Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa
File:                     caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa (raw, json)
Hash identifier:          8HL7UyM+rZuVxnEMMG8F+aB3SR9cmhlGejXezkFaSJM=
Subject key identifier:   92:BB:07:4A:3C:45:D3:7F:9A:0A:97:26:71:5B:CE:DD:BC:09:9E:98
Certificate issuer:       /CN=d2de7271-9c81-455b-9780-55895b635592
Certificate serial:       010D0C9F43285848F7C13F4567CDA681FBD61400
Authority key identifier: B6:52:57:17:4F:47:66:18:F6:EE:34:7E:44:53:C8:68:EE:5C:43:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     26042
IP address blocks:        2606:c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:3f:45:67:cd:a6:81:fb:d6:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2de7271-9c81-455b-9780-55895b635592
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=9539c9ca-dd2a-4e68-bc3d-6452d893b561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:c6:f1:a4:d0:51:ad:5b:3b:2b:b8:e5:25:
                    eb:79:db:53:9d:42:49:0d:49:22:72:cf:89:d5:98:
                    d3:f0:46:4f:0b:bd:9a:73:d7:5a:16:1d:20:49:71:
                    09:08:1f:3c:50:44:60:85:d6:37:a0:1d:18:8b:db:
                    d6:6a:99:f6:11:21:31:69:6d:60:93:54:2a:3b:0f:
                    75:49:85:6a:54:7a:b7:f1:95:03:71:4f:86:30:bb:
                    9e:34:b6:2e:1d:23:73:2a:97:f0:d8:a8:59:3d:a5:
                    d6:7a:ae:6a:af:c3:4a:b3:59:67:59:b0:57:81:a5:
                    8b:99:de:94:ce:8c:44:2a:d6:1d:88:00:74:32:90:
                    6a:5e:cd:b3:10:12:1b:fc:1b:ca:3d:17:40:4b:19:
                    d7:2d:be:af:31:d3:9a:90:85:fe:c5:88:5c:af:7d:
                    24:03:6b:78:3d:76:b4:a2:73:9b:5b:de:78:df:67:
                    50:2b:90:01:34:66:09:a9:d7:9c:6e:5e:d0:91:fb:
                    48:d2:84:a5:64:ce:e6:52:33:8d:3e:31:ac:b8:3d:
                    46:8c:6d:c1:90:0f:88:db:a3:a6:74:ca:ea:82:bf:
                    24:62:cf:b4:99:7a:a9:4e:29:f5:0a:3a:65:63:b2:
                    da:f1:cf:71:66:a4:8b:af:5a:d2:52:2f:93:05:93:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BB:07:4A:3C:45:D3:7F:9A:0A:97:26:71:5B:CE:DD:BC:09:9E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/caa19e29-1ee5-3550-9449-8cefa6f09bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592/d2de7271-9c81-455b-9780-55895b635592.crl

            X509v3 Authority Key Identifier:
                keyid:B6:52:57:17:4F:47:66:18:F6:EE:34:7E:44:53:C8:68:EE:5C:43:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d2de7271-9c81-455b-9780-55895b635592.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:62:34:1f:23:72:78:b6:70:ab:ff:2a:36:f4:af:ca:36:52:
         15:61:5a:0d:e4:62:a0:4e:9c:3f:5b:a6:48:9c:42:21:0d:ed:
         68:99:3b:af:e8:89:f0:d6:26:a6:ba:5f:20:09:88:e3:b7:40:
         82:76:d5:8c:3d:c4:f5:4b:13:41:aa:b6:26:2a:c4:ca:da:0b:
         64:cb:f5:2e:ec:2d:ae:f0:26:74:bd:ef:ee:ac:9a:bd:8a:74:
         13:e3:c4:9a:6c:c6:6b:e4:76:76:f7:3c:0f:8e:c6:d5:49:56:
         1b:51:bc:30:bb:63:45:33:21:86:13:b9:82:79:b0:fb:b2:6c:
         51:5a:29:74:dd:ec:f6:77:39:fd:49:14:fa:80:00:0f:f5:85:
         35:a2:1a:98:ab:68:e1:b9:48:cc:6e:bb:63:ad:06:7c:fa:51:
         d4:94:0f:08:01:46:f0:46:2f:f7:fe:d2:9a:f7:92:df:9c:b8:
         03:31:64:2a:f7:85:4d:94:e9:f0:84:9f:88:6b:c1:47:e8:3a:
         98:80:aa:c1:03:8b:fc:2d:92:ab:10:e3:15:59:e4:05:15:2e:
         40:77:e0:38:e5:b1:f1:ad:a3:a6:8f:d3:67:66:0b:5d:79:56:
         a9:c1:72:d9:54:f8:ff:c1:25:b7:2d:44:50:8a:6b:2b:c9:1d:
         aa:14:f2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:58 2025 by rpki-client