Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/76f0584f-f92e-362c-a742-7f580d738fef.roa
File:                     76f0584f-f92e-362c-a742-7f580d738fef.roa (raw, json)
Hash identifier:          WpuzWo0Lix1R5SytIWU6EF6C1r2Itq1GdzTTM1O2rA4=
Subject key identifier:   40:5C:B3:5A:7C:63:18:33:30:BF:68:00:25:1D:D7:59:86:1B:F3:2D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6BDA2039BE4DB97A26A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/76f0584f-f92e-362c-a742-7f580d738fef.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        2606:4700:4402::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:bd:a2:03:9b:e4:db:97:a2:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=ad21afd5-daed-4101-88c0-8357da2806ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:10:4b:b3:13:a9:57:80:b1:2e:45:d7:d1:bc:
                    db:53:31:ac:73:81:c0:36:9c:5e:0c:d2:1e:c1:9b:
                    b9:2a:bb:23:ec:72:c4:9d:ff:9a:bd:ff:a2:51:a0:
                    a3:0e:6c:1b:05:ba:c6:28:b8:2c:a0:df:be:bf:bf:
                    f1:2b:be:ec:90:d4:89:02:01:9f:d6:7f:7e:c8:42:
                    b7:f1:b9:29:1c:12:91:a2:ff:45:5e:47:8b:3b:93:
                    2c:c5:f9:8e:2c:ae:8e:43:9c:aa:c3:e7:90:04:2e:
                    5b:fd:1c:69:f1:c2:e8:cf:96:b2:94:e5:8a:3b:86:
                    ab:5a:6f:d0:5a:03:99:a0:97:94:71:48:ab:95:38:
                    7e:65:ac:5f:97:d7:9f:a8:97:4b:11:40:4e:09:9a:
                    cd:58:75:fd:be:44:bd:7e:f9:b7:9a:1f:1c:6d:a4:
                    d5:ec:d6:61:27:c1:e9:f3:a3:e1:9b:6a:d5:b7:2c:
                    30:60:ed:8a:7b:0c:ff:63:20:e1:27:d2:ef:c0:20:
                    16:58:f3:f7:ab:d8:ff:41:ae:7f:ac:95:64:43:8e:
                    98:14:04:2d:90:79:f6:e6:e1:7a:8c:81:44:ea:9d:
                    07:55:ed:77:4b:d5:8d:29:ce:ca:e6:28:86:da:ab:
                    e9:91:ab:f4:b4:03:f1:e9:ec:18:0d:83:6c:b4:e1:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5C:B3:5A:7C:63:18:33:30:BF:68:00:25:1D:D7:59:86:1B:F3:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/76f0584f-f92e-362c-a742-7f580d738fef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4402::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:f0:dc:6c:53:81:80:aa:c1:ae:6c:b5:23:1e:f6:dc:ba:
         31:e4:d6:c7:4e:bd:fe:26:c2:71:a5:37:73:52:c5:49:7d:44:
         b7:d7:b2:a4:4d:cb:6a:43:4d:0a:6a:ed:8f:54:90:53:ae:09:
         8f:9f:54:e2:54:3d:91:25:75:4e:bb:62:cc:0e:1a:7a:c4:15:
         d1:a0:1d:e5:ad:d0:36:66:62:26:ab:7e:85:37:53:03:e1:b7:
         0d:05:f8:76:84:02:c6:11:35:2f:91:2d:7b:9a:cb:96:f3:6a:
         1c:cd:c0:b1:1e:99:62:ed:3c:12:e1:74:5e:3c:e8:fe:a2:69:
         27:9e:6a:7a:ab:57:6a:4f:54:2b:f0:4e:46:2f:08:1f:11:82:
         25:06:9d:dc:8f:45:3f:f1:e0:88:64:c4:80:2b:c5:f4:40:45:
         9b:45:4d:9e:48:b5:27:22:4a:91:f8:47:c4:69:21:bc:33:61:
         22:ee:c1:1c:69:ea:88:05:46:ca:c9:b6:c2:79:df:81:7d:4f:
         77:d4:5f:d1:47:b0:20:8b:9e:89:0f:db:6d:ee:09:33:cd:f7:
         34:c1:29:3f:78:e3:b2:ea:29:39:15:3a:ac:9b:4e:41:63:6b:
         d8:6b:a8:8d:c7:fa:22:69:9f:30:69:be:03:b1:04:b4:6f:2c:
         48:26:e5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:14:08 2025 by rpki-client