Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/250b9a99-ea52-37eb-9585-49aeb904d3d7.roa
File:                     250b9a99-ea52-37eb-9585-49aeb904d3d7.roa (raw, json)
Hash identifier:          hMCkUTbd/qsHrBAVvP8spYu2eQGSrVOEpNxPkF0zlnY=
Subject key identifier:   08:AD:C5:A8:AD:25:46:EA:A7:7E:85:FF:13:B6:17:39:0C:3C:4C:82
Certificate issuer:       /CN=79f0b59e-adb9-491e-9362-7f64268c02be
Certificate serial:       010D0C9F43285848D64111031EFB7B298BCE8EC0
Authority key identifier: 3C:9F:73:A4:01:5A:9F:AA:DA:BC:75:F5:D0:E0:63:0A:9B:08:68:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/250b9a99-ea52-37eb-9585-49aeb904d3d7.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     393249
IP address blocks:        2607:5940::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:11:03:1e:fb:7b:29:8b:ce:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79f0b59e-adb9-491e-9362-7f64268c02be
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=5f0435fe-613c-408d-800b-0473c9c8948b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7c:ef:5d:72:69:e1:2a:a5:77:7c:6e:c5:8e:
                    b3:53:74:8b:00:ef:c6:8b:f8:92:fc:4c:50:16:90:
                    5c:68:c9:da:ad:0f:c4:10:d1:64:bf:90:55:1c:05:
                    d1:90:72:d4:20:0e:53:e9:e5:3c:71:2e:3c:a1:7b:
                    25:54:7f:49:e6:e6:9b:5e:ce:37:1c:fd:4b:1a:36:
                    20:2b:1d:df:ef:00:5b:c7:af:83:b5:c2:ec:b6:1c:
                    c7:3d:17:a4:56:04:5f:a0:f6:80:7f:de:51:1d:38:
                    3f:d1:22:ad:c3:12:c0:90:49:cd:df:bc:a2:e5:11:
                    d4:b9:8b:16:a7:21:bf:79:3b:09:ca:b6:68:e3:10:
                    cc:ef:14:6a:74:5f:ee:d9:fc:d3:8d:a9:8d:66:93:
                    8c:be:14:34:e2:4e:af:43:cb:71:52:52:78:d1:34:
                    86:6e:39:48:a7:7e:59:5d:88:3a:6d:ee:4f:3b:ec:
                    4c:8a:11:7c:56:73:5a:e1:00:f8:6e:86:b7:87:48:
                    15:ee:0d:dd:d4:e5:4c:8f:72:88:7c:59:3d:81:5d:
                    bc:2f:5d:99:21:74:ea:c6:7c:4b:95:2d:d6:c4:a5:
                    8f:f3:fb:0c:e8:c6:68:dd:e5:90:dd:99:ef:d7:a6:
                    12:ff:d3:6f:d4:4b:1a:89:b5:fb:10:e6:7a:e3:00:
                    de:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AD:C5:A8:AD:25:46:EA:A7:7E:85:FF:13:B6:17:39:0C:3C:4C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/250b9a99-ea52-37eb-9585-49aeb904d3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be/79f0b59e-adb9-491e-9362-7f64268c02be.crl

            X509v3 Authority Key Identifier:
                keyid:3C:9F:73:A4:01:5A:9F:AA:DA:BC:75:F5:D0:E0:63:0A:9B:08:68:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/79f0b59e-adb9-491e-9362-7f64268c02be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:23:09:b0:dd:d8:6c:fc:35:d6:e5:30:2f:d4:ef:66:88:c7:
         73:8a:c6:93:48:ec:dc:d7:6c:47:21:5b:bf:87:99:c3:dc:6c:
         de:81:11:86:0e:f9:64:f9:43:49:bd:05:40:82:04:51:8c:df:
         64:4e:87:fc:3b:6e:c9:3e:05:9f:9f:87:69:e2:f5:a7:14:9b:
         32:26:ba:6b:ce:17:90:9b:e2:82:58:51:b9:e0:3c:ea:12:49:
         e3:ed:ef:29:7e:21:a6:ee:b2:db:5b:2e:e2:5a:60:43:1b:9b:
         a2:ef:3b:97:7b:a2:f3:c9:de:62:22:a8:cb:fa:0b:66:be:85:
         37:53:29:6c:1a:52:03:32:33:e3:b1:54:d9:90:da:7b:1b:fc:
         64:81:3f:d9:c7:3e:2c:4c:b7:3e:f6:60:ae:23:af:0a:a4:f8:
         ef:35:45:38:75:30:cd:a1:5f:d7:0c:57:4d:fb:33:a3:4c:6f:
         a5:23:90:6d:05:d7:67:1d:b7:6e:b0:b2:f2:d2:74:c1:22:53:
         fc:05:22:a5:60:08:c2:df:fc:8e:14:cb:cc:a7:d8:a8:8c:bf:
         b0:92:38:40:47:96:e2:f1:07:fc:38:67:5c:48:76:09:c8:78:
         50:1c:56:15:92:ee:d7:3a:9d:d2:36:2f:7e:53:ed:53:52:0a:
         44:0a:81:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:45:57 2025 by rpki-client