Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa
File:                     dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa (raw, json)
Hash identifier:          baelsOAGBnxORkjtoi837ZfWD9R7s9vwn5TOGhWQCpU=
Subject key identifier:   9D:49:74:7D:57:0D:92:41:1A:BB:00:04:C0:F8:24:3A:07:B1:A4:1E
Certificate issuer:       /CN=2aa2eb71-3102-4859-928f-a833f2c63713
Certificate serial:       010D0C9F43285848C6E632AEEA6D75BCF7EA6B40
Authority key identifier: AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     6373
IP address blocks:        2607:7c80:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:32:ae:ea:6d:75:bc:f7:ea:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa2eb71-3102-4859-928f-a833f2c63713
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=912b4ea3-478b-426c-be65-9b827d9b5f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:50:49:5a:e1:97:af:0a:7b:cc:0f:98:b6:
                    cb:a2:7a:06:41:cf:16:aa:06:58:01:f3:25:14:38:
                    e0:db:f6:ce:ae:3a:5c:89:b5:93:95:24:ec:6c:29:
                    c2:b1:18:3c:33:c2:a7:26:76:9b:fb:b7:26:98:f2:
                    c8:75:e1:6a:63:66:df:2f:7f:d7:15:1a:b6:79:74:
                    a6:87:cd:64:7d:02:d4:1a:e8:2f:4d:fa:c5:97:2f:
                    d3:06:6c:b9:c0:2e:90:88:7e:6a:42:cf:02:ae:af:
                    95:23:b8:fe:f9:e2:03:21:d9:92:43:b9:03:42:f2:
                    4f:1e:bd:bc:fd:b5:98:b1:30:cd:5c:fa:fe:1d:12:
                    4b:ac:2d:75:7b:e0:6c:a7:89:24:8b:a6:5c:cc:78:
                    d7:7b:a2:6e:11:15:d7:34:93:24:2d:45:8a:c7:67:
                    93:aa:7f:38:64:03:b8:9f:4b:88:7d:bf:3d:50:a7:
                    ac:f9:fc:b6:61:cc:21:c3:3d:c3:64:cd:cf:91:30:
                    12:b6:a8:7c:d3:c9:7a:87:cd:88:33:87:ab:cc:43:
                    aa:95:ae:42:86:71:37:1e:71:35:b7:27:21:50:a1:
                    a6:d8:c9:35:7e:0f:58:df:a0:a9:75:0b:5d:9a:52:
                    b4:d3:7e:58:01:ec:be:ba:c3:7d:0e:ad:68:04:65:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:49:74:7D:57:0D:92:41:1A:BB:00:04:C0:F8:24:3A:07:B1:A4:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd66a9e5-a4e0-3363-84df-36af8ed5c07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl

            X509v3 Authority Key Identifier:
                keyid:AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7c80:57::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ed:22:7c:df:af:c4:50:c9:24:3d:82:ed:34:d5:0d:28:a3:
         9a:96:a3:ae:9e:89:3f:99:55:e1:24:19:ca:9a:3b:14:8a:0c:
         c3:b5:67:5b:d0:5f:52:5f:61:1c:54:f3:b5:29:7c:20:92:55:
         84:32:b9:49:1e:f8:1a:37:48:aa:de:a0:59:8e:76:5f:58:c8:
         b1:a6:7c:2b:16:2e:bd:26:e9:bb:4e:b8:ba:2f:9e:20:43:86:
         e0:ae:e2:5c:05:ea:6e:72:86:1e:f7:68:b6:96:26:a8:74:f7:
         2e:bd:6b:42:d7:ad:37:9c:18:ca:7d:ea:a1:93:ae:da:c7:e4:
         72:be:fd:67:55:4a:de:12:2e:52:20:ca:4d:9f:72:68:72:10:
         70:c6:32:58:3b:ac:cf:3c:69:d2:2c:41:16:f7:44:2c:30:2f:
         ed:c4:84:73:fc:f2:fe:52:7e:06:bb:c1:c1:29:a4:c4:36:b7:
         7e:c4:30:b0:cf:30:2b:d3:54:e6:35:cc:79:d7:92:c5:70:1a:
         97:78:5a:53:35:f1:a3:56:2d:8e:aa:51:9c:08:70:4e:62:e3:
         fa:8d:ac:08:82:37:c1:f9:1f:a1:8c:00:69:60:c6:f3:34:49:
         25:d1:7d:75:0d:af:58:ee:05:e5:d8:d5:b6:35:0b:e6:18:39:
         57:63:57:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:27 2025 by rpki-client