Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/162ee090-0f5a-3523-8791-29c23de0f9bf.roa
File:                     162ee090-0f5a-3523-8791-29c23de0f9bf.roa (raw, json)
Hash identifier:          Uk6RFcIqIjswXgl90iTMVtXQOCftMJ6BbneGpLLGOT0=
Subject key identifier:   92:D5:5E:11:EE:58:4C:BA:AB:84:64:AE:F0:43:11:D1:2A:F5:E4:F1
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584944694AFFD545FCF62C887716
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/162ee090-0f5a-3523-8791-29c23de0f9bf.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     4922
IP address blocks:        2606:a800::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:4a:ff:d5:45:fc:f6:2c:88:77:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=3963e22f-9cd8-425b-9a3f-cee853272374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:9e:6c:2a:2f:94:f2:6d:87:21:93:fa:a6:
                    01:bc:59:8a:c7:74:a2:b3:95:ab:ed:66:0f:6c:0f:
                    62:36:a8:31:af:e4:40:a9:65:1c:df:3c:e6:5d:a2:
                    61:3b:60:7b:7e:78:ac:73:45:f0:78:f0:23:7b:0f:
                    e9:fd:5d:9b:aa:ce:93:8c:9a:3a:ba:40:90:10:b7:
                    d5:a2:be:20:be:a4:99:21:c6:0a:77:9c:38:ec:51:
                    dc:54:64:d6:47:fe:c3:91:25:61:11:3e:ca:3a:b4:
                    e5:5a:41:79:bc:eb:17:b7:b5:ca:20:85:d7:3f:88:
                    00:77:3c:0f:08:2d:86:a1:7c:7c:f3:d7:4c:4d:01:
                    ac:22:81:90:24:7f:fa:c9:89:e6:83:77:a8:42:33:
                    1e:5d:bd:91:3a:cf:90:91:4a:06:9a:1d:f0:1e:29:
                    52:44:b6:5b:ca:6b:11:a5:f3:01:0e:0c:93:89:2a:
                    fb:98:26:3e:d2:74:5c:5e:1c:e9:84:e9:8a:3a:ef:
                    3e:ac:35:e6:73:2e:ba:13:67:01:29:5f:9a:99:8a:
                    82:0b:c8:80:59:f8:87:dc:dd:35:18:67:a7:98:e5:
                    70:3a:77:41:e5:36:a9:61:ed:76:91:80:02:bd:70:
                    4a:40:f5:1f:96:85:18:6d:33:82:18:2e:36:27:7f:
                    8a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D5:5E:11:EE:58:4C:BA:AB:84:64:AE:F0:43:11:D1:2A:F5:E4:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/162ee090-0f5a-3523-8791-29c23de0f9bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a800::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:78:5a:9c:b7:64:59:22:06:21:00:98:45:4a:0e:16:ba:4a:
         b4:1d:a3:45:03:9f:1b:32:7a:b0:1f:37:d8:df:e0:5f:d1:49:
         10:79:a9:ca:54:27:0c:a0:5c:84:73:83:a8:35:34:c5:3b:8b:
         c7:21:29:6c:62:31:33:49:bd:8b:10:75:87:2d:bc:89:8f:e5:
         e0:c8:08:97:83:cd:df:d3:44:11:6a:8b:c3:99:72:7b:61:4e:
         79:c3:1a:66:70:e1:c2:1e:61:2c:33:74:cd:e5:de:52:ab:5e:
         c4:4e:10:0d:e4:06:51:15:70:47:ee:63:d9:87:33:61:58:45:
         75:da:a6:45:6d:aa:f7:44:be:e3:16:77:24:8b:dd:f9:1c:7c:
         9f:27:59:79:bc:38:40:3d:93:f6:ca:71:02:dc:e4:f1:a7:07:
         c7:33:7e:b1:6f:73:89:b5:60:4d:8c:93:4b:fa:53:f0:45:79:
         4e:99:9c:4b:4c:4b:81:d3:c8:30:78:0e:89:dd:09:04:3e:ad:
         50:de:44:b9:d5:e5:e2:21:bd:90:f2:e7:ed:08:fa:00:62:27:
         3b:80:de:07:b1:3c:57:8f:35:5a:97:30:cb:de:73:4c:f6:49:
         cb:fc:3b:9e:d4:96:fc:72:88:5c:64:99:2a:7e:2a:bf:df:10:
         4f:55:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:17 2025 by rpki-client