Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/13dd5aec-6fd3-3380-88c9-96a841e662f4.roa
File:                     13dd5aec-6fd3-3380-88c9-96a841e662f4.roa (raw, json)
Hash identifier:          oETVSSpAsxy8y0sdVgL9c/Ff4qeCf3BqckKUmUQtFyg=
Subject key identifier:   4F:56:19:16:BE:AA:99:FF:B1:A3:7C:1E:C2:3D:5A:37:3B:2E:75:A9
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F43285848FA8BED76DF2F0032109C3480
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/13dd5aec-6fd3-3380-88c9-96a841e662f4.roa
Signing time:             Sun 23 Feb 2025 14:00:51 +0000
ROA not before:           Sun 23 Feb 2025 14:00:51 +0000
ROA not after:            Sat 24 May 2025 13:00:51 +0000
asID:                     399077
IP address blocks:        2606:4dc0:2100::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fa:8b:ed:76:df:2f:00:32:10:9c:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Feb 23 14:00:51 2025 GMT
            Not After : May 24 13:00:51 2025 GMT
        Subject: CN=f0ab0d3d-1956-4af1-84c1-452684b649b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:b1:f3:af:6f:12:ff:3e:a6:bb:ce:3e:94:
                    1b:65:55:33:55:41:be:3d:a1:70:b9:d1:2b:18:3b:
                    5a:84:ff:dc:06:41:a9:a8:b6:65:88:24:9c:7e:5f:
                    f7:52:c9:84:84:b7:49:4e:f0:1a:20:a1:3d:0c:dc:
                    25:d6:d2:a6:57:ae:91:59:cd:88:46:30:31:50:cd:
                    33:a1:81:41:b0:24:76:cc:b7:89:9d:0e:ce:a9:51:
                    02:0e:2e:0e:b2:94:ef:88:d6:31:e0:01:2a:f0:af:
                    5d:b3:eb:6c:44:74:cb:d2:38:72:48:4a:42:df:54:
                    23:a0:1c:37:37:7d:7a:14:df:82:ec:47:08:8e:82:
                    0d:57:0d:74:98:11:c6:52:3a:b5:c9:8f:08:7d:46:
                    49:6e:41:f1:ef:6d:6e:70:c8:b8:b0:b2:3e:32:0a:
                    67:97:78:3e:86:f8:cd:25:69:2a:32:98:a9:e8:25:
                    3e:3f:0e:4a:cd:eb:6a:30:59:af:3e:6b:3e:89:24:
                    cb:d5:67:e1:b2:3d:65:2d:14:f8:1d:e7:95:49:e2:
                    61:c2:8e:25:14:57:ab:cd:81:6f:1e:ee:1c:ca:a0:
                    0c:92:3b:d0:74:ef:83:21:ea:69:b2:e5:77:d8:86:
                    b9:e7:2c:18:16:61:3f:3c:61:b4:36:b5:5b:8c:fb:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:56:19:16:BE:AA:99:FF:B1:A3:7C:1E:C2:3D:5A:37:3B:2E:75:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/13dd5aec-6fd3-3380-88c9-96a841e662f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:2100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:c0:9d:a7:ab:e4:41:1d:fd:fe:a9:21:2f:e4:c8:60:55:c7:
         7e:ff:b8:30:02:c5:9c:c1:92:f8:23:cd:ee:8f:77:63:c3:89:
         21:be:1b:f2:2b:98:89:42:f6:03:f0:50:73:83:1c:65:00:ed:
         f1:52:f3:76:7b:e3:79:f0:2e:79:3d:90:8e:e5:87:82:72:d1:
         ee:74:85:9b:c6:bf:8d:f6:19:f7:f0:0c:a9:1d:ee:16:6c:7a:
         13:91:9c:ba:0e:27:98:39:dd:82:11:ad:36:9f:78:bc:60:01:
         ae:ac:a2:b1:01:80:3f:ad:53:58:38:dd:59:16:c1:96:71:c1:
         f6:6f:e7:1a:38:ee:a3:a3:a0:ce:e3:7e:4a:16:db:ee:db:ea:
         0b:35:e4:3c:bc:dc:30:dc:ba:d1:0d:c7:9d:fc:f8:b7:c6:e4:
         55:83:2f:23:78:17:84:4b:cf:82:6b:b4:c7:07:68:ce:65:d9:
         ef:00:2c:a5:12:46:33:f0:a4:f9:b8:9b:9d:cd:52:a3:5d:ff:
         fe:a9:6f:18:1a:b9:7e:ad:d3:42:26:43:ee:20:5e:02:c2:ba:
         8d:64:23:f2:c0:3f:a6:ab:13:3f:f0:e7:bd:17:cc:57:bf:8a:
         e9:d4:2d:87:51:23:44:a8:42:d9:da:82:4b:5d:f6:47:f9:44:
         d9:0c:ca:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:58 2025 by rpki-client