Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/56696de6-6606-3cd5-94c1-bb2532de05b1.roa
File:                     56696de6-6606-3cd5-94c1-bb2532de05b1.roa (raw, json)
Hash identifier:          Y4maVt2rsX3S/OTjIAdEDyELqblExP0Flk1WYVAiyY8=
Subject key identifier:   0A:A3:CF:31:DE:C7:94:77:F0:48:CA:E2:75:5B:DB:12:FB:0B:82:0C
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584975445A8A00E2BFACA0620B20
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/56696de6-6606-3cd5-94c1-bb2532de05b1.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     11055
IP address blocks:        2604:7a00:ff80::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:5a:8a:00:e2:bf:ac:a0:62:0b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=eb674a7d-0ce5-4cb4-a3cd-23e1467b4dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:7f:d5:59:ff:25:b5:d1:70:2d:4c:87:27:
                    60:c1:cc:8b:05:39:dd:10:05:6b:54:7d:81:b5:22:
                    9e:0f:34:22:0b:43:b6:05:ee:b4:d4:3b:13:44:6f:
                    51:42:ed:82:4d:95:e8:a3:cf:5c:87:dd:6c:90:a0:
                    cb:a4:20:0f:22:32:db:a2:f6:fa:84:69:04:4d:b3:
                    22:06:a7:cb:ab:16:3f:a5:73:86:73:b7:c4:e5:0b:
                    c5:0a:cc:d8:5f:d6:c5:8c:77:69:30:01:c5:77:71:
                    1c:19:f6:5f:78:4e:9d:6b:8d:82:96:a2:23:3e:94:
                    7a:af:09:b2:0d:de:fe:b3:64:6c:39:9f:8b:c0:43:
                    ae:2f:7b:4a:c1:09:ed:84:e2:ac:9d:a2:f7:dc:77:
                    fd:6b:53:d7:11:4b:73:ed:0b:5e:66:c8:e6:d0:4c:
                    14:67:f2:6f:c8:31:6f:c6:40:77:dd:a7:b7:e8:11:
                    94:03:58:1a:5b:94:62:dc:a1:6c:9f:c3:04:90:a4:
                    09:3d:08:cb:63:16:a0:bc:8b:cf:f1:01:f1:d9:91:
                    b0:e7:fe:86:e4:3e:80:64:9c:77:92:3b:0f:d5:c6:
                    5f:46:fe:05:26:73:ce:a5:fa:5c:d2:37:e3:12:4a:
                    25:ff:80:82:7b:19:70:f8:56:d9:68:5d:bd:82:d5:
                    b0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A3:CF:31:DE:C7:94:77:F0:48:CA:E2:75:5B:DB:12:FB:0B:82:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/56696de6-6606-3cd5-94c1-bb2532de05b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:ff80::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:93:87:2f:74:bf:53:cb:ea:cb:1d:51:0b:fc:a2:46:dd:88:
         8a:cb:f5:4f:20:fc:e9:d4:06:73:4c:bd:c1:0d:f0:6f:0a:00:
         de:2b:f6:b7:d3:99:9d:33:6d:65:8b:fd:30:31:6c:3f:77:a6:
         d2:f7:4d:14:52:f1:d8:4b:9c:02:c1:a2:51:47:ed:ab:7e:fb:
         e0:47:99:1f:9b:dd:ea:3c:ec:3a:71:0f:c5:3c:b1:e3:49:d5:
         7d:02:19:08:f8:f3:b8:87:7c:39:04:27:dd:3d:18:37:16:b0:
         7e:91:f8:12:17:5f:2d:c8:71:5b:6c:f3:dd:cf:a9:30:43:4e:
         df:bf:05:8e:fa:01:22:1d:74:24:2d:5c:64:ff:a5:f6:91:9b:
         c9:74:da:2c:3a:8b:14:4e:0f:9f:4d:a9:d7:4f:20:d5:e6:d0:
         6e:19:5a:f9:25:11:33:3b:59:16:6f:7e:35:6d:83:66:dc:e2:
         0d:7f:64:d7:ab:04:78:36:af:fb:6b:3d:48:0b:52:90:e9:b2:
         39:be:06:15:57:e2:01:a0:8f:f3:f0:9a:d1:ea:3b:79:58:df:
         f7:f6:57:1b:02:63:c8:cb:d2:09:9a:b1:30:8a:e8:08:4a:68:
         1d:a6:62:c7:dc:d2:f9:d3:ee:3c:3b:b2:ee:3d:9b:fc:b9:07:
         df:d3:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:33 2025 by rpki-client