Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa
File:                     63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa (raw, json)
Hash identifier:          AN0FPyW3bS/mmPfkJsa0ghvjG6HC1StBslb0s6Hux6o=
Subject key identifier:   A1:8D:02:DE:C8:2C:01:D7:57:2D:43:5B:EA:B3:15:D9:84:AE:01:45
Certificate issuer:       /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial:       010D0C9F43285848EF61417BBCD5BF9263B89F80
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     13638
IP address blocks:        2606:5100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:41:7b:bc:d5:bf:92:63:b8:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=f23dd88c-13af-49fb-8c5d-23ab35b26919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:70:f0:35:08:86:2e:00:fa:53:0d:80:3b:
                    99:41:c4:eb:94:47:35:3c:ef:d8:fb:cf:ec:ef:8e:
                    de:99:2c:f9:48:ef:1e:c0:64:b7:56:56:8e:d8:bc:
                    fc:19:7f:21:e5:ab:9a:5b:b7:a0:51:eb:ae:c9:39:
                    c7:2f:63:df:ab:48:6e:d6:98:a9:c2:65:a2:40:c1:
                    3b:ec:cf:64:bd:3c:43:c1:ca:25:77:9d:41:70:20:
                    f8:c2:24:df:07:8a:12:2a:f9:20:38:66:ae:f0:3c:
                    1b:79:a6:e7:6e:e6:bb:0a:52:f7:39:5c:95:59:1e:
                    d7:b1:b6:cd:83:af:7c:ad:fe:fb:b8:bd:96:9c:b3:
                    94:67:4f:05:8d:63:dd:ae:2e:ec:45:bc:ae:d3:35:
                    e5:ec:c3:ae:ea:fd:ec:12:1c:c8:ef:86:da:ef:31:
                    40:e4:37:82:60:de:f3:bb:57:dc:63:9b:d7:4a:15:
                    ae:49:f6:ba:15:d7:5c:5d:a4:3e:d3:95:71:61:83:
                    5c:b1:7e:62:68:3c:6d:46:23:85:06:19:bc:c7:e6:
                    d8:dd:93:62:31:ac:e2:a6:1d:3d:e6:f5:01:61:e4:
                    05:1e:83:26:30:f7:2b:ef:44:31:7d:7c:2e:06:28:
                    aa:84:8d:a5:8e:0c:4c:ce:73:2c:69:f9:74:cd:37:
                    82:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:02:DE:C8:2C:01:D7:57:2D:43:5B:EA:B3:15:D9:84:AE:01:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/63bc8b81-f7d7-3c29-822d-597c2f5bfec5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl

            X509v3 Authority Key Identifier:
                keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ed:a1:e6:6b:99:e1:e3:81:3a:19:bd:ec:5d:23:9a:43:4b:
         a2:bc:37:bd:ae:8d:63:65:2d:de:2d:4e:fd:c4:1a:f8:c2:84:
         fe:be:be:e2:ae:5a:31:b2:16:4f:50:55:55:64:7b:7c:42:bd:
         3a:29:ac:1b:99:7c:a6:60:20:a9:c9:15:b4:af:d1:6a:9a:c9:
         26:b0:30:ff:d0:7a:ce:32:41:89:57:4e:12:66:50:cb:d9:66:
         6d:0d:20:c4:17:89:85:fc:25:31:50:d9:f4:e0:a9:97:92:d1:
         fc:16:f8:6d:fd:87:3a:89:c0:3c:5b:dd:50:f9:60:02:7a:70:
         ae:f1:c8:40:66:05:c1:01:99:73:29:f7:10:4e:c4:f1:a1:c9:
         ce:34:a1:15:c1:73:50:50:38:20:ac:e0:09:f9:db:91:5e:60:
         f3:7a:91:5c:6d:3e:02:75:45:1f:66:9f:37:5a:cf:d7:ec:cb:
         fe:0d:c0:10:03:43:0f:65:0a:28:0c:6c:9a:eb:5d:f8:dc:52:
         40:01:cf:6b:bf:eb:6a:7a:1f:5d:3a:13:3d:98:eb:ae:b2:ab:
         7e:ec:14:0a:7f:f4:80:45:a3:f2:84:fc:a1:b9:40:81:cc:48:
         43:f9:05:a3:97:60:84:08:bf:49:64:ec:31:02:d2:6f:9a:47:
         4a:39:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:36:00 2025 by rpki-client