Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fdfdbd0-ccfa-3d56-bae0-9f92bd247387.roa
File:                     7fdfdbd0-ccfa-3d56-bae0-9f92bd247387.roa (raw, json)
Hash identifier:          7PCPHumW/tE5ZfjGe3LdbimFdDyCFJHksJPkvNK4leU=
Subject key identifier:   52:78:31:EC:85:68:1A:1D:E8:7B:38:FD:AB:ED:75:EF:BE:21:B7:F8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6BDDB6F34970FF6D07360
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fdfdbd0-ccfa-3d56-bae0-9f92bd247387.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        2606:4700:4406::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:bd:db:6f:34:97:0f:f6:d0:73:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=f3fc53ef-8636-468f-a404-8a2e220afa87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0e:ce:47:3d:69:bb:8e:4a:15:01:72:3d:11:
                    1b:2d:4d:80:de:0a:c2:ad:27:31:f1:6d:0d:34:cf:
                    5a:28:b1:e6:2e:aa:06:12:c1:2b:c9:0a:22:93:e7:
                    e3:bd:c6:6f:5f:55:75:69:61:ca:0a:f9:e5:02:3d:
                    ca:a9:fb:27:d7:34:8e:f2:4b:45:92:e2:e5:30:c8:
                    0a:0b:ce:85:ec:76:6b:fd:a3:08:0f:71:a7:10:a0:
                    42:46:43:7f:36:a9:19:2b:26:5e:a9:d2:40:55:dd:
                    96:15:06:e5:10:c6:78:e4:6d:6b:47:8d:de:8e:14:
                    b7:bf:c9:01:d4:b9:c6:1d:1f:51:e0:96:21:3b:ff:
                    05:a7:d1:0d:55:6d:14:5a:9f:63:31:4d:67:38:91:
                    40:fb:b1:ff:83:a2:db:60:f1:82:34:3d:c2:64:53:
                    15:a1:d4:91:27:39:0e:45:da:28:db:53:b5:f4:db:
                    75:19:04:d3:50:b2:f8:34:e8:d3:4d:26:7c:dd:6f:
                    e2:02:3b:f7:54:80:ea:8f:bc:1a:f8:85:82:32:33:
                    aa:af:73:9a:3b:03:72:41:5e:e1:72:0c:d2:cd:78:
                    ba:75:bc:6d:be:71:eb:a6:68:99:39:a4:0a:e3:10:
                    62:c5:94:e7:a4:5a:60:2b:6c:2a:5f:79:a5:a9:c6:
                    3e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:78:31:EC:85:68:1A:1D:E8:7B:38:FD:AB:ED:75:EF:BE:21:B7:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fdfdbd0-ccfa-3d56-bae0-9f92bd247387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4406::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:de:e4:73:14:c6:3d:b5:73:fd:a6:1f:bd:ff:57:e0:75:28:
         04:2d:9b:f1:d0:b4:c3:81:fb:77:be:73:8c:3a:83:5f:1e:a7:
         4b:23:84:a6:b1:69:45:8d:92:58:b1:71:de:ab:7c:1a:01:82:
         46:d1:5f:3b:cd:38:e8:67:ec:d7:79:1c:25:4d:3f:a6:a7:ca:
         21:7a:29:be:b0:61:2b:02:48:dd:d7:07:ea:df:49:fd:39:0b:
         79:22:80:0e:5f:b7:85:d9:b0:1f:ad:ff:03:9c:2f:4e:88:1b:
         a2:79:e2:24:38:eb:a8:3f:1e:af:57:49:9d:f1:96:7c:64:dc:
         54:71:94:3a:d9:36:54:6e:3b:c4:0f:90:98:cd:e0:0f:14:7a:
         46:25:76:02:f5:f7:08:04:b3:58:83:02:2d:5d:39:ad:69:1e:
         f5:a0:0e:00:22:c7:bd:77:e3:a9:1b:87:19:a3:f6:8c:a3:51:
         34:83:72:0c:45:60:29:04:78:fb:ae:94:7e:f6:7e:04:f6:40:
         ac:e7:e0:f0:7d:82:8e:2e:76:50:76:cd:0f:36:7e:1d:8d:ed:
         16:d7:74:c7:ab:48:d7:e1:f4:5e:55:c8:69:48:d1:9b:fb:59:
         bd:be:ea:05:6f:43:d8:b4:fc:ae:0f:90:4a:02:55:de:e0:b4:
         14:79:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:31 2025 by rpki-client