Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/0b03c905-b522-32eb-a850-2403339cbdc5.roa
File:                     0b03c905-b522-32eb-a850-2403339cbdc5.roa (raw, json)
Hash identifier:          O/noN5vX1yUS7wz4PFANHlr39qD9lai7DH8BNNWCbIE=
Subject key identifier:   06:75:68:D8:BE:2A:18:32:76:FF:56:42:E7:A3:2C:27:FF:56:3D:66
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F43285848EF6167B30A3669C81FF50D00
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/0b03c905-b522-32eb-a850-2403339cbdc5.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     7354
IP address blocks:        2606:d640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:67:b3:0a:36:69:c8:1f:f5:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=4818bfa5-f914-44d0-8e21-95bf202f6592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:eb:fa:f3:f5:cf:75:81:1a:02:12:a6:6e:
                    c2:f6:ef:31:3e:d4:b7:25:db:6b:3e:5a:7e:ef:b7:
                    e2:26:a9:a0:63:61:1c:40:96:fa:33:05:17:0d:f2:
                    e1:cc:d0:e4:e4:bf:6d:cc:22:77:8e:f4:0f:3a:f8:
                    29:75:4e:0e:4f:68:50:d2:6e:6e:e7:32:bc:25:50:
                    44:fd:72:31:b7:48:a9:5a:bc:fe:46:53:8f:50:18:
                    90:98:fd:90:56:06:90:69:d9:53:d4:a0:74:92:6e:
                    93:6f:21:32:74:5b:3b:58:03:9f:51:13:a7:7d:b4:
                    91:ac:68:fd:6b:87:36:e2:96:fc:53:41:25:87:f0:
                    aa:9a:8a:dd:bf:a1:6d:42:87:38:33:74:d7:6b:88:
                    b0:bc:79:1f:9a:6b:5d:b6:65:51:e0:d4:79:6b:95:
                    5e:1c:6e:4e:21:74:44:61:45:ad:0a:40:f1:73:8e:
                    6a:5d:c8:9f:e5:06:5f:ca:a3:23:8c:8f:81:f7:59:
                    61:49:04:2e:50:aa:6b:04:b6:f6:45:28:5f:6c:0e:
                    c2:61:08:86:0d:f5:2b:33:45:d9:27:bf:35:4e:66:
                    58:b1:eb:f4:d0:45:6f:aa:75:89:af:cd:41:ff:6d:
                    37:14:fb:1f:40:3d:fe:4f:b9:f1:50:f6:88:aa:fd:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:75:68:D8:BE:2A:18:32:76:FF:56:42:E7:A3:2C:27:FF:56:3D:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/0b03c905-b522-32eb-a850-2403339cbdc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f2:12:e6:ba:1e:9f:84:a1:1f:97:47:8a:00:7f:0d:c2:f9:
         09:50:b4:a6:97:51:51:91:d6:60:e3:c1:62:0e:d3:e2:b3:02:
         1f:5f:c6:f7:04:f4:0c:3f:c2:8c:68:f3:7d:ff:bf:7d:3c:e7:
         0a:d8:dc:e3:07:78:e7:1b:10:ac:89:46:0d:ba:1d:4c:23:35:
         5e:f0:d9:6b:8f:c8:99:e0:73:ff:96:d3:1a:58:19:c7:f2:76:
         38:56:a5:3c:3e:c5:ce:b0:7d:50:d7:6a:87:98:50:7f:a4:98:
         64:df:34:72:57:1e:16:fd:2b:47:71:63:1a:ff:90:15:23:b1:
         98:91:87:5c:06:5c:65:98:5f:56:f7:bf:9a:48:51:7f:a3:bd:
         17:d8:b6:7f:2a:05:61:58:35:26:2d:d4:d7:fe:6e:81:95:5b:
         66:9d:db:1f:f9:6d:7b:d9:4b:c7:00:39:59:ff:72:6f:d7:31:
         09:f3:4d:f4:66:1e:1b:53:46:46:ed:63:07:83:06:2b:52:75:
         62:dc:fc:ac:ba:3b:c8:0f:0f:48:b6:64:13:54:a7:37:7c:45:
         22:b4:6e:c1:5c:d6:ac:2a:18:19:7a:7f:43:92:ea:83:ee:a1:
         e8:55:d1:88:85:0f:05:de:e0:b2:c2:87:12:70:81:d0:15:73:
         28:5c:0b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:01:42 2025 by rpki-client