Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/43eb6277-29ec-3a31-bacc-b593c68920d9.roa
File:                     43eb6277-29ec-3a31-bacc-b593c68920d9.roa (raw, json)
Hash identifier:          4MojWLkhYYXtbYbmbcN3gMUQwcqrNgn7qYRUz6xVbbE=
Subject key identifier:   26:05:31:D8:4F:40:00:BB:99:12:1E:EC:5D:1F:09:89:1D:8F:47:DE
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584973DEEC41D482725122AFAE80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/43eb6277-29ec-3a31-bacc-b593c68920d9.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     62896
IP address blocks:        2605:4a8f:fff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:ec:41:d4:82:72:51:22:af:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=939d491d-25e3-4bf0-aac6-eedd490c47a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:fe:2f:6a:68:29:ac:f0:c7:db:54:4e:db:
                    7d:74:8d:e3:22:dd:9a:93:6c:a1:89:ec:e8:9c:5c:
                    b9:82:2d:19:65:9c:73:14:55:1d:fd:ff:e1:fc:3d:
                    e2:c0:9b:12:86:93:35:7a:04:cd:52:20:99:da:1b:
                    8d:30:5f:56:27:c3:4f:10:ff:a4:e5:6a:24:58:20:
                    87:b9:26:34:fc:aa:70:cd:35:7a:35:c6:9f:d7:9e:
                    3c:df:28:c0:84:f3:77:00:c9:31:ef:8f:8f:b2:46:
                    68:e5:6b:b2:7e:aa:46:88:45:8b:9a:52:15:4e:4b:
                    44:c4:be:ac:87:03:fb:96:28:d8:c4:0c:23:64:fe:
                    86:79:51:16:15:38:d1:32:b2:2e:b8:55:0e:1d:5a:
                    31:85:7a:03:86:eb:fa:17:79:45:bf:21:d2:ce:c5:
                    17:7a:08:cd:6d:49:20:49:67:b3:65:1f:3a:71:c0:
                    29:d0:4a:af:8c:e4:f7:ce:c6:ec:a2:63:f1:b2:85:
                    07:95:05:8a:d9:d8:01:dd:a1:92:be:96:02:b3:e1:
                    ed:3d:dd:18:a9:d0:20:2c:81:72:b9:e9:b0:8f:39:
                    40:ff:67:b1:60:1c:e3:f1:39:0f:89:b5:ab:9b:81:
                    e1:ec:b6:f4:aa:13:97:d3:75:0e:6c:86:a4:0d:4d:
                    b8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:05:31:D8:4F:40:00:BB:99:12:1E:EC:5D:1F:09:89:1D:8F:47:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/43eb6277-29ec-3a31-bacc-b593c68920d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a8f:fff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:27:60:1f:88:3f:14:87:7d:2b:02:85:4f:da:1e:e1:47:4f:
         53:ee:a2:f8:3b:ad:32:da:21:0f:ca:0f:bd:5b:51:7e:f9:64:
         fa:eb:dc:70:3f:88:e9:0a:c0:44:49:fd:bc:75:a9:0c:cf:e0:
         c3:40:69:6c:c3:24:7e:61:45:7b:67:a9:2e:b1:aa:bd:cb:62:
         3c:76:b0:d2:48:44:60:c4:23:4c:bf:4d:60:51:cb:c2:07:11:
         e8:c7:69:bd:3b:19:bf:59:63:d6:fc:3f:06:30:17:c1:5d:16:
         81:60:25:95:ed:a3:ce:07:fb:82:97:dc:61:35:6c:d2:50:49:
         97:b0:f8:09:e4:c1:81:ac:0b:e6:15:97:83:8c:fa:33:35:f1:
         f3:13:e7:34:29:7e:ce:4e:d5:d9:6d:07:11:74:5e:db:98:c5:
         79:cd:81:a2:ec:0c:7e:47:da:da:94:85:32:98:6b:35:7a:4d:
         db:0a:d3:73:56:47:39:d1:75:85:ff:1b:de:dc:68:97:16:28:
         a1:84:3b:9c:91:67:49:f8:1e:e6:b9:0f:fa:49:57:84:bc:13:
         b8:bc:9b:57:76:31:bc:d8:a8:3a:70:05:18:b4:ed:46:ef:87:
         17:be:45:bc:02:96:5f:dc:ec:97:3c:f0:52:78:45:b2:0b:d7:
         30:20:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:13 2025 by rpki-client