Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/b0105e7f-a332-314a-af06-d7ad1c747449.roa
File:                     b0105e7f-a332-314a-af06-d7ad1c747449.roa (raw, json)
Hash identifier:          k8DwMT+CHmrw7mo3OUPr4m4+yfdRWpztYo9jW7nUtVo=
Subject key identifier:   11:6D:60:8C:85:89:1D:5E:54:6A:03:56:69:8B:8E:F4:39:1E:F1:44
Certificate issuer:       /CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
Certificate serial:       010D0C9F4328584902EC1795F753D0E30A12AB00
Authority key identifier: C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/b0105e7f-a332-314a-af06-d7ad1c747449.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     16436
IP address blocks:        2605:abc0::/32 maxlen: 32
                          2606:e6c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:17:95:f7:53:d0:e3:0a:12:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=63847e17-0ee2-4b80-867d-9ee02c5126b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9f:3b:1c:11:7c:48:12:dd:d4:72:db:6c:80:
                    26:89:3a:ab:27:d1:7b:bd:e2:ae:fd:cc:5a:16:26:
                    e6:c3:a9:19:40:88:20:95:6b:9b:fa:eb:06:11:ac:
                    d8:23:8b:26:5c:5a:61:f9:bf:08:99:fe:7a:c1:7a:
                    6b:26:b6:bc:f3:a6:0e:40:64:bd:f8:df:8d:d0:fc:
                    dc:91:1d:21:ab:3f:37:3e:c8:3f:18:62:0e:ee:ac:
                    fd:75:fa:46:0d:8a:af:78:26:1b:bf:4c:4e:0d:eb:
                    d8:58:34:3e:b7:93:c6:f0:ee:4f:55:a5:40:3b:bd:
                    ba:f9:30:ba:fb:22:8a:8b:85:d6:e6:e2:92:ae:8a:
                    f1:02:90:c0:97:0a:33:21:e9:c1:6a:d5:d0:c9:77:
                    08:19:8f:23:7b:ba:49:1b:c7:39:01:1f:b7:e6:5b:
                    80:17:3f:65:21:9a:9d:2d:43:e5:46:a6:7d:11:ae:
                    76:c5:0b:20:b4:4f:82:8f:63:38:0d:04:b9:19:f2:
                    17:7d:a8:4e:6e:9e:d4:61:dc:7c:88:c9:f4:6b:d3:
                    a5:f3:91:bf:0b:12:34:b4:7f:7b:e6:7a:49:1d:7d:
                    79:9b:60:d1:3c:b2:d9:fd:ef:7f:25:70:3b:4f:16:
                    73:6b:38:6e:fc:c7:26:b6:b6:b3:a2:b9:d3:6d:44:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6D:60:8C:85:89:1D:5E:54:6A:03:56:69:8B:8E:F4:39:1E:F1:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/b0105e7f-a332-314a-af06-d7ad1c747449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:abc0::/32
                  2606:e6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:bd:47:08:cf:6d:a6:26:e2:ce:d0:ab:bb:e2:fe:be:f6:0b:
         a4:1e:2e:e9:95:e0:52:e8:a1:87:35:bb:18:6b:12:0c:01:97:
         eb:60:a8:95:5d:3f:16:06:52:2f:9b:5d:ff:5f:16:34:2c:42:
         28:90:94:c6:1a:69:e6:56:c6:7f:4b:56:71:0c:5e:49:03:04:
         7f:90:25:60:c1:82:8d:67:ac:92:43:59:53:f7:ae:32:e3:66:
         71:d2:6c:5b:72:4d:b1:34:f2:9a:99:f9:0a:62:d7:7d:f2:b8:
         03:a0:26:e7:27:1a:1a:2e:48:11:a1:ba:28:5e:ff:14:e7:d7:
         a4:36:1d:0d:03:fa:0a:c4:25:6e:91:72:11:a4:ac:af:bf:6c:
         f6:48:5d:18:11:5a:a5:5b:75:73:3a:f4:f9:ce:17:ed:d0:0e:
         d5:b2:66:6a:59:1f:0a:55:56:1c:5d:00:65:ae:00:b7:43:e5:
         3c:a4:b0:2c:3e:df:47:22:87:44:d6:4f:05:21:51:ca:92:78:
         c6:73:f7:88:fa:ac:10:12:17:b3:55:ed:f6:b8:79:f7:20:a5:
         83:2a:4b:19:81:13:ac:44:a5:c0:97:86:68:1c:03:a7:cf:e4:
         dd:38:46:dc:3d:dd:f8:3d:08:43:61:e8:73:e7:e7:1e:20:25:
         b8:5f:df:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:03:08 2025 by rpki-client