Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
File:                     c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa (raw, json)
Hash identifier:          v37zsFRJs9h1WSStrz3ug/pImnCMLXnqMnCNPdPRUiY=
Subject key identifier:   A0:57:BD:9B:46:40:3F:63:AD:C2:D0:22:39:F4:68:FD:0F:80:8C:B1
Certificate issuer:       /CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
Certificate serial:       010D0C9F43285848A99629207246898E66BA4F80
Authority key identifier: DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     54665
IP address blocks:        2604:4a80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:29:20:72:46:89:8e:66:ba:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=ce8939e5-41f3-4bc2-9c38-988a883340ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2d:4f:7e:d1:be:e5:bd:03:76:b5:ac:6e:0d:
                    0c:df:e2:36:4a:36:18:48:62:9b:ee:4b:6b:34:51:
                    dc:22:81:c1:01:e7:80:d4:9d:46:8f:7f:63:5d:fc:
                    91:71:89:6a:12:c9:d5:87:06:cc:02:95:c1:89:a2:
                    62:e7:53:75:10:e3:e1:f8:47:e8:6e:5e:00:6f:8a:
                    27:ff:99:9f:7a:e0:b7:51:09:cc:f3:cd:c6:5f:fb:
                    64:d8:07:6f:a5:50:af:80:ea:0f:b7:2b:18:b9:5f:
                    f9:ab:c2:b8:ad:c6:8c:85:c3:36:5b:a5:be:d6:19:
                    25:73:33:05:18:ad:26:9c:0f:bc:b0:ab:1e:74:20:
                    86:87:66:e7:f3:03:27:cf:80:57:cb:7f:d1:a6:84:
                    e8:ed:9b:0f:fc:fd:5b:b1:bb:c3:f7:f9:c8:c5:67:
                    89:e6:66:49:a5:2b:86:9f:c0:cd:c7:05:60:db:4d:
                    14:ad:42:61:90:98:40:0b:3f:77:22:58:60:59:4d:
                    d5:9d:10:c9:29:68:0c:61:dc:dd:9c:2b:45:a3:a6:
                    41:6c:55:bf:cd:48:30:3d:1b:10:b6:2c:c4:1b:8c:
                    22:9e:6f:db:27:77:4b:ec:7c:f3:8f:db:1c:26:48:
                    bc:0e:1b:07:7a:5d:f8:25:71:a9:12:ac:31:45:df:
                    dc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:57:BD:9B:46:40:3F:63:AD:C2:D0:22:39:F4:68:FD:0F:80:8C:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/c6fbade2-d0ec-39aa-878b-06d96fdcd6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl

            X509v3 Authority Key Identifier:
                keyid:DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:cf:de:7d:dc:6b:ad:da:0c:e8:d8:1c:4b:8f:b4:0e:cc:11:
         f5:93:6f:6f:be:67:f0:29:20:a2:12:d3:0d:1b:0e:a8:97:e1:
         4f:80:40:72:2a:c1:f6:a1:f5:d5:52:c8:c7:61:c9:8a:f6:e6:
         dd:47:d8:f8:0b:eb:23:3a:51:b2:d3:8e:db:f8:37:d6:7c:59:
         b9:8e:5d:e2:5f:d0:c5:1f:89:71:79:05:cb:36:17:20:c7:56:
         f4:85:e8:7e:c3:1c:42:50:ba:74:24:4d:ca:b4:13:f6:87:57:
         7b:02:c9:b7:96:66:d6:b9:29:8c:79:d0:70:19:03:52:e3:47:
         7c:bc:7f:ee:b5:c7:7b:9e:51:09:66:f4:22:8a:07:d3:9e:79:
         8c:2f:a9:a4:20:46:ca:4a:d3:e9:d7:cf:13:e8:9d:16:0b:d1:
         ba:d6:f7:7e:10:ae:8a:c6:fa:c3:b6:9e:18:37:87:77:a6:24:
         f6:07:8c:f5:59:3b:39:a7:be:69:d9:ed:c2:85:fc:e2:f8:41:
         a5:1a:31:69:10:73:85:75:50:61:29:81:32:de:cd:da:f5:d5:
         83:d8:af:77:1a:0c:e9:e7:d3:2d:bf:e3:e6:53:0a:49:26:d4:
         4f:ca:ee:b6:02:53:a0:fa:27:d3:33:be:2b:77:6a:6d:94:26:
         e7:ee:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:08:15 2025 by rpki-client