:6a:39:70:76:cf:41:35:5a:
         57:f1:55:65:4d:e8:07:ae:9d:d4:d8:97:16:67:51:08:f2:89:
         ea:24:4a:11:43:48:09:17:18:e2:d6:e2:32:54:99:81:43:6b:
         f8:e2:05:03:c3:86:ac:00:bb:fb:90:79:6a:36:4a:0a:b1:bf:
         55:aa:da:91:37:18:a3:2b:37:d0:76:d6:dd:c0:c9:40:7a:79:
         23:a9:51:1f:ff:e8:4c:8a:69:d2:a6:6a:48:84:30:73:0c:79:
         59:c0:2f:d2:b9:52:1d:25:0e:69:4f:e8:c3:24:f2:a4:72:26:
         91:f7:a5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:30:22 2025 by rpki-client