Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b76fa1d9-da11-3cb9-a24b-54b4d3bb57e8.roa
File:                     b76fa1d9-da11-3cb9-a24b-54b4d3bb57e8.roa (raw, json)
Hash identifier:          gk7L/IpJi3HdJ+WobZXgHVUBFsF91nFJKe3JR+Zixrc=
Subject key identifier:   03:BC:C9:80:A5:13:FD:4C:53:0E:D6:F2:6E:E5:37:A7:DD:A0:D9:D8
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584957F3F1BD707D5281CCAF5CC0
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b76fa1d9-da11-3cb9-a24b-54b4d3bb57e8.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     32133
IP address blocks:        2606:8e80:6800::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f1:bd:70:7d:52:81:cc:af:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=cfee6ac1-b371-4386-be30-bab11b388c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:30:1c:bf:41:26:fc:1c:0a:a3:cc:eb:ee:eb:
                    88:e0:44:bb:fa:82:e4:e5:2f:19:2f:8e:ae:b6:7a:
                    1e:e4:b8:94:2e:e7:b3:4e:2a:57:9d:67:6b:af:de:
                    ec:be:5e:0f:91:de:a1:46:93:62:a8:7a:b7:24:3c:
                    3a:ca:cd:55:1d:01:1a:e8:d8:a4:be:a0:20:ee:9b:
                    24:62:23:fc:e1:66:3b:c1:10:70:b5:00:63:81:d1:
                    d7:06:55:18:f5:cf:35:64:3f:bf:77:2d:65:6e:c2:
                    b3:86:73:f4:4d:d5:74:56:f8:74:5d:24:88:3f:2c:
                    25:c0:97:4f:15:f7:5b:82:51:29:e9:bf:87:88:02:
                    de:f0:b2:a3:7d:19:83:ff:61:a0:28:91:81:61:fe:
                    33:82:08:0d:db:67:ff:b4:2c:87:15:1b:d3:94:c7:
                    88:2e:99:3a:47:02:81:bc:7a:1d:2b:2a:e7:bc:ab:
                    b4:75:8a:89:56:0f:8c:0d:bb:9d:8e:f4:f4:b1:46:
                    1f:a4:17:3d:de:ad:b6:7d:c6:89:a7:cd:fc:0f:ed:
                    1e:e8:db:2c:03:85:4d:d5:ef:a5:08:31:26:38:f2:
                    87:34:74:af:9f:e1:ab:55:49:77:8b:e7:3b:66:b0:
                    68:5f:10:c3:46:55:18:0c:c5:ed:de:3b:53:3e:b6:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BC:C9:80:A5:13:FD:4C:53:0E:D6:F2:6E:E5:37:A7:DD:A0:D9:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b76fa1d9-da11-3cb9-a24b-54b4d3bb57e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:6800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2e:ce:d3:67:75:f8:6a:33:31:af:d2:6b:74:0d:7c:a6:a9:
         20:a9:7c:64:b5:a3:bb:f4:7e:28:98:c6:34:be:c1:d4:24:e9:
         09:ef:a2:0b:80:4c:ff:60:a1:bb:d2:71:93:1c:b2:a9:ae:59:
         cd:40:d3:2b:e5:d7:dd:1d:01:eb:ac:48:4c:f6:6f:e4:67:3f:
         22:21:3d:44:4d:73:2c:11:7d:e0:99:aa:e4:89:0a:84:24:ab:
         b1:c2:d3:07:a5:5e:72:ac:0e:4d:64:69:a8:bb:d0:be:46:5f:
         2c:b6:60:5a:e2:09:91:a7:b6:57:a3:42:61:db:19:73:27:3c:
         58:b2:09:ef:06:5e:6d:e9:b9:ef:86:21:95:df:16:36:71:10:
         3a:d4:f6:4c:cb:c3:1a:36:2c:22:d3:04:e0:3d:32:61:a7:59:
         02:95:d0:48:ca:95:ee:2a:f8:cc:17:19:5d:61:01:a4:3c:33:
         b4:57:1e:a7:65:92:b8:f5:44:bb:03:f7:a4:f2:6e:c6:b3:53:
         19:1f:71:67:a9:39:96:a4:6a:f9:6d:ed:57:34:68:71:83:54:
         56:11:c1:4c:41:95:9c:f2:4e:70:30:c3:ed:0f:23:2e:a2:25:
         0f:00:30:87:4b:18:67:a1:69:20:e1:44:16:e8:7b:04:c0:bc:
         78:63:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:52 2025 by rpki-client