Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/a0765043-8145-3efd-b13b-645ce2c5a15c.roa
File:                     a0765043-8145-3efd-b13b-645ce2c5a15c.roa (raw, json)
Hash identifier:          fbuEE6QDIXEvgee49z1lvwCOrhVRSLIKAw/A0+QJN9U=
Subject key identifier:   05:B3:CA:2A:E0:3D:BA:89:6A:05:1E:A8:35:20:93:10:0F:AF:79:83
Certificate issuer:       /CN=e7557763-e46b-4ec1-afa8-bcf257b54911
Certificate serial:       010D0C9F4328584957F4171F2CAA432A1D914B80
Authority key identifier: 20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/a0765043-8145-3efd-b13b-645ce2c5a15c.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     29831
IP address blocks:        2604:61c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:17:1f:2c:aa:43:2a:1d:91:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7557763-e46b-4ec1-afa8-bcf257b54911
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=788525e7-5687-4297-8d8a-7e5ad139723b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:3d:99:39:48:84:b5:74:fd:7d:c4:69:c4:
                    f6:08:78:7d:4c:15:5a:57:8d:3a:b1:b8:6f:9e:37:
                    28:23:b5:55:7e:e2:98:12:10:58:a1:19:61:dc:21:
                    a3:47:ed:cb:9c:8a:19:8c:e4:91:c3:45:e4:95:55:
                    a5:27:29:37:00:48:d7:87:c8:1e:b9:74:84:78:f6:
                    4a:1d:20:35:bf:24:1e:78:2b:2d:9f:79:a7:47:37:
                    86:29:e5:00:76:f7:d0:d9:e5:32:7d:93:e0:64:3a:
                    fb:16:b7:aa:16:fd:c3:43:95:fb:43:70:52:71:69:
                    f6:18:37:4e:6e:a4:fa:7a:be:ee:01:84:0f:7a:05:
                    70:2c:1c:ac:22:b9:4e:d6:4e:4f:b8:44:e9:9a:c9:
                    ba:de:aa:4c:52:05:c9:fb:22:83:7e:8a:4e:72:b9:
                    f9:3d:b2:89:c9:c8:e8:af:48:ec:80:f5:f6:a9:6d:
                    7c:33:f1:b1:e5:35:b8:cb:31:49:e8:db:67:10:99:
                    a8:69:ba:89:3e:e2:56:17:5d:a7:ea:8c:ca:2b:5f:
                    d0:a8:ab:7b:12:6c:21:f6:a0:e4:d5:64:26:3b:23:
                    a3:90:69:fd:ed:67:62:4f:f7:b1:e5:98:2d:02:66:
                    16:01:35:ea:48:f6:16:6c:a0:6a:30:75:d3:66:ed:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B3:CA:2A:E0:3D:BA:89:6A:05:1E:A8:35:20:93:10:0F:AF:79:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/a0765043-8145-3efd-b13b-645ce2c5a15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl

            X509v3 Authority Key Identifier:
                keyid:20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:61c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:a7:a5:2a:1f:84:06:e7:26:d0:e4:44:ce:0c:18:44:25:
         33:a0:c9:3b:31:23:c8:45:9c:f1:dd:08:5d:25:81:47:98:e4:
         8b:a1:df:1e:d9:d9:fe:8f:fd:e5:2a:0b:8f:66:6f:77:da:b6:
         48:71:37:80:03:83:36:2c:dc:b0:dc:13:41:f9:ef:e4:62:77:
         a6:5d:2f:1b:9c:c1:b9:da:90:64:32:47:d9:43:e1:df:ab:82:
         a0:12:0b:39:40:05:68:db:3f:b5:9e:e2:97:61:5e:ad:d7:d6:
         07:e4:c3:71:2e:df:40:a0:27:57:1c:90:41:38:23:29:d1:4b:
         78:72:ed:a5:ac:cb:0d:13:db:46:9a:1e:72:08:e9:19:9c:28:
         de:5e:0f:03:90:0b:2f:03:c8:fb:54:2d:5e:9d:be:be:02:af:
         4b:7c:95:84:76:59:ae:5c:6e:d7:7b:d0:a4:50:d1:73:56:7a:
         82:bd:e5:0d:3d:69:37:0e:f1:ec:90:f5:36:3f:e8:97:9f:f5:
         68:8a:fe:ff:e4:54:a9:c0:01:ec:eb:4b:4d:05:8c:84:88:14:
         75:7e:3d:0f:26:51:b3:9f:e3:70:34:8a:1c:2f:df:b9:00:b4:
         eb:81:09:56:d2:39:81:9e:25:1e:70:ad:5b:5c:88:42:08:09:
         d2:ea:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:05 2025 by rpki-client