Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6346a9b2-b884-3d6d-9a7c-3138fd20fa9d.roa
File:                     6346a9b2-b884-3d6d-9a7c-3138fd20fa9d.roa (raw, json)
Hash identifier:          jWKKPkogo2rAl+kEAKLxWTeybUOvMfBco7vDKkal+kk=
Subject key identifier:   00:77:B9:56:E8:69:78:78:63:55:01:7D:7E:42:29:43:DE:B3:84:6F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584917DC20330CB0FB44B6BC92C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6346a9b2-b884-3d6d-9a7c-3138fd20fa9d.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        2606:4700:403a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:20:33:0c:b0:fb:44:b6:bc:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=7ecf70a5-e751-448e-9a3b-3615d91412c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:38:84:75:9a:95:2b:89:a3:2e:48:fa:d1:
                    36:0a:c7:94:3a:68:87:96:96:ef:3a:e8:14:32:2b:
                    dc:58:43:06:a5:15:4b:34:f6:ea:da:70:03:11:84:
                    e5:6a:29:e2:d1:a8:fa:17:20:59:52:26:dc:e2:49:
                    43:2a:d7:40:2c:17:dd:b9:db:42:66:7b:96:71:af:
                    a2:b7:d4:07:70:e8:af:88:44:0d:5a:08:9a:6b:fa:
                    9a:77:87:2f:55:cb:04:47:17:ba:d4:13:a9:8b:74:
                    9e:07:f4:e5:55:35:4e:6d:b5:b6:57:46:b6:e5:48:
                    20:48:be:24:74:13:14:3a:a5:3b:91:3a:a1:82:6e:
                    c6:1f:65:65:2d:e8:ff:db:33:01:a1:7a:25:1c:ad:
                    15:7e:b3:92:1a:dd:a1:3f:68:5f:d1:0e:56:4a:ec:
                    cc:17:56:bf:2b:19:19:4e:21:d2:04:c6:0c:74:2c:
                    f3:f0:26:99:48:32:15:d2:7c:08:b4:98:a0:93:8d:
                    a0:1b:00:68:37:ee:ff:27:9b:7e:f0:96:a1:d3:14:
                    c7:95:8c:2b:ab:06:81:41:dc:98:28:bb:08:5f:eb:
                    0d:f5:e3:50:47:7a:8a:50:8e:f9:04:41:3a:43:54:
                    23:16:c9:48:eb:db:ce:16:0b:17:fa:df:b5:ef:7b:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:77:B9:56:E8:69:78:78:63:55:01:7D:7E:42:29:43:DE:B3:84:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6346a9b2-b884-3d6d-9a7c-3138fd20fa9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:403a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:d8:aa:3a:3c:a7:37:d9:db:5e:5e:21:0e:e2:25:7b:47:63:
         5c:a7:1e:5e:1d:bd:b8:98:b5:4c:dc:f0:3d:51:3a:5d:84:4f:
         3c:c5:11:85:c7:16:c4:94:05:a3:8e:d5:e3:6b:cf:aa:04:30:
         f1:fc:42:99:84:64:da:cc:e9:3f:49:6c:1a:d8:d5:47:f9:5b:
         67:33:d1:db:fa:02:c6:6d:61:ba:10:69:a0:52:15:e0:45:84:
         fa:ea:21:e6:2a:10:3e:ce:a0:b3:0b:14:72:d3:49:15:70:d2:
         c9:c1:1f:fd:9a:1e:6e:cd:d3:b5:65:6a:3a:ba:7a:02:a7:9b:
         73:30:dc:eb:a4:9e:3a:3f:33:d6:97:66:ac:4d:f3:79:60:54:
         cc:89:5c:92:cd:3a:15:b1:ac:7d:fb:52:5b:48:ed:51:48:c9:
         10:a7:4f:16:18:76:20:3e:cf:89:61:f7:30:b2:71:cd:70:01:
         bc:38:96:e8:e3:34:ed:00:56:d8:53:fe:81:eb:c0:7e:2c:fd:
         d8:c3:8d:21:06:a3:d7:01:df:6d:c8:96:44:6e:f1:a0:09:23:
         49:6a:72:4d:3a:73:fb:56:80:36:7c:b0:97:1f:a2:ad:8d:ce:
         4b:a4:19:34:5a:50:10:98:d8:f8:54:86:37:d6:72:13:ba:b3:
         47:84:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:21 2025 by rpki-client