Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa
File:                     2716648f-7661-3f70-b742-5119c61157cf.roa (raw, json)
Hash identifier:          GwFVHBG6IMFhq4mGLD8VQwdofYKVomMBBbJ3tQPrWSM=
Subject key identifier:   3A:07:71:98:49:E9:B0:53:3D:9E:AB:72:16:55:1D:0B:DF:A7:2E:35
Certificate issuer:       /CN=b16dab15-57d6-416c-8c05-543d7b01e03d
Certificate serial:       010D0C9F43285848F7C13F07962EFE1198054780
Authority key identifier: 45:BD:2F:AF:92:E7:90:5D:60:6C:16:B8:F8:28:40:72:C9:43:78:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     53835
IP address blocks:        2607:ca40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:3f:07:96:2e:fe:11:98:05:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16dab15-57d6-416c-8c05-543d7b01e03d
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=d3a121ed-2a81-4c13-b392-8a34528f9151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:7d:ad:1e:f1:45:2e:96:68:8c:07:ca:12:
                    34:8a:87:ea:7a:d6:3e:c5:0f:7b:28:7e:65:32:9e:
                    c5:c7:bb:42:e4:e6:3a:e8:01:d3:cb:61:20:48:cd:
                    18:94:1c:78:1b:46:64:e9:21:25:a7:6b:2a:68:91:
                    37:c9:d7:e0:02:8a:b3:25:bf:44:c7:c5:75:43:79:
                    08:22:d9:4f:da:5a:64:8a:c1:c0:be:07:57:c6:30:
                    5e:2a:70:e0:21:17:61:f2:4a:a0:90:2c:12:da:c7:
                    43:db:be:64:3a:1a:cf:a6:e0:13:34:de:d3:4c:ce:
                    f6:77:fa:fd:34:80:0b:ca:5e:ea:f5:32:3e:d3:7f:
                    4e:fa:ca:1a:e2:cb:cf:6b:17:dd:e6:99:28:b4:1a:
                    94:ca:df:06:c9:4a:eb:de:9d:49:80:25:af:f4:44:
                    28:17:f5:18:25:63:53:a6:5c:41:91:f1:02:12:bf:
                    8d:bb:3b:db:bc:4e:40:89:76:70:f7:7e:a2:21:3d:
                    a0:5a:71:73:06:60:06:1a:ab:33:14:be:4b:48:d5:
                    f2:a3:26:3e:f2:2b:22:00:ae:59:3f:5f:74:63:6b:
                    4c:f9:aa:27:e8:3d:ff:7f:bc:7f:00:a0:9f:a4:30:
                    92:18:2f:e8:0c:56:7f:c6:cc:0e:f0:6e:c1:ac:ff:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:07:71:98:49:E9:B0:53:3D:9E:AB:72:16:55:1D:0B:DF:A7:2E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/2716648f-7661-3f70-b742-5119c61157cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.crl

            X509v3 Authority Key Identifier:
                keyid:45:BD:2F:AF:92:E7:90:5D:60:6C:16:B8:F8:28:40:72:C9:43:78:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ca40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a4:95:f0:65:fc:d6:7d:50:fc:09:0a:ab:c8:41:b1:7e:50:
         89:4b:0a:5c:81:c0:dd:90:ae:4b:8f:84:40:18:ed:0b:0d:b9:
         c7:0a:f6:d2:6b:31:44:e2:91:c8:d9:01:6d:7d:f0:f2:56:be:
         ea:7c:5f:a2:32:2c:a9:82:26:ee:65:b7:0d:7f:47:dc:89:16:
         d4:57:ea:b8:df:a0:5f:ca:2b:22:22:82:60:4c:a0:98:3f:9f:
         87:47:ba:e8:a4:21:62:21:77:fa:02:6b:47:9e:74:49:a9:a0:
         0e:9c:c3:85:dd:08:98:21:d2:6a:fa:42:48:42:8d:b8:d2:cb:
         61:a8:f9:c2:67:af:7b:d3:2d:8f:0b:39:e1:e6:1c:95:57:3d:
         b9:3e:38:a5:61:3c:e4:3d:f7:29:0a:c5:86:04:e2:dc:fa:65:
         7f:78:d2:e2:13:e1:4c:05:30:4f:71:6e:7d:bc:df:a4:d4:ea:
         24:72:84:ca:ca:dd:4c:86:44:01:2c:0e:59:d9:18:e2:6e:66:
         14:72:cf:14:ee:97:87:55:bd:b3:f0:c7:8a:32:e0:2d:91:27:
         f6:7a:c6:11:5d:cb:58:4d:63:a7:aa:f1:69:13:29:50:3f:cc:
         d0:03:4a:08:3f:5a:71:5d:57:81:31:51:fa:33:f3:af:71:7a:
         ca:c5:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:45 2025 by rpki-client