Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa
File:                     253cdd3a-36e0-3298-9d6b-13208042593e.roa (raw, json)
Hash identifier:          8b9ms1rM8Gsh8wvztvbsjDPAIqp/QYDQw/E8es6xmN0=
Subject key identifier:   2B:52:A7:49:26:76:FF:18:56:13:99:F1:1A:16:FB:58:8F:B3:2B:A9
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F432858488AE09A966782A3F81C825B80
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     55163
IP address blocks:        2620:109:c006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:9a:96:67:82:a3:f8:1c:82:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=a2d29257-bebf-4fde-8bec-677ab0a9ef4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:60:42:0f:ec:11:73:94:8a:10:9b:25:c1:85:
                    db:01:5a:13:be:19:b7:67:ef:e1:b6:db:a2:c9:a4:
                    9b:b8:08:5a:60:93:00:f6:57:df:dd:8c:86:93:49:
                    74:bb:7e:1a:c3:98:d0:a6:5e:60:8f:c9:f4:88:3d:
                    25:fa:ca:a8:ec:2f:c7:f0:7f:ce:93:21:75:73:4d:
                    a2:8b:cc:9d:3f:3f:99:3d:26:6c:fa:cc:13:e4:5f:
                    e2:60:92:43:19:c6:6b:ce:03:05:6b:cd:89:50:48:
                    3d:67:3f:59:de:70:19:dc:62:3f:a4:54:c0:3f:e5:
                    6e:74:02:37:7f:39:8c:06:8f:c7:87:a6:0b:71:50:
                    f4:0c:37:12:d7:78:21:e1:ce:39:50:43:d9:a6:8b:
                    14:7d:64:03:8e:8d:a3:73:36:bb:db:b1:5c:b5:a5:
                    21:81:50:bb:37:3d:1f:1b:40:37:7d:d9:4e:bf:af:
                    b8:2e:4a:69:bf:98:a1:0a:8e:9e:eb:ad:c8:97:7b:
                    32:ea:48:a2:86:37:bb:86:2e:f5:63:5a:77:44:86:
                    81:5c:a1:86:d6:56:76:11:78:5c:ad:6d:84:60:53:
                    e4:82:cf:4f:30:28:0d:d1:b5:46:aa:47:f6:53:ac:
                    50:63:80:8c:4b:55:50:e7:af:d7:93:e7:05:04:be:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:52:A7:49:26:76:FF:18:56:13:99:F1:1A:16:FB:58:8F:B3:2B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:109:c006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:db:d0:38:78:72:2e:0d:7c:80:9c:45:66:30:ed:e7:e4:35:
         7c:37:0d:90:09:b0:56:cc:86:df:ab:6e:ea:07:ed:cc:a8:8c:
         07:92:55:c7:9c:73:7f:e3:65:3c:5d:88:53:08:f9:22:2e:1b:
         83:6a:db:27:9d:0a:99:6e:a8:84:c2:1b:00:c4:17:71:58:1f:
         c4:56:5a:b7:63:e1:cc:8d:d0:60:64:7f:c6:36:df:fe:af:56:
         ab:86:7f:fc:01:6f:6b:1b:f3:6b:42:85:77:7b:5c:70:07:db:
         13:dd:e2:13:9b:26:16:a6:ab:63:c9:ec:a5:61:e6:ce:90:ce:
         09:da:6a:fc:d6:84:88:9d:77:ea:bc:4f:aa:03:49:b5:9f:02:
         f5:71:1f:af:9d:af:dc:d6:3f:93:e9:53:e4:ac:ec:ed:bd:1d:
         6a:eb:b5:55:99:fe:81:50:44:42:01:95:05:9b:6e:af:c8:d5:
         aa:7d:5b:a6:96:f3:b3:fa:ee:9f:c0:4f:c9:8b:fe:c7:bf:9e:
         cf:74:c5:89:18:3f:af:14:01:f3:73:e7:79:2d:b3:3f:a6:28:
         73:8b:65:84:7e:d2:06:22:59:38:38:f0:d6:ef:f7:d2:9a:67:
         d7:ed:07:8d:fa:1e:85:bb:8b:cb:32:35:f8:89:01:1e:47:33:
         de:40:69:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:14:04 2025 by rpki-client