Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/e7280f71-9f38-3a78-a817-bbd05358fa36.roa
File:                     e7280f71-9f38-3a78-a817-bbd05358fa36.roa (raw, json)
Hash identifier:          MfU7RwAHwteJXZ07MAxpDb3B8ZR54rpnyiR+KU983yg=
Subject key identifier:   54:EE:24:8B:54:B1:44:0A:C0:A9:F3:48:F8:DF:14:47:8C:90:51:90
Certificate issuer:       /CN=ca388b18-5cbc-482c-bac3-f729d5c2e4dd
Certificate serial:       010D0C9F43285848EF61385DF5A6728AA55B77AD
Authority key identifier: D9:2B:8A:38:99:14:2B:2A:73:4F:7E:5A:30:14:CD:BB:FB:0A:D6:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/e7280f71-9f38-3a78-a817-bbd05358fa36.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     6597
IP address blocks:        2605:35c0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:38:5d:f5:a6:72:8a:a5:5b:77:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca388b18-5cbc-482c-bac3-f729d5c2e4dd
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=bfab6d8d-1932-4254-bf0b-c5b646148b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:f9:26:3b:04:ae:74:cb:de:58:ed:bb:db:
                    6a:5a:55:30:5f:63:f4:a0:ca:34:ee:cb:d3:ed:dd:
                    77:ea:49:09:58:12:47:a5:37:fa:b7:0f:25:32:ef:
                    e1:32:45:48:20:b0:9a:9d:41:7b:46:95:c7:f1:7a:
                    b8:24:30:5a:db:0d:65:11:4b:08:22:f5:c8:e9:bc:
                    47:d6:30:08:f7:dd:7f:5f:1d:a6:8d:e4:48:a1:7f:
                    dd:8e:3e:1b:60:af:49:db:cd:3f:6c:07:1f:89:95:
                    08:e7:0e:d7:7b:f7:b0:65:5e:88:92:de:85:b3:11:
                    40:f0:7d:64:23:85:0a:07:c2:45:fb:eb:42:0e:48:
                    c3:af:2c:73:2d:e1:71:34:11:b8:b0:66:e1:82:15:
                    f3:ca:82:4a:c8:29:08:1d:93:05:c1:f3:15:c9:9b:
                    9d:54:06:7a:a6:4a:22:89:b9:b2:df:95:01:5f:3d:
                    bf:fd:2e:4e:54:95:a1:84:80:1b:1d:e4:b6:3c:fc:
                    2e:ab:8d:c2:80:94:b0:38:91:05:9f:4e:e9:66:62:
                    11:5f:4e:02:9f:88:32:af:e5:3a:d2:a0:dc:ef:8c:
                    0a:85:d0:ff:12:8c:4c:1c:74:07:03:03:d7:d2:3b:
                    ae:f7:c1:0b:a6:b3:b2:e7:87:e0:87:1b:50:d7:c1:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EE:24:8B:54:B1:44:0A:C0:A9:F3:48:F8:DF:14:47:8C:90:51:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/e7280f71-9f38-3a78-a817-bbd05358fa36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:2B:8A:38:99:14:2B:2A:73:4F:7E:5A:30:14:CD:BB:FB:0A:D6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:35c0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:28:94:3f:1e:b4:7b:54:35:5b:53:8a:1c:a8:f4:b2:85:40:
         f1:9a:e9:86:7d:22:9a:7d:4f:90:39:56:40:1e:8f:2c:46:66:
         60:84:89:a3:30:3d:e5:6a:20:3a:3b:54:a0:fc:5a:53:ea:37:
         a0:9c:85:d5:73:68:b2:f2:02:15:dd:40:e5:29:1d:a2:bc:b0:
         e6:15:91:1c:97:6f:7c:a7:f6:e0:5a:f5:17:f8:a2:56:47:1f:
         bb:6f:28:cd:e2:c1:29:7d:45:73:7f:63:c6:81:37:f2:e0:e9:
         b1:28:35:d4:2d:6c:9c:fd:46:11:88:cb:59:23:d9:53:b2:86:
         96:01:6c:7c:7f:69:60:99:58:f0:97:c8:83:91:6d:ec:4e:35:
         1f:ce:07:fb:69:db:25:00:c4:b7:dc:c2:fb:9b:ec:3d:68:15:
         bb:5b:c3:ea:d2:02:6e:69:44:32:3c:60:fc:1d:af:98:34:ae:
         5a:7f:88:ef:62:2d:ba:af:72:1e:41:ba:bd:84:7e:92:6b:47:
         69:25:dc:ff:7b:e7:20:ea:cf:4b:98:fc:ab:43:73:76:f0:e7:
         9e:48:95:36:41:04:5c:63:ee:81:8e:ee:ed:c7:b0:2b:56:57:
         18:3a:59:93:10:73:dc:cf:24:88:b1:fc:ee:ca:bf:ab:30:9f:
         d0:f8:53:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:48:51 2025 by rpki-client