Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa
File:                     e6589685-287e-39e0-a7eb-0aa709e301c6.roa (raw, json)
Hash identifier:          1Kk8Sf+Ja3ow90PU2j5ohnt8HR89LfgI7R1vP3TRBQo=
Subject key identifier:   BE:CB:43:31:07:C9:49:41:84:24:86:18:9D:6F:FA:81:59:73:1B:1B
Certificate issuer:       /CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e
Certificate serial:       010D0C9F43285849151159231F31101D0CDC0AC0
Authority key identifier: B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     21790
IP address blocks:        2602:81a:4000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:59:23:1f:31:10:1d:0c:dc:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=0be8465b-0526-469a-82eb-b33ef08901b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:c5:a6:f1:69:78:a0:b3:c1:a5:24:3b:08:
                    69:ae:a1:ea:82:a6:4e:cb:41:ca:3b:a2:5a:7b:7e:
                    97:2c:00:33:cc:50:11:85:20:98:20:a4:bf:ee:eb:
                    b7:6f:9b:7f:fb:90:75:d9:1e:e3:87:7c:ba:81:c7:
                    21:4f:a2:73:b7:bd:c1:f7:a1:4c:74:33:fb:e3:60:
                    5b:d5:14:ec:c5:41:5a:6e:9e:e1:1f:86:d4:e7:7f:
                    17:84:51:fe:ea:32:ac:c6:b9:ed:a3:05:55:85:19:
                    e1:d8:96:6e:69:d1:76:c4:1d:68:be:25:cb:b2:46:
                    17:5d:ae:51:de:47:48:6c:c8:0f:7f:2c:80:a4:f6:
                    42:b2:b3:31:7c:dc:79:33:6a:3d:b3:9a:cc:f0:df:
                    43:ec:76:f1:b5:c8:db:d4:87:5f:27:ce:9c:f9:65:
                    39:96:e8:ae:fc:47:0d:a0:df:ba:3e:c2:93:41:8b:
                    fb:97:50:03:ff:6b:6d:6e:5e:13:ea:c8:6d:57:94:
                    ba:2a:12:38:1a:19:b2:e3:00:b2:8d:f0:89:38:15:
                    82:30:79:39:03:a0:25:e9:88:3b:de:e2:73:af:8e:
                    33:0c:1c:3d:28:66:97:ac:7e:6d:ec:18:59:a6:14:
                    40:e9:97:e9:23:3c:91:ca:24:15:47:88:cb:73:c1:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CB:43:31:07:C9:49:41:84:24:86:18:9D:6F:FA:81:59:73:1B:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/e6589685-287e-39e0-a7eb-0aa709e301c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl

            X509v3 Authority Key Identifier:
                keyid:B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81a:4000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:fa:ce:a5:b4:ad:b1:c6:b5:80:b7:d2:55:96:ff:8b:01:2c:
         83:5d:9f:74:89:b1:95:8c:d9:2f:32:9c:37:7e:2b:70:60:aa:
         87:7c:08:6b:36:0d:cc:2c:89:23:b2:47:b0:69:94:d1:f4:ab:
         55:6d:1c:b2:77:e3:da:4c:0f:b4:b5:d1:5c:12:29:e5:7d:39:
         4b:42:39:85:fe:01:27:05:a3:8c:05:e2:70:31:15:ac:e5:83:
         8a:3d:43:3f:02:ea:00:e3:01:18:93:b6:cf:84:6e:40:c7:32:
         ff:9e:05:a2:e5:94:70:59:ce:ea:20:bf:8b:37:6f:dd:01:43:
         27:fb:64:e7:0e:36:dd:75:e0:e3:75:e5:7d:35:fa:79:7a:16:
         c3:a0:86:c4:eb:fb:30:36:48:83:83:cc:76:2a:fb:c9:00:ed:
         22:15:18:50:13:bf:54:7f:ce:d6:4c:e9:10:53:f8:21:7b:7d:
         1b:be:40:f2:45:4f:af:b5:fb:45:50:b1:ce:85:d0:c3:d9:41:
         a1:99:ef:ba:2e:af:69:79:02:b9:fa:8b:c4:ad:e6:ad:6a:e2:
         bb:d6:0f:36:70:a4:2f:3d:bd:67:d1:a2:17:06:b2:a5:2e:0b:
         2e:e5:a1:06:c1:28:1e:ce:74:fb:20:e9:7d:c5:4a:d5:3b:52:
         e0:66:33:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:24 2025 by rpki-client