Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/f3dce46b-f004-3acd-9c23-e197c93f57a2.roa
File:                     f3dce46b-f004-3acd-9c23-e197c93f57a2.roa (raw, json)
Hash identifier:          dadgu5G1gOMU+/o3FjJrKYxhZ0mPKZ/5g3Xru7s+8Wg=
Subject key identifier:   95:64:75:57:AC:7E:04:64:EC:C2:62:4B:03:79:FD:CB:30:DC:E8:D8
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F43285849244E7FF329E2EFF3B621F000
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/f3dce46b-f004-3acd-9c23-e197c93f57a2.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2606:6440::/56 maxlen: 56
                          2606:6440:40::/56 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:7f:f3:29:e2:ef:f3:b6:21:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=cb67162f-87a5-4edd-8518-c2431727a42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:e5:aa:ab:74:e8:3a:49:18:bb:17:96:0d:
                    49:62:72:a7:c6:2e:7f:83:f0:05:a7:96:2b:71:35:
                    3b:73:6c:97:bc:4e:85:1b:48:a1:06:d9:06:9a:7b:
                    fa:76:e3:d1:4c:90:6e:57:98:58:ae:e6:ee:67:a7:
                    ac:48:37:82:05:53:33:61:07:df:e9:12:37:70:18:
                    9b:2e:ea:b8:38:25:25:25:b4:5c:30:db:e8:20:f4:
                    d3:64:86:0c:be:f3:2e:93:e8:51:9b:d2:ed:99:d0:
                    85:f6:fa:3f:93:0a:ba:e9:7c:57:c5:96:1e:48:49:
                    d4:c5:7d:b9:f1:64:5c:a7:db:af:3b:e3:80:8a:bd:
                    dc:34:1c:10:cc:08:f2:e0:11:c6:d3:9e:fb:04:b1:
                    77:4d:a9:98:25:70:49:ef:e6:dd:c1:fc:c6:9c:97:
                    e9:af:3c:8e:58:29:f2:02:f7:71:41:31:4a:62:bc:
                    5c:0e:6f:d2:8b:50:8f:ff:82:9d:66:38:98:02:0b:
                    e4:e3:22:76:32:7c:7a:16:45:0e:ac:0c:f8:be:4c:
                    73:55:eb:13:91:6e:cd:44:20:7d:a4:d9:5c:30:21:
                    96:c4:a1:a6:b7:67:47:0a:ea:d5:08:be:28:5f:47:
                    f7:ab:4b:45:6b:32:ad:27:c1:71:87:08:08:3a:76:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:64:75:57:AC:7E:04:64:EC:C2:62:4B:03:79:FD:CB:30:DC:E8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/f3dce46b-f004-3acd-9c23-e197c93f57a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6440::/56
                  2606:6440:40::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:54:b1:85:f4:cd:78:24:19:2e:b4:0e:45:ba:fa:c1:55:b4:
         e5:94:3d:b9:c3:44:a5:12:f1:92:e0:c5:30:18:32:4d:7e:3f:
         dc:dc:b3:02:73:c1:97:41:f2:8f:67:04:09:6c:b2:0f:4b:cd:
         57:f9:0b:43:4a:d9:7c:69:e0:9e:d2:13:b1:45:3e:84:dc:17:
         c1:ff:07:f3:7d:2e:7b:4c:e4:6e:d9:a9:23:b1:5f:34:ef:1d:
         67:2b:d0:74:2a:e5:fb:84:c2:68:2c:5c:82:9c:f8:52:2e:e0:
         18:2f:c9:d8:f8:63:e2:86:a3:39:bc:cc:88:02:fe:d7:3b:a4:
         ce:c0:20:f0:aa:45:cc:b0:2d:91:31:48:d1:5b:fd:dd:11:33:
         69:74:1a:f2:37:8b:56:50:1c:89:f5:74:3f:ac:85:7b:c9:f0:
         33:76:c6:38:d0:9d:09:c9:c6:63:dc:5c:c7:d2:de:eb:2b:6d:
         10:cc:d1:46:10:b2:7a:ef:03:1f:04:c7:0e:17:56:fd:3c:20:
         47:2d:ad:0c:ba:ae:e7:28:24:9d:9f:92:f8:88:2f:83:9c:97:
         f2:c4:98:70:6f:03:5e:ec:c0:d2:54:75:3d:da:80:44:ad:fd:
         15:9b:6d:51:8f:a2:99:ed:d4:ad:90:e5:d0:06:d9:12:37:d2:
         9a:7b:11:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:25 2025 by rpki-client