Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/3aa58b8b-8475-3d6a-b419-cc64019ef7ae.roa
File:                     3aa58b8b-8475-3d6a-b419-cc64019ef7ae.roa (raw, json)
Hash identifier:          ybDignJO1cNWiv/G/qcTMpKnSKFbzVVuLTcm0dbihyc=
Subject key identifier:   9F:81:BB:CC:6F:93:D3:80:34:FB:9D:3A:29:FA:A0:28:31:E8:04:26
Certificate issuer:       /CN=b93a005b-1892-459c-bf41-c019bbf34551
Certificate serial:       010D0C9F43285848EF613378A2A657C502E80080
Authority key identifier: 86:41:C2:29:BD:B1:91:BC:B6:4E:ED:2E:0B:AC:36:F7:6D:DE:44:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/3aa58b8b-8475-3d6a-b419-cc64019ef7ae.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     54699
IP address blocks:        2620:43:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/b93a005b-1892-459c-bf41-c019bbf34551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/b93a005b-1892-459c-bf41-c019bbf34551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:33:78:a2:a6:57:c5:02:e8:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93a005b-1892-459c-bf41-c019bbf34551
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=3b0beca9-6b0b-4952-aeb8-ee8f92036c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f0:cd:56:6a:3e:6e:e3:8e:bf:bd:86:42:88:
                    b1:bb:78:c7:86:c7:28:10:b2:f9:b5:4b:9c:84:d5:
                    63:62:d9:8f:9f:6a:fb:2b:74:7b:5a:0e:df:04:c0:
                    e4:da:c3:4b:5c:47:14:d1:31:d0:b1:3c:42:f7:28:
                    f4:f7:02:76:00:a3:60:af:7c:bf:de:9e:bc:54:83:
                    00:b7:cb:ab:0a:29:1e:bf:52:0e:8e:ae:f6:64:a8:
                    6b:47:92:c7:2b:5c:fd:db:e8:90:d8:2e:e0:46:dc:
                    b1:02:df:5f:e0:34:63:10:41:4d:cb:c7:a1:cc:94:
                    1a:56:aa:83:5c:58:82:d0:4f:35:e4:2a:e7:0d:d8:
                    ca:c2:c1:a0:10:10:3a:ac:35:9c:2a:50:6a:b3:14:
                    25:9a:55:cc:d6:11:64:f7:93:3d:54:9a:38:a3:17:
                    62:de:27:3f:e8:46:18:b7:53:40:db:a2:6d:a8:6a:
                    a1:bb:62:39:c5:55:0a:8a:44:e9:16:d5:f1:77:41:
                    9f:a9:a8:42:00:07:44:4f:80:d7:4b:b3:99:f1:56:
                    86:42:0d:60:7c:d9:91:ba:02:5d:1b:77:2f:f4:4d:
                    51:75:04:bb:b1:9a:80:18:45:0a:bf:57:95:4a:e0:
                    9c:7e:fe:1c:04:91:f7:16:66:db:ba:45:03:46:6b:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:81:BB:CC:6F:93:D3:80:34:FB:9D:3A:29:FA:A0:28:31:E8:04:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/3aa58b8b-8475-3d6a-b419-cc64019ef7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/b93a005b-1892-459c-bf41-c019bbf34551.crl

            X509v3 Authority Key Identifier:
                keyid:86:41:C2:29:BD:B1:91:BC:B6:4E:ED:2E:0B:AC:36:F7:6D:DE:44:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:43:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:af:20:49:c5:61:fd:37:c1:44:bf:1c:d7:98:4f:b5:04:67:
         ff:c7:82:bf:da:0b:cf:ca:a8:62:16:21:e2:2d:22:44:9e:37:
         9b:30:20:50:bd:ca:8b:aa:ce:4e:42:be:47:c2:74:5c:81:58:
         dd:33:6a:f2:e3:e4:ba:2f:9b:53:d3:98:19:58:59:8e:00:29:
         66:17:94:d5:af:8f:e4:ae:3a:ef:ee:78:2b:05:68:93:b6:55:
         4b:18:6a:6d:34:e4:55:cf:e8:08:dd:76:01:54:3d:72:7b:cc:
         e5:f3:93:3f:d1:46:76:6a:5c:18:0d:44:18:96:7f:37:4e:b6:
         c8:c7:4d:12:ce:03:d4:e1:f7:90:2f:58:05:01:be:c3:99:6b:
         49:5d:dd:77:9d:53:73:18:e7:d4:db:55:8a:d2:a4:5d:4d:76:
         67:7f:ca:d2:c9:44:e1:e9:ed:39:74:e8:db:33:f8:d3:4e:14:
         e1:e6:65:2b:72:8b:e8:c5:8f:26:1e:6e:d8:d0:89:de:ad:14:
         18:ee:50:db:2d:f1:2c:14:f6:8e:a2:af:e9:6a:aa:23:57:f5:
         a0:27:3c:03:f4:d9:31:e9:86:fd:e5:90:8b:ed:6d:d9:68:8b:
         64:97:fa:9e:c4:2e:5f:40:07:da:c8:ef:62:1c:ac:68:c5:8f:
         65:fc:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:16:06 2025 by rpki-client