Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa
File:                     1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa (raw, json)
Hash identifier:          LaRwoqu5V/IYoAExdY8OuQ88yAjLKxbpdVmAeOe2RA0=
Subject key identifier:   4B:FE:2C:8D:AF:99:45:07:78:EA:43:E3:18:13:62:A8:87:9B:F2:4E
Certificate issuer:       /CN=a6aef644-f3b7-499d-9ed8-cd39be3324bf
Certificate serial:       010D0C9F43285848A565F28161E49D27C9B41D10
Authority key identifier: EC:22:7C:30:7C:39:DC:33:50:6B:51:C0:19:A2:AE:99:C1:E6:37:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa
Signing time:             Fri 24 Jan 2025 02:00:39 +0000
ROA not before:           Fri 24 Jan 2025 02:00:39 +0000
ROA not after:            Thu 24 Apr 2025 01:00:39 +0000
asID:                     399224
IP address blocks:        2606:95c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a5:65:f2:81:61:e4:9d:27:c9:b4:1d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6aef644-f3b7-499d-9ed8-cd39be3324bf
        Validity
            Not Before: Jan 24 02:00:39 2025 GMT
            Not After : Apr 24 01:00:39 2025 GMT
        Subject: CN=f1c67963-6926-44d1-a50f-ecf6bccfea08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:fe:c5:61:88:40:47:42:c9:09:19:d4:f1:
                    17:32:ef:2a:b3:73:45:a0:5a:c9:f1:d4:ea:2f:e2:
                    9e:6a:21:c3:ed:ee:aa:09:e7:79:9c:3f:14:1d:f2:
                    66:3d:f3:33:8e:98:5a:88:d1:b2:f5:80:25:aa:68:
                    8a:b8:8e:b3:16:bc:9b:50:3a:37:cd:3f:96:5e:ee:
                    ec:f5:db:cb:70:21:e9:fa:70:11:09:d3:a5:a2:8d:
                    51:e2:9e:00:d7:b6:6c:7d:56:81:7c:0d:e9:de:3d:
                    e7:03:33:af:a7:43:76:ad:02:cd:0a:0d:49:9b:fe:
                    3c:c7:58:1a:0e:4e:75:5d:26:94:1b:1c:1c:27:0c:
                    5c:88:8a:da:4e:34:97:56:86:4e:7f:4a:a7:44:c3:
                    e9:78:77:03:91:56:9e:4f:a4:b8:33:fd:f2:15:68:
                    c7:4e:39:97:08:fc:ac:b6:85:a9:a5:c8:18:d2:f8:
                    f3:df:3f:1c:4e:ce:0d:d7:4d:71:c7:23:a5:dd:4e:
                    4b:cc:b8:25:c7:dc:d2:5a:56:95:48:12:b2:27:27:
                    11:be:23:ca:22:59:bf:e9:fb:cc:81:17:fe:b6:20:
                    0b:7c:be:ac:14:e3:1f:af:b3:ba:f6:4f:b3:b4:47:
                    68:d2:63:85:e0:da:9b:83:e5:b4:55:6a:38:69:cf:
                    b9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FE:2C:8D:AF:99:45:07:78:EA:43:E3:18:13:62:A8:87:9B:F2:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/1d6d4ec2-75d8-36cf-aa96-2344eec4a193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf/a6aef644-f3b7-499d-9ed8-cd39be3324bf.crl

            X509v3 Authority Key Identifier:
                keyid:EC:22:7C:30:7C:39:DC:33:50:6B:51:C0:19:A2:AE:99:C1:E6:37:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a6aef644-f3b7-499d-9ed8-cd39be3324bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:95c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:af:94:0f:39:a2:ec:5a:0f:3a:21:22:fb:90:cf:c9:48:f5:
         21:46:7b:15:1d:61:85:a4:37:b8:19:d4:f0:8d:1d:5e:55:6b:
         83:a2:df:a9:2a:18:cf:2f:58:d0:90:d8:b0:30:e5:df:cc:12:
         3f:5f:fc:24:15:a5:9b:c6:cd:58:6b:7d:e0:70:91:49:d0:02:
         8c:01:2f:c3:37:7b:02:00:0a:3a:74:d8:fb:e6:58:05:d0:f4:
         7c:f6:3c:94:22:c7:72:db:af:db:f8:cf:c6:fc:64:6f:b4:9c:
         0f:49:d7:60:ac:85:15:4c:16:ff:3c:ce:cf:ac:e9:97:9b:6b:
         1a:4b:30:b3:ee:fb:ef:1b:00:86:8b:e4:85:6a:28:a1:3a:79:
         46:ce:97:03:b3:7e:64:05:26:c7:36:d5:c2:c0:52:e1:dd:ea:
         2d:2e:f2:27:49:2c:2d:93:32:59:53:8c:d0:c1:92:65:76:d3:
         b8:87:1d:6f:d9:c1:8e:9f:96:98:5f:12:d5:60:0d:de:71:ae:
         f6:1e:1b:7f:2e:ca:b3:10:ca:89:66:c0:28:fb:da:44:44:55:
         db:58:3d:7f:a9:e5:b0:d1:fa:78:3c:3e:8b:ac:f4:81:5a:a7:
         a1:7e:83:66:8f:9c:24:6f:ec:21:69:91:dc:5c:ba:6b:bd:47:
         cf:f4:ad:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:48:48 2025 by rpki-client