Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa
File:                     5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa (raw, json)
Hash identifier:          uvZqq9XVKfY0V/f4bBpZCorS5J6fhv+mCz2lLPDspbQ=
Subject key identifier:   B2:87:67:08:95:96:32:5A:16:D2:65:73:B9:E3:F7:60:FD:99:33:41
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285849350E80C547AE3C8533F22F00
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     33208
IP address blocks:        2607:9a80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:80:c5:47:ae:3c:85:33:f2:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=6b2edaf2-98be-48cd-8a86-4b060c7e5fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:eb:e8:2e:3d:51:3e:2c:dc:fa:58:1a:e9:c2:
                    56:e3:89:ba:39:96:a7:1c:71:fe:b1:4b:eb:52:e2:
                    dc:f9:88:8c:44:30:58:c9:61:57:1b:34:22:bc:aa:
                    2a:d6:91:71:2e:ec:78:67:81:65:73:5e:21:15:a8:
                    e3:35:81:bb:18:6e:17:8d:a0:3d:6a:07:cc:44:eb:
                    7d:1a:83:e1:5d:72:17:c8:d6:4d:41:dc:c6:a7:ff:
                    75:9e:e2:f2:d3:0b:ef:26:e2:c2:a8:86:2c:0e:9b:
                    9c:b7:a4:e8:5a:5e:32:31:e6:14:39:75:9c:f6:22:
                    a2:b5:2c:cb:fc:62:15:56:83:24:80:32:ae:b2:ff:
                    24:90:ce:93:d1:f6:4c:2c:be:2f:1c:31:c9:fd:bd:
                    9e:ea:d5:ac:bf:30:04:74:88:15:07:d6:77:9f:de:
                    e2:f7:d7:9b:cb:26:9a:91:39:76:28:77:8c:f0:bd:
                    0f:58:db:ba:a6:b3:c4:9a:50:e6:05:0a:b5:8f:0f:
                    2b:a7:bd:ae:d3:54:5b:e5:95:bc:da:ff:f9:b0:b9:
                    24:be:55:14:b8:1c:77:7f:9d:b8:18:1d:06:b9:e1:
                    27:b9:b3:af:9e:f8:b6:f0:52:3d:32:8a:d0:2d:21:
                    3a:1f:e4:08:ec:64:ae:4d:63:bc:2b:35:a6:d8:3e:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:87:67:08:95:96:32:5A:16:D2:65:73:B9:E3:F7:60:FD:99:33:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:c4:e0:e5:4a:49:ec:fb:59:28:89:b1:92:21:d9:38:44:
         e7:c9:88:b8:e4:55:38:51:6d:ea:aa:57:41:89:29:ec:d5:99:
         74:00:00:2b:9e:cd:6a:54:93:12:ea:ad:2e:2c:1d:f6:d4:cc:
         db:1f:1a:8a:d2:76:5c:cd:e7:b2:15:07:a5:48:3c:41:81:2f:
         7a:36:5d:42:34:6b:02:24:e4:f0:11:92:64:39:39:f1:ea:9c:
         04:43:27:98:60:72:52:ff:9d:44:8a:eb:eb:25:e3:cc:b7:c8:
         f9:a2:4d:e4:3f:70:c3:57:1f:80:24:98:70:4a:4e:0b:ef:0b:
         5a:a4:1c:0a:ba:36:c4:a7:8c:8e:ff:e3:43:6c:23:f6:0d:f7:
         63:cf:c5:34:63:12:bd:ca:35:7b:be:d0:7d:c9:31:a3:69:6b:
         cb:ec:b0:15:e3:33:d1:f1:3d:98:c8:66:c6:ee:91:88:84:a5:
         a0:f3:8e:5a:af:93:1a:cd:9a:7b:0d:bf:66:64:5a:84:b9:7a:
         7b:d0:76:c3:90:46:ee:6b:6d:18:3d:29:d4:3f:58:74:af:a2:
         2e:e4:8a:40:f5:47:f4:84:8b:d4:d6:e5:80:ae:d1:2b:cd:4a:
         ac:e7:f4:7f:34:31:c4:e6:b0:64:b7:39:51:2b:16:0c:d0:f0:
         fa:a7:e0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:46 2025 by rpki-client