Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1f6e6277-8ea3-393e-ba00-44d1e44496de.roa
File:                     1f6e6277-8ea3-393e-ba00-44d1e44496de.roa (raw, json)
Hash identifier:          csvXVGxdM1VqqFA2S70NBixbm0g6EILlU5HfcJbh3q8=
Subject key identifier:   29:0B:14:CD:B9:79:04:3B:4F:90:D3:FD:C1:56:19:F6:BD:9B:88:18
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285849350E86DA325E7DE57DA7F180
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1f6e6277-8ea3-393e-ba00-44d1e44496de.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     10747
IP address blocks:        2607:9a80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:86:da:32:5e:7d:e5:7d:a7:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=b78265cc-33b7-46eb-967a-33383dc8aa7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:47:4e:2b:57:d9:40:bf:8c:55:5d:41:89:40:
                    42:4d:ce:12:41:8c:fc:c0:db:41:98:ae:c6:52:3a:
                    33:98:9e:8f:7f:7b:6d:22:74:c0:08:dc:ac:d4:94:
                    e4:fb:10:48:ee:29:8d:86:2d:13:0e:66:ce:7f:d8:
                    cb:1f:89:49:9a:3b:01:da:a5:75:d6:2c:55:c8:ec:
                    41:e2:39:f0:fa:b9:ff:ff:6d:e1:1f:d9:f1:e1:db:
                    c2:7f:8c:96:15:fd:54:57:a8:d5:81:f4:f0:ad:53:
                    59:bb:b4:40:66:8f:1e:aa:e1:ca:e4:7c:75:11:2b:
                    37:f0:45:f9:71:08:1b:95:02:77:39:81:a1:34:b7:
                    49:65:e7:ce:7f:2d:fe:54:3e:c6:75:48:e2:5f:d5:
                    88:45:72:9b:b8:b6:7b:f3:32:ec:db:24:66:a2:bf:
                    23:cd:b1:65:53:52:6f:de:72:97:87:51:54:e1:b2:
                    d2:c5:7d:82:fa:36:21:e6:8a:21:27:6b:6c:12:cf:
                    bd:95:18:c2:de:c9:a6:63:45:13:ab:28:f6:54:ff:
                    65:33:44:ea:16:a0:a9:23:9b:01:a9:55:96:b6:a1:
                    54:f8:98:67:fc:34:d6:8e:3a:e3:8b:a7:1b:c9:fb:
                    29:fc:2e:66:24:11:2c:9a:04:63:8e:9b:b4:b8:08:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0B:14:CD:B9:79:04:3B:4F:90:D3:FD:C1:56:19:F6:BD:9B:88:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1f6e6277-8ea3-393e-ba00-44d1e44496de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ed:82:bf:21:ae:54:76:10:4e:42:37:1f:26:d2:49:fb:81:
         e4:55:7b:29:df:f0:ce:77:48:e5:59:6e:34:25:d7:4c:79:63:
         b2:63:65:58:bc:05:f6:63:bf:74:78:dc:5f:fe:de:58:4a:63:
         03:68:32:3b:d3:16:17:78:18:c7:8a:af:49:c3:a4:60:6d:b6:
         a3:b6:ab:e0:16:54:90:ae:98:18:a9:02:42:bb:13:8d:a3:9c:
         35:2d:fb:0d:8a:7e:ef:3d:6c:94:44:30:49:18:d1:6d:8f:49:
         13:22:80:3d:ef:40:7a:64:dd:31:a4:b7:9b:4e:b3:8c:79:84:
         93:30:15:82:37:19:47:ed:cb:dd:d7:12:36:a1:07:d0:51:a8:
         4f:d1:c9:90:ce:5d:c0:b7:d2:4b:f6:e1:2b:1d:a4:8b:4d:36:
         e0:71:df:2e:9d:60:57:4d:27:64:4a:87:15:5e:fe:30:e0:74:
         91:2e:47:51:58:cf:43:8e:00:ad:5b:0c:88:8d:22:8c:3f:01:
         0d:c5:83:c3:77:d8:7e:22:8d:11:66:2f:93:00:45:03:49:e0:
         d0:58:84:3d:67:24:9f:9e:5b:12:c2:92:d9:d4:8b:8c:86:5b:
         8c:3e:fb:cd:72:89:5e:75:d7:44:49:bb:52:c5:15:52:9d:78:
         ee:f8:d4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:01 2025 by rpki-client