Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/756a7043-e63c-3d73-adad-cc5a70198fc4.roa
File:                     756a7043-e63c-3d73-adad-cc5a70198fc4.roa (raw, json)
Hash identifier:          +3AmOG/HbigbLycp2bYSOt6Qc52yiHsHbOJzgtK+Mww=
Subject key identifier:   23:2E:0B:AB:5C:AA:3F:DC:11:BF:8E:89:4E:C9:F9:AE:B5:9D:24:3A
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F43285848F65BE407C2CA223F12CC2D80
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/756a7043-e63c-3d73-adad-cc5a70198fc4.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     7354
IP address blocks:        2606:d640:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e4:07:c2:ca:22:3f:12:cc:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=11fd720f-cea4-4c1c-af5a-898d63d2c88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:ce:f6:1b:3f:6e:75:50:8b:7c:6e:b0:01:
                    53:20:fb:4d:ed:42:4c:44:4b:e9:7b:5d:f7:a6:39:
                    f7:de:e3:0c:31:4c:66:15:46:53:91:66:45:56:87:
                    95:f6:1c:84:dc:ef:7d:0d:55:92:2c:fc:68:92:5b:
                    b6:4a:89:0c:e9:87:f9:87:7a:6e:ac:59:89:7c:89:
                    bf:25:3b:1b:80:d2:d4:32:a1:bc:d3:0d:2e:e5:a7:
                    ef:8e:01:57:5a:34:62:d4:ad:9e:dc:76:29:d8:c1:
                    6d:1f:48:24:74:75:d1:e4:12:84:e3:5a:22:1b:1f:
                    ab:eb:3f:a6:89:1f:36:76:7d:d5:a4:2d:7a:a7:64:
                    db:d4:d4:33:ae:bd:1b:93:70:cf:e5:ac:5b:0e:38:
                    a2:00:4b:59:b1:35:13:6f:fd:a1:01:ba:e7:ec:7d:
                    be:fd:1c:2c:ce:69:99:3d:47:92:69:14:2a:9d:f2:
                    ad:d6:13:30:4f:8b:6a:b7:32:d8:71:e8:0c:58:c8:
                    1d:e0:8e:50:bc:40:ad:73:13:7b:0a:61:d4:aa:1a:
                    50:7d:5e:2c:2f:32:f9:4f:4a:4b:12:d4:45:96:05:
                    be:08:b3:f6:87:70:36:c8:89:8f:dd:6b:cd:ba:d5:
                    88:90:fb:9a:fe:a7:72:c0:51:80:f0:42:e2:45:c7:
                    8e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2E:0B:AB:5C:AA:3F:DC:11:BF:8E:89:4E:C9:F9:AE:B5:9D:24:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/756a7043-e63c-3d73-adad-cc5a70198fc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:98:1c:a2:8e:36:61:bc:ef:cd:3e:75:82:35:f1:c6:a8:17:
         a1:9e:e1:09:8e:70:6c:54:d7:9f:7e:16:35:11:45:55:f2:d1:
         1d:aa:c1:f2:83:36:42:cb:39:bc:72:d9:5e:34:6e:bc:08:30:
         f8:27:57:22:4c:70:d2:54:d9:9e:a4:b7:0a:7f:f1:36:cf:51:
         91:d8:1c:e7:7b:4e:cf:c6:d0:fb:85:9f:25:48:b9:06:c9:0c:
         6a:82:44:1f:50:0c:ed:ce:5e:4a:d6:86:9a:e0:9a:64:c2:46:
         a4:9b:91:b5:16:01:d7:f9:42:bb:f7:a7:80:30:12:43:69:79:
         b8:59:1d:95:58:c1:8a:19:81:4b:d8:79:83:cb:e4:39:61:b5:
         9f:8a:ff:44:b7:26:5b:cf:9a:0c:97:f5:ca:77:29:58:94:49:
         0c:a9:92:40:b5:51:dd:57:9c:c5:21:ac:15:d4:29:39:57:8b:
         86:ca:83:52:0e:f1:76:37:df:f4:d4:c6:8d:3a:90:8d:82:74:
         ff:2e:3b:bc:03:a3:ef:46:66:96:5e:c8:d6:65:d5:d4:14:d8:
         5a:a8:46:3f:38:a8:33:56:d7:e4:31:6b:2b:43:e0:97:38:fa:
         90:34:30:8b:ef:eb:c0:d0:89:3e:ef:57:e9:cc:c5:bf:18:7e:
         6b:97:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:42 2025 by rpki-client