Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa
File:                     611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa (raw, json)
Hash identifier:          Aol+1eIrsjBlwAgCOQ2wIThJLpZs4i7jxSKiv4dYB/Q=
Subject key identifier:   40:12:1B:AE:80:61:E9:48:81:5E:50:99:E5:4F:0F:AC:C7:35:42:A1
Certificate issuer:       /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial:       010D0C9F43285848F926A0BB271BD94071925980
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        2620:104:6003::/48 maxlen: 48
                          2620:104:6004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:a0:bb:27:1b:d9:40:71:92:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=4e81499a-3b80-44db-ad24-39dbb7b5171b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5a:4b:68:be:ab:2a:9a:8a:8c:cb:77:23:d5:
                    95:3a:0e:ca:c9:d6:47:bb:89:ff:cb:48:b5:83:86:
                    06:52:80:76:8b:03:44:8d:1d:82:c1:0d:05:03:c7:
                    5b:7e:a6:27:50:52:f1:de:c5:e9:d1:f7:59:8e:dc:
                    52:a6:ac:67:0b:5a:e0:df:68:4d:c0:45:32:0a:e4:
                    35:cf:1a:0a:e2:46:43:af:20:0a:f1:cd:70:5a:90:
                    59:98:8a:f1:be:1c:3f:da:18:0f:5c:85:c2:ac:6f:
                    4e:2d:27:70:77:ca:5c:1b:43:74:4d:f7:37:f7:f2:
                    e3:b9:2c:cb:49:a1:d5:7c:04:4a:8c:b3:44:d8:5a:
                    82:8d:b9:0e:ff:96:eb:32:e6:d0:4b:38:d7:e7:9a:
                    a0:e1:a2:a3:96:58:59:62:e7:cd:51:71:f5:d6:9f:
                    41:ef:9c:aa:66:fc:11:77:ab:ad:51:ac:4f:63:91:
                    13:7e:b5:fd:95:b5:39:b7:af:22:90:08:1c:34:d0:
                    fc:48:29:6b:3d:77:09:8b:81:f6:02:f9:8f:52:d4:
                    82:6b:ea:04:19:66:38:8d:a1:60:0a:5e:b7:f8:4a:
                    a0:dc:7c:af:ba:dd:ec:3a:e2:a1:d3:d7:96:08:ac:
                    ce:83:8d:c3:e3:10:3f:6f:fe:47:8d:82:32:75:79:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:12:1B:AE:80:61:E9:48:81:5E:50:99:E5:4F:0F:AC:C7:35:42:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/611cbbdc-60b4-3a42-bff5-daf7960beb1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl

            X509v3 Authority Key Identifier:
                keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:6003::-2620:104:6004:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e1:a4:89:ed:bf:b9:91:d7:e7:86:29:06:8d:2d:14:bb:10:
         26:b6:31:13:ab:0d:6c:60:e7:ff:97:ea:ec:32:57:4c:c8:1b:
         a8:06:31:af:b5:a3:49:49:97:04:03:1b:95:1b:62:d1:fa:1a:
         cd:b6:82:94:b1:d8:1c:49:56:d2:b1:d4:9c:a6:3b:21:42:04:
         39:aa:fa:a4:1f:c5:84:04:74:1a:3d:00:b3:b2:41:fd:3a:8d:
         f5:9f:88:aa:0a:dc:2c:3e:e8:00:3e:e2:c4:2a:86:a9:05:65:
         ed:fc:84:9e:a8:23:e0:4d:5b:c1:70:bd:a3:33:69:02:02:da:
         f9:a1:ed:9a:40:d0:c9:3a:48:a6:fa:90:d1:87:93:8c:31:db:
         88:65:7d:08:eb:fd:2e:1c:e6:54:79:55:84:e8:ee:7b:af:a4:
         cd:28:20:dd:77:21:45:ba:f0:11:bd:00:de:46:eb:90:c0:99:
         28:a7:1d:7d:24:79:60:5f:3c:8f:1e:59:dc:67:59:80:80:43:
         7c:87:ac:5d:e1:1b:59:34:5c:11:60:3f:c7:d3:59:b9:b6:e6:
         69:9b:19:ce:cb:6f:2a:52:3f:9a:ea:4d:67:f8:f8:bf:38:02:
         e0:5f:c3:22:d7:97:18:d7:ab:7e:7d:fe:38:82:cf:0a:b1:7f:
         01:5f:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:09 2025 by rpki-client