Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/a494647a-1949-385d-8d0c-2bdf8624e210.roa
File:                     a494647a-1949-385d-8d0c-2bdf8624e210.roa (raw, json)
Hash identifier:          R5PurCEOEN7WJpaYXLau9hEV0lsTs1iKfI59jQpKfBY=
Subject key identifier:   21:FE:FF:49:2D:C6:44:CD:E1:3A:69:65:26:61:69:A9:82:6B:46:A1
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F43285848FD569C613769642000BC3460
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/a494647a-1949-385d-8d0c-2bdf8624e210.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     25795
IP address blocks:        2607:f2f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:9c:61:37:69:64:20:00:bc:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=f96e139e-664a-4d5e-9fd6-e394c75a9dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:33:2e:d2:9d:5e:c6:9f:7e:4a:da:19:28:5e:
                    c2:3b:77:10:4a:7f:0a:ba:c2:88:a5:e7:a0:30:0d:
                    2c:66:9c:21:21:47:29:d2:98:b6:35:bc:a9:e5:8c:
                    85:b3:6b:98:ca:0e:5c:c2:70:a1:73:83:99:5d:bd:
                    67:bc:3a:74:20:78:6a:03:9c:fd:2e:14:66:a2:3d:
                    95:1a:27:1d:13:73:30:5a:32:78:83:de:c8:e6:b9:
                    ad:65:df:2d:56:c1:12:a3:3d:bf:21:dd:5a:e3:3e:
                    b7:64:91:55:e3:f3:bc:9a:50:5e:0e:5a:3e:e7:49:
                    f2:6e:08:72:f2:81:e0:c7:4c:17:dc:56:22:24:1e:
                    71:8d:6e:9f:25:00:e3:7d:ea:23:a5:ba:04:e9:e9:
                    4f:b0:4b:c0:c9:b7:9f:f1:f2:d9:03:52:3e:ba:fb:
                    18:cb:52:fb:7b:01:67:96:ee:8b:f5:97:6d:8d:24:
                    f8:18:b7:ff:3f:0f:b1:3d:94:87:5c:fe:29:a7:e3:
                    87:53:2b:c1:ae:1c:69:13:b6:49:2f:47:04:cc:78:
                    18:63:1b:c0:ec:f2:c2:72:45:c6:6f:83:ad:ba:8f:
                    f4:c9:8c:a5:27:44:c1:06:1e:a9:e3:33:16:e8:88:
                    54:b2:62:44:cf:7e:4c:db:a2:e6:53:53:56:a6:04:
                    55:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FE:FF:49:2D:C6:44:CD:E1:3A:69:65:26:61:69:A9:82:6B:46:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/a494647a-1949-385d-8d0c-2bdf8624e210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f2f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:53:94:53:af:86:d0:22:ee:17:84:cb:36:f7:eb:c3:fe:24:
         14:85:07:be:82:9c:29:5d:fc:14:ed:c1:44:bc:92:9b:fb:fd:
         7d:ed:56:36:b3:f7:60:0f:64:d6:e3:c7:b5:7d:75:9c:9f:7f:
         39:10:95:30:b6:5e:14:fd:97:e1:21:06:99:c9:5b:f8:65:0f:
         20:56:b1:1c:ac:9c:03:51:6d:69:95:eb:9e:83:5e:5f:81:08:
         b5:b4:71:b4:9f:c7:8e:3b:cc:37:c5:e5:41:b1:d3:b6:24:08:
         48:9b:89:5c:a0:fe:fe:c0:63:86:f2:0c:94:c4:64:57:ac:e5:
         7c:03:c7:0d:61:ce:a9:19:00:e9:f6:dc:b8:63:96:7d:9d:10:
         aa:e4:9b:23:41:a0:56:a7:89:61:95:cf:cb:99:57:e0:05:41:
         e2:db:06:bc:10:c2:f8:10:e1:8e:d7:87:ae:3c:50:e9:f9:45:
         7f:c1:9a:32:90:b0:6a:17:6a:bd:4e:fa:bb:af:10:2c:e6:14:
         17:4e:6a:11:bb:0c:15:a3:bf:1b:51:78:8f:ba:67:cb:5d:d1:
         f7:34:a9:0c:bc:d8:b2:84:a3:9b:87:34:07:9f:ed:9e:c6:e8:
         c7:b5:ae:71:bd:fa:36:9c:cf:7d:01:2b:e9:42:6a:2b:8d:06:
         7b:47:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:33:40 2025 by rpki-client