Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/bff2e34e-aeb3-39f6-832b-90dea89cbb8b.roa
File:                     bff2e34e-aeb3-39f6-832b-90dea89cbb8b.roa (raw, json)
Hash identifier:          eM4n1c3qjDsPHfktX/lCkJfOexLdRY/JR/MGWpJ+nKM=
Subject key identifier:   8F:2A:4B:7B:32:42:64:28:23:71:25:3E:7E:4D:E9:F8:0A:9F:2F:DC
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F43285848FD56C3211DF14DC45F25C420
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/bff2e34e-aeb3-39f6-832b-90dea89cbb8b.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     50131
IP address blocks:        2604:9cc0:1c00::/38 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c3:21:1d:f1:4d:c4:5f:25:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=c49fac1a-ab5a-4982-b60e-fecad16a2cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bc:a9:1b:b8:2f:b6:23:da:3e:34:06:be:e5:
                    22:55:ca:60:86:ea:4d:50:e0:06:f2:32:af:0b:9a:
                    a4:ac:68:dc:e1:7d:2e:eb:52:21:44:ed:75:39:e7:
                    c4:23:b5:af:62:bd:67:5e:ec:1e:a8:de:b0:f4:2c:
                    27:0e:67:0a:ad:44:90:29:45:8e:82:09:69:c9:bb:
                    6c:6a:50:c6:47:92:8f:9f:a5:40:55:65:21:34:fc:
                    5f:98:9a:52:21:61:39:b2:15:67:72:40:34:4e:3a:
                    f1:84:1a:ea:ab:86:1d:8f:6a:82:c3:f6:a7:57:1e:
                    58:c7:d6:75:94:92:8d:a3:47:5e:6e:6d:e1:10:6b:
                    5d:c1:d8:52:f0:5f:cc:ce:ca:9b:96:be:24:e7:11:
                    7f:1f:17:f8:e8:6e:3f:32:42:02:1b:32:36:bc:64:
                    ba:4d:f7:04:cb:16:69:b6:43:f1:c0:f6:11:56:49:
                    34:b8:04:c6:38:6e:06:b4:08:b6:fd:9f:da:a0:55:
                    b0:26:c7:8e:f7:5c:fd:03:1c:91:db:d1:8b:a4:d7:
                    bd:0a:e2:c4:fa:82:47:71:af:a2:68:d3:08:1d:01:
                    6d:77:6c:f0:86:b9:eb:9e:0a:1b:c8:6e:11:cc:dc:
                    dc:63:5b:31:ea:d1:89:e3:4d:f2:cc:62:17:11:fc:
                    d7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2A:4B:7B:32:42:64:28:23:71:25:3E:7E:4D:E9:F8:0A:9F:2F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/bff2e34e-aeb3-39f6-832b-90dea89cbb8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:1c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:78:72:44:39:d0:cf:8e:08:d2:63:9f:28:78:f0:ca:35:41:
         95:60:b9:1f:7c:d4:53:68:58:e9:9e:a7:bd:13:59:89:41:35:
         6a:d5:83:dd:cd:be:0e:88:72:50:67:c8:28:4d:92:ee:d2:93:
         b8:91:35:43:16:28:1f:30:f3:d5:71:e0:2b:dc:90:82:f3:a3:
         c5:ed:2b:f2:50:be:79:58:de:0e:6b:4b:20:ee:5b:08:6a:d4:
         b9:b3:bd:e1:db:b2:11:af:90:8d:0e:89:33:94:62:80:84:dc:
         37:6c:ed:d2:f0:58:bf:98:d2:32:e1:c3:45:bb:61:58:c2:79:
         d6:44:9d:30:06:16:d6:14:ff:86:af:6a:57:1c:ca:fc:c3:c4:
         14:a2:8e:d6:6e:17:b4:1a:c8:1b:c0:ed:3b:ef:2a:e0:f2:49:
         26:f7:b6:01:f0:e4:6b:3c:77:9c:8c:a6:9c:e9:b5:da:ee:69:
         1b:10:08:26:24:c5:68:90:5a:1e:b6:93:5a:c5:50:8e:4e:9b:
         aa:56:00:e7:d2:0e:f6:28:a8:93:e4:24:ee:ad:ad:ba:58:82:
         6c:4c:b0:44:7b:3e:44:74:de:37:22:cd:2b:91:ae:57:25:ab:
         5d:3c:8e:4b:59:71:26:45:c4:e2:26:f4:95:12:4f:2a:02:4c:
         34:97:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:50:14 2025 by rpki-client