Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/449c300d-278a-3c44-94f2-b26447054b85.roa
File:                     449c300d-278a-3c44-94f2-b26447054b85.roa (raw, json)
Hash identifier:          Qu316amiCFJDiLnwKszf8BiHcVz8CTf+xC/BAB4Rrvo=
Subject key identifier:   16:3B:C3:7A:DE:AD:82:30:CD:97:E3:8D:CB:54:DB:57:0C:63:55:1F
Certificate issuer:       /CN=7ede7b70-d745-425d-975b-bb0eb6368430
Certificate serial:       010D0C9F43285849002158F27BA4799FD7BE3BFD
Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/449c300d-278a-3c44-94f2-b26447054b85.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     22697
IP address blocks:        2620:135:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:58:f2:7b:a4:79:9f:d7:be:3b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=380ea24b-ebbb-4172-9129-5e8f3993e3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:9f:15:e2:1b:0c:9d:32:62:48:50:bf:1f:
                    ef:9d:0f:e8:f3:09:9e:6a:32:f6:6a:42:68:f5:f4:
                    07:7a:2c:f0:9c:f4:75:91:4c:3d:21:65:aa:a8:88:
                    7a:8b:b5:7e:81:33:e8:fa:af:29:e1:61:c7:e6:b1:
                    da:74:d6:f2:5e:4f:01:be:f9:99:df:6f:09:70:c3:
                    43:50:df:5f:01:31:8e:91:65:50:40:3c:67:3d:71:
                    a5:ba:cf:20:f8:52:a5:69:7e:76:ad:4c:4c:51:a3:
                    02:a9:19:4b:5f:0e:e7:d9:60:0d:76:aa:31:71:d6:
                    39:45:e3:f2:fd:49:01:a8:66:d8:e9:0b:53:bc:d3:
                    cf:2a:fd:f6:f1:32:27:16:5f:19:bf:9f:fb:10:e8:
                    97:31:2f:ef:13:5f:4a:a2:da:44:0d:66:f5:ef:e8:
                    d2:67:8b:92:4d:59:0e:44:66:5c:c1:e2:dd:b4:6b:
                    ad:b0:68:38:da:7f:ca:2d:69:90:cc:4f:30:70:fd:
                    c2:dd:4c:93:15:85:a8:0e:ea:b2:9d:aa:fd:ec:bb:
                    7c:9b:a4:ec:70:d8:c9:2e:04:93:7b:24:8a:db:e8:
                    45:4b:a3:cb:22:af:1e:3b:e4:28:c5:85:28:ea:3e:
                    eb:8e:da:b2:e7:d8:0b:50:18:71:8d:21:d7:f6:ca:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3B:C3:7A:DE:AD:82:30:CD:97:E3:8D:CB:54:DB:57:0C:63:55:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/449c300d-278a-3c44-94f2-b26447054b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl

            X509v3 Authority Key Identifier:
                keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:135:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d0:1f:c5:ea:1c:81:ca:cd:bf:49:20:11:2c:cb:06:0c:30:
         40:34:0e:49:8c:cc:8e:48:67:17:c1:10:70:3b:1e:3f:8e:3e:
         c6:f2:83:40:6d:5c:b0:e1:86:d7:98:31:a5:53:aa:47:3f:4e:
         27:9c:93:eb:74:79:25:39:49:c0:8a:7a:74:ab:e5:98:da:95:
         05:92:16:72:f0:0a:f4:f2:d7:04:9a:e9:82:8e:b1:02:69:c7:
         27:0b:40:42:1e:12:41:ca:5b:47:50:0c:ff:af:0c:82:a3:b2:
         d3:93:86:60:a2:20:1e:ec:cc:48:71:a6:f8:89:3f:d4:cf:ff:
         7b:b9:a1:9a:3a:a0:a6:ba:c5:99:b7:23:a4:71:41:65:e7:13:
         6f:6a:8c:91:a9:cf:40:fc:32:8e:c5:9d:2b:2c:bd:2b:09:89:
         de:e0:7e:16:de:a3:12:41:77:78:48:a8:a0:9b:d3:af:19:88:
         60:1f:f1:34:58:e6:c0:67:16:4a:a0:3c:6e:fc:ec:af:f2:6f:
         4d:2e:0f:67:f3:4b:78:5a:29:99:bb:2f:c9:e6:b5:9e:05:7a:
         0a:5c:24:5a:05:8f:a7:19:24:19:9d:a5:74:bc:b7:1a:a7:2f:
         6d:82:2e:10:82:bc:e7:7d:fd:9e:cc:0b:dc:7e:0d:11:5c:b3:
         e7:1a:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:37:41 2025 by rpki-client