Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/b546c263-53de-32c1-932c-b6d4a20b2c97.roa
File:                     b546c263-53de-32c1-932c-b6d4a20b2c97.roa (raw, json)
Hash identifier:          OqdygvlVypFfahYZhFDKSQx3LVQwz+fyWktLhJjPpCE=
Subject key identifier:   33:7A:CB:C9:58:86:9A:CE:56:DB:90:17:01:41:EE:9A:72:0C:71:7E
Certificate issuer:       /CN=ec25543d-3cb7-423d-8835-8cb4591d6704
Certificate serial:       010D0C9F43285848B6261FA6BC4D05C2E0844910
Authority key identifier: 59:CA:20:17:46:68:02:F1:4E:32:4D:7C:04:E6:1B:03:BC:A9:E4:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/b546c263-53de-32c1-932c-b6d4a20b2c97.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     12161
IP address blocks:        2620:124:1000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/ec25543d-3cb7-423d-8835-8cb4591d6704.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/ec25543d-3cb7-423d-8835-8cb4591d6704.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1f:a6:bc:4d:05:c2:e0:84:49:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec25543d-3cb7-423d-8835-8cb4591d6704
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=918eba4b-f52c-417c-b841-abc34ec25024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:12:79:8a:3a:5e:7e:2f:6e:4a:e2:75:19:
                    f4:95:9e:e8:38:5a:58:0c:25:47:27:5f:1a:c2:8c:
                    f4:6f:2c:06:6a:2e:3c:b8:d0:29:4e:89:38:5e:11:
                    c0:5d:f9:19:19:0d:ac:dd:94:5f:f0:9a:e7:f3:0e:
                    6e:48:e3:49:68:19:69:7e:f9:21:93:38:ab:f8:d1:
                    b6:ea:ef:bc:5d:5f:66:c8:53:93:90:f3:f1:76:64:
                    e3:be:d9:f3:46:01:9d:22:8f:2d:c6:f3:cb:87:2c:
                    35:39:88:7b:90:7e:c3:cf:42:19:10:a9:70:34:c2:
                    03:fa:d1:4b:7b:87:cf:50:2e:b8:ce:e4:6e:18:d0:
                    7e:bf:3a:0c:36:fd:38:3c:c1:bb:f7:7e:e8:6f:bb:
                    9c:62:40:6c:c8:3c:85:6c:9c:4e:be:85:6c:21:89:
                    93:be:cb:ce:7f:95:e0:66:e7:b6:5b:bc:74:a3:59:
                    20:ca:bf:c8:53:8c:e7:91:b6:2b:52:32:12:62:0f:
                    3d:14:c4:c6:be:ad:bd:5f:c3:4b:2a:b5:9b:eb:f5:
                    93:f3:b0:d3:44:ce:e2:cd:ba:ce:60:44:3d:76:6d:
                    1e:d7:f9:5f:cf:59:e0:75:af:aa:e7:76:7f:79:68:
                    d9:ab:2c:08:71:4d:54:0d:a5:fe:9d:22:7f:db:0f:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7A:CB:C9:58:86:9A:CE:56:DB:90:17:01:41:EE:9A:72:0C:71:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/b546c263-53de-32c1-932c-b6d4a20b2c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704/ec25543d-3cb7-423d-8835-8cb4591d6704.crl

            X509v3 Authority Key Identifier:
                keyid:59:CA:20:17:46:68:02:F1:4E:32:4D:7C:04:E6:1B:03:BC:A9:E4:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ec25543d-3cb7-423d-8835-8cb4591d6704.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:124:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:72:ba:87:55:41:47:9e:74:b0:aa:4a:31:eb:18:fd:c8:76:
         a7:28:0d:b2:88:e6:6d:71:49:cc:dd:3e:61:e3:28:33:d9:86:
         3f:23:ba:72:fd:24:ba:e9:a2:d9:3b:97:69:c9:4f:23:31:24:
         8e:09:e9:22:f0:06:86:24:69:3a:67:26:22:2d:bb:b6:2b:de:
         fb:06:10:c7:5b:5b:f2:b8:66:05:10:7a:47:1d:ac:4b:5b:15:
         54:d3:23:de:81:f6:73:65:3f:07:7e:f9:93:97:21:7e:d5:99:
         2d:8c:28:67:dc:2e:bb:10:37:41:d0:e5:30:18:16:e4:59:79:
         53:4d:b0:87:8f:6d:bb:15:9f:09:ad:59:19:66:72:64:30:3f:
         7f:d2:72:1b:d4:09:07:c8:a0:ea:f0:bf:cf:7d:b0:42:94:5f:
         c5:bb:5b:9b:a7:46:7b:7d:65:8d:52:71:d7:d0:d2:e7:00:87:
         77:03:43:8f:d5:79:35:e4:c0:27:d8:48:ca:12:8d:b8:84:9c:
         0f:d7:38:61:32:81:23:b1:3f:54:99:e1:0a:68:bf:df:b3:ed:
         7f:fa:cd:81:68:fb:a9:9f:03:04:64:ee:64:9c:eb:5b:20:76:
         0c:10:3f:8a:62:17:6f:88:b0:5c:1a:08:89:c9:40:16:fe:97:
         69:a1:ba:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:23 2025 by rpki-client