Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
File:                     c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa (raw, json)
Hash identifier:          ytM2ctPKVkOnScA7e/ffm1V1jqj9EnUhvqfoRdk7s48=
Subject key identifier:   A1:61:6E:96:C8:E5:75:83:76:7D:99:E8:E4:CE:BC:33:C0:3F:66:B4
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F43285848EF613022DD913DD95A904580
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     7065
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:30:22:dd:91:3d:d9:5a:90:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=26300d44-5a4d-4abe-8127-c91b2dc81423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:6a:79:f4:80:c0:8a:59:91:75:e5:e8:43:
                    a7:b1:24:fa:f6:c5:e0:b2:b2:a7:fd:cc:56:14:96:
                    26:d0:db:4b:be:dd:81:cd:06:52:e5:c1:50:28:9a:
                    ef:07:f1:99:43:89:15:97:8c:9a:fc:89:90:c3:58:
                    7a:87:74:fb:db:cc:b9:d8:0b:78:c4:0e:05:e8:4a:
                    df:52:bd:ea:77:81:8d:dc:8a:60:6c:c4:30:6d:7d:
                    2d:be:99:41:f2:51:85:47:f5:d8:e3:37:2f:1a:77:
                    5a:16:b2:d2:76:5b:8e:bd:78:58:c4:52:0b:ab:45:
                    a4:79:f8:5b:f8:ce:25:48:91:33:31:3c:66:20:1e:
                    a7:80:f0:35:bd:43:b4:6b:38:91:84:73:db:7b:72:
                    a0:ed:1e:76:60:4a:49:d1:31:e6:d4:01:1e:a4:b4:
                    d0:c1:d4:79:83:9e:13:08:e2:95:1f:d2:21:6f:76:
                    2c:81:98:83:7a:53:59:70:31:46:d4:a1:bc:0d:9e:
                    aa:c3:e8:f7:24:fd:41:7e:16:89:36:1f:ca:e9:5b:
                    24:85:56:87:75:e6:81:2d:13:48:38:31:1e:a5:45:
                    27:ac:09:7f:24:fc:f0:9f:a5:89:38:a4:a4:89:0f:
                    89:22:50:b0:f1:d3:ed:a1:35:d7:10:6d:1d:22:d3:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:61:6E:96:C8:E5:75:83:76:7D:99:E8:E4:CE:BC:33:C0:3F:66:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:43:5f:13:4f:77:da:75:dd:a0:bc:7e:5a:40:b4:92:b6:ad:
         7e:bd:03:8c:f4:21:53:69:b0:ff:99:dc:60:a0:01:50:48:8d:
         01:2d:6a:52:c1:d2:58:e2:0f:0b:f3:af:10:9d:c9:70:b2:f1:
         f6:82:3d:d3:29:22:ac:be:40:77:4f:f0:f1:25:88:89:8d:11:
         13:f0:df:54:f5:7f:1a:56:f2:34:6b:b2:a0:21:2b:92:44:a8:
         e2:10:31:4d:0a:56:de:98:51:3a:b0:54:a8:95:99:1a:e4:e6:
         cf:84:a5:47:dc:e2:ea:11:cc:85:72:86:80:82:1c:ab:52:b1:
         00:d5:d1:f0:3e:c0:d2:ac:85:bf:5c:22:08:9d:36:75:93:ae:
         ad:7b:0f:09:31:3b:30:95:75:93:98:09:50:1c:d0:bc:74:f2:
         42:90:ff:21:f8:33:14:d1:b1:38:24:86:32:87:3f:66:db:83:
         7a:a3:3d:9f:62:58:07:92:32:f7:30:11:47:3d:b6:51:56:29:
         fd:99:0d:e4:3b:89:f1:19:49:06:99:e5:00:4c:5c:9a:80:6f:
         6a:e3:aa:eb:5f:7d:c7:9a:0d:57:6a:e4:a4:94:10:ff:e4:21:
         10:69:89:b2:a6:a0:b7:4f:94:08:a6:cc:3d:b2:d0:92:bc:05:
         b8:c3:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:46:30 2025 by rpki-client