Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa
File:                     88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa (raw, json)
Hash identifier:          rHKqKKdumUzaOiydQokH/MkFcckKMLqox/YkvtDGos4=
Subject key identifier:   3E:6D:2C:6A:8E:30:9F:2F:7A:38:CF:29:15:39:9D:4D:D5:34:99:B5
Certificate issuer:       /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial:       010D0C9F432858496484488D23525B5E1F4FE680
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     16787
IP address blocks:        2605:1c00:fff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:48:8d:23:52:5b:5e:1f:4f:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=1e9baea8-2932-420c-bd5c-4f5401b4221b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:46:34:74:de:60:a4:48:c9:d4:98:40:ef:
                    10:ac:3d:57:82:2c:fa:6e:11:96:9d:79:d2:e5:47:
                    05:39:76:46:07:f7:da:28:08:4a:47:68:aa:6b:50:
                    94:68:84:3e:d2:5d:9a:7b:78:d8:49:a5:72:25:ed:
                    fd:4b:c6:d8:a1:93:13:b0:af:43:42:49:9f:e2:c1:
                    49:9a:ea:1c:51:bc:9e:70:e8:2c:dd:b4:56:a6:82:
                    8f:b4:46:31:97:5a:fb:ad:c6:1c:35:40:19:0f:ac:
                    4e:be:c6:97:41:aa:81:44:f4:89:6b:53:f0:7a:78:
                    74:6d:40:5c:f8:26:8a:8b:c1:1b:44:f4:07:15:f4:
                    2b:df:af:3c:60:c5:58:e3:57:76:34:72:05:58:c7:
                    ae:d7:55:a9:34:a4:4a:f3:41:29:8a:c9:01:ba:02:
                    41:f0:e4:60:aa:fc:df:2f:2d:04:4e:20:b0:9d:34:
                    58:1e:ff:f6:a4:81:d4:aa:dd:46:30:a2:82:c3:f3:
                    9b:2d:49:1e:52:a8:7d:93:7f:c6:b1:88:44:94:53:
                    ee:e1:19:ee:09:03:68:51:5f:d6:1d:e1:a9:57:3f:
                    62:c3:da:c9:c4:21:c6:b6:83:52:97:c0:8d:84:61:
                    2d:ec:77:1f:3a:71:de:2c:96:24:78:71:9b:15:5f:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6D:2C:6A:8E:30:9F:2F:7A:38:CF:29:15:39:9D:4D:D5:34:99:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/88d98faa-490e-3cc3-acf1-12d0a9356e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl

            X509v3 Authority Key Identifier:
                keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:fff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:49:4c:3f:56:d0:81:ef:9a:3e:ee:01:5b:26:6a:97:c3:f1:
         4b:73:fa:fa:76:7d:87:4d:17:cd:99:b2:5c:92:bd:3d:dc:f0:
         fc:d1:9d:5c:f8:f0:d1:6b:21:e6:16:e5:01:da:2a:d8:59:c4:
         af:dc:80:65:a2:e1:1c:a7:96:05:0e:e8:85:25:c0:52:e0:c4:
         53:67:9d:10:5b:69:6d:a3:e7:99:0e:b3:c6:03:03:1f:4e:b2:
         0c:ab:3a:49:ba:72:de:66:71:5b:31:e5:1d:0b:c5:b2:a8:53:
         d7:05:c9:57:78:f6:14:99:c6:b9:e1:72:e4:35:d3:0b:88:76:
         7f:9c:e6:ce:2e:90:0c:0b:1d:23:a0:21:65:4a:c6:0a:b9:d6:
         58:b8:57:4f:e1:96:d3:ef:0a:b2:e0:9a:b7:b8:7f:1e:2d:15:
         00:ce:f6:54:c0:c4:29:ed:53:c2:c4:73:63:4d:4c:02:f2:61:
         01:da:3b:b7:2a:ee:21:6e:a0:e9:98:05:18:34:83:e9:d5:d6:
         e3:a8:eb:3b:11:df:7f:45:55:25:1d:a1:b8:5f:76:eb:60:7e:
         73:a1:18:23:2d:7d:9b:82:34:25:f4:94:6a:c4:99:08:8d:5b:
         f4:e7:dd:e5:8a:6e:3e:83:5f:34:1c:08:51:e8:5b:ee:8d:ed:
         e7:ef:40:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:59 2025 by rpki-client