Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
File:                     fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa (raw, json)
Hash identifier:          mTOZaYGoE4IocLERj5yV7vVdtBIQw22D9iH1fE6Q9E0=
Subject key identifier:   B7:3A:F5:1A:16:D0:F4:FF:97:68:5F:71:29:FA:86:13:68:36:D5:CA
Certificate issuer:       /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
Certificate serial:       010D0C9F432858496CE454F70D41DAC0807F8540
Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     25697
IP address blocks:        2605:7380:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:54:f7:0d:41:da:c0:80:7f:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=472d2eac-3faf-4d5a-b4ea-d9efd42dc85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:7b:ca:78:d2:62:1c:ab:20:38:84:48:c4:
                    d0:20:af:aa:9e:e3:f5:2c:4b:dc:39:0e:a7:71:b7:
                    d8:5b:a0:3c:cf:a4:0c:64:de:e2:a1:17:70:5b:a4:
                    b2:94:9d:70:19:ea:46:c4:ad:48:1f:1f:c4:6f:b9:
                    9c:85:9e:dc:d0:cf:12:9c:71:0b:0a:5e:80:c4:a7:
                    eb:d3:9d:63:3e:77:c5:12:de:44:fb:7e:7e:d9:f1:
                    40:78:c9:1a:68:55:77:d8:34:12:36:99:63:dc:98:
                    70:91:a8:b1:8a:ad:18:6d:7e:e6:be:32:d7:37:11:
                    db:d3:0c:27:e3:48:09:10:8e:db:89:b4:50:1f:76:
                    56:bf:d4:1a:12:0c:ca:68:cc:32:48:00:d9:4e:6b:
                    d8:0e:05:6f:7f:2f:bc:57:b0:22:8d:c1:b1:fa:ff:
                    2a:29:9e:e8:38:40:1e:5a:f2:49:72:84:3b:b4:2f:
                    52:b6:ba:90:96:81:7f:13:6c:3a:9c:09:fa:f8:e4:
                    d0:53:cd:b4:f0:44:71:e2:0d:8b:bf:b2:d1:0e:0b:
                    c1:35:7b:6a:44:19:a3:3d:b6:ae:84:0e:48:1f:0b:
                    06:0d:b0:b3:76:9a:2e:4d:0e:98:b5:f7:c4:00:9c:
                    90:eb:9d:40:3c:ed:e6:5b:9d:64:d4:6a:b5:d9:f8:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3A:F5:1A:16:D0:F4:FF:97:68:5F:71:29:FA:86:13:68:36:D5:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/fc7e1ab8-f5a6-34aa-9832-6462cf544893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl

            X509v3 Authority Key Identifier:
                keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7380:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:5b:c4:1f:a8:60:69:3c:03:66:cd:7b:df:d0:2e:7f:26:
         a8:7d:72:64:86:18:06:d3:41:6b:0e:43:d5:d6:20:bc:9d:49:
         5c:1e:bd:1e:e8:f5:d1:a7:77:8d:e6:8d:03:6b:6f:16:95:cc:
         ea:e1:c0:0d:8b:13:93:fc:d8:b9:3d:f2:bb:f9:f1:0c:8c:5b:
         28:82:ad:34:ff:e8:18:05:2b:72:a6:a8:e4:87:f0:24:03:12:
         a9:bd:91:35:90:d9:f7:42:d4:39:fb:d9:f8:c7:74:ee:6c:20:
         29:a6:ae:d9:71:0d:ef:11:a8:33:68:4d:55:15:3f:cd:67:9a:
         7a:2a:3f:91:2e:20:a3:8b:17:47:b7:11:86:69:5f:41:b5:0d:
         6f:bb:75:43:83:26:f6:57:dd:93:4f:76:67:ef:5b:65:19:68:
         0d:f2:d5:3f:13:1c:8c:0c:19:26:92:b0:a0:8e:8d:8e:64:5c:
         d1:3a:54:80:83:65:c5:56:16:22:4c:95:38:e4:ce:ce:98:85:
         06:01:6f:9f:81:a1:80:42:1a:a9:32:7c:ec:4d:0f:c0:2e:d0:
         d2:19:70:6e:a1:ac:93:2d:ca:53:14:ba:32:ee:c4:42:c7:ed:
         d2:97:ed:8e:18:f6:24:14:7e:31:80:00:2a:61:7f:a4:6a:7f:
         2f:a7:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:16 2025 by rpki-client