Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/72621090-4571-32e6-8cc3-9bf028533b78.roa
File:                     72621090-4571-32e6-8cc3-9bf028533b78.roa (raw, json)
Hash identifier:          AVA0RvJ2qUpysndCoWAX0HJk1vLFAccz1E39Kmy0G8Y=
Subject key identifier:   AE:5F:9A:27:F6:45:A5:34:3A:51:DE:C2:DA:E9:9A:94:72:7C:ED:A0
Certificate issuer:       /CN=2bd61746-13db-450a-8df3-636a3fa01e59
Certificate serial:       010D0C9F4328584900215932FF3B750401E31960
Authority key identifier: C9:CF:68:36:AA:83:15:BC:79:97:80:C4:38:E9:C1:FF:00:62:F1:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/72621090-4571-32e6-8cc3-9bf028533b78.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     393719
IP address blocks:        2605:4340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:59:32:ff:3b:75:04:01:e3:19:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bd61746-13db-450a-8df3-636a3fa01e59
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=f7646cad-baa2-4f14-8d7d-18e78ea25236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:ba:ca:2b:4a:9f:3d:79:31:15:6b:c9:57:
                    d6:ac:b0:1b:8d:58:64:50:f4:d2:dc:c8:b0:89:5b:
                    32:48:8e:8c:3f:aa:09:b6:9a:32:b6:04:01:90:3c:
                    38:cf:9a:2c:8b:cf:7b:bf:73:65:2b:34:a0:c0:62:
                    bf:fa:61:80:e1:79:2b:b2:7c:b8:54:0a:09:77:02:
                    06:87:e9:c4:85:3e:48:52:f2:cd:e4:a7:17:c3:d5:
                    df:6e:ad:3d:8d:25:26:76:e0:c0:81:dd:c2:8f:13:
                    92:8a:82:f5:10:eb:18:4f:51:30:89:fc:20:a5:b7:
                    34:13:3e:be:bc:4c:a4:18:df:d8:05:6d:f8:2d:51:
                    61:2c:e9:73:78:d0:92:7e:2c:96:0f:49:3b:66:8e:
                    f0:c4:87:27:0e:0a:5d:a9:7f:13:cc:1a:b9:bc:2c:
                    51:db:aa:be:e5:7f:14:bb:5d:ef:af:b8:01:2a:ad:
                    34:13:b8:6c:d4:97:b8:4e:dd:38:4b:fb:61:94:0d:
                    e2:2f:d9:ac:a5:1d:e5:5f:50:16:ef:42:ac:6d:d6:
                    9c:3a:5d:2b:d4:20:65:1e:98:7d:c9:3b:a2:6d:72:
                    32:e7:88:e2:7b:9f:50:0e:09:ca:e5:aa:62:4e:44:
                    e4:7c:70:ce:c0:00:6e:c7:c4:e9:43:43:9f:e1:6a:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5F:9A:27:F6:45:A5:34:3A:51:DE:C2:DA:E9:9A:94:72:7C:ED:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/72621090-4571-32e6-8cc3-9bf028533b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59/2bd61746-13db-450a-8df3-636a3fa01e59.crl

            X509v3 Authority Key Identifier:
                keyid:C9:CF:68:36:AA:83:15:BC:79:97:80:C4:38:E9:C1:FF:00:62:F1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bd61746-13db-450a-8df3-636a3fa01e59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:54:c8:4a:48:1a:7b:2a:eb:d9:9a:d6:d7:cf:f2:ac:8a:51:
         c9:84:d0:a4:72:0f:65:9b:a7:7b:65:fd:e1:32:a6:46:c1:af:
         e6:89:97:ed:85:4f:b1:3c:2e:54:a3:e8:66:95:21:9a:c3:c1:
         dc:73:b0:2a:18:ae:53:55:92:47:a8:02:66:22:99:cd:a7:0b:
         6c:2f:8f:33:fa:ff:1e:8f:c9:c1:97:84:3d:eb:54:fe:39:3c:
         c6:b3:75:ba:25:b7:b3:8f:ce:ad:09:9c:92:cf:f3:c3:0a:a2:
         d3:8c:73:8c:d2:7b:19:fa:84:ed:5c:75:5c:9b:d3:f0:2d:10:
         dd:bd:ca:21:ef:45:72:28:a9:4f:db:cd:69:06:5e:a8:a4:34:
         e2:76:0c:48:c1:ca:b6:0e:ee:a3:e5:e2:2e:7d:13:da:18:c9:
         9f:f1:98:84:83:75:5c:c6:63:64:21:8b:d6:3d:53:c9:57:9d:
         46:ff:47:3b:90:0f:11:d7:4e:28:ea:00:78:76:f6:50:38:09:
         a2:17:38:8d:50:19:53:ea:34:14:2b:09:c1:9d:5c:63:5e:fb:
         1d:c7:5f:1a:87:b0:18:ca:b2:53:e6:50:4c:55:f7:60:19:59:
         09:ee:1b:ed:4c:34:59:df:f1:ba:5d:3a:cb:51:bc:39:db:fe:
         19:7b:ad:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:46:23 2025 by rpki-client