Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ae413136-97ad-3224-a22c-ce71845ef7ec.roa
File:                     ae413136-97ad-3224-a22c-ce71845ef7ec.roa (raw, json)
Hash identifier:          LYeVvj83Z6j6FeSa1hp7cta591lZOEsDtH1Pm+UKwOQ=
Subject key identifier:   D7:78:DD:E0:0F:D9:1E:FB:6D:4D:D4:DC:59:8B:94:6C:67:E9:FD:2D
Certificate issuer:       /CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a
Certificate serial:       010D0C9F43285848F92699AABBFB6D2457DABF00
Authority key identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ae413136-97ad-3224-a22c-ce71845ef7ec.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     5723
IP address blocks:        2606:2b00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:99:aa:bb:fb:6d:24:57:da:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=73c0843c-ad46-4305-869f-cd0405d12cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:2c:7c:ee:eb:3f:a2:02:68:09:63:da:2a:
                    08:56:c5:41:b6:cf:ce:98:45:1e:a4:d4:99:ae:40:
                    df:a4:e0:e1:89:b4:24:76:09:f5:18:05:83:c5:8b:
                    4a:9e:5c:13:9b:46:35:bf:6f:11:0a:8b:a2:5d:f7:
                    5b:55:0b:e5:0c:b5:6c:58:20:77:6f:4b:1a:87:fc:
                    56:f3:a8:fb:78:15:d3:c1:25:81:f8:6f:42:28:4b:
                    c9:6a:28:bb:07:c8:b5:34:51:60:31:06:93:e7:18:
                    3e:4e:ab:5e:f4:c6:4c:17:c7:42:7f:cc:79:cd:df:
                    33:55:0c:0e:d2:21:64:0c:cb:04:41:39:61:58:62:
                    c5:15:38:51:08:7e:75:c4:f0:b7:33:72:84:af:71:
                    2d:79:2a:16:21:6d:ad:71:a3:8b:be:75:4b:f5:75:
                    ca:03:8b:18:f5:4e:12:2d:14:0c:1f:a0:0d:6d:c2:
                    72:f9:fb:1d:9b:62:3a:c9:45:c9:01:4c:41:7f:a2:
                    bd:c0:b0:a6:44:bb:17:19:a3:63:6e:82:62:5f:62:
                    1a:61:03:68:fa:69:80:e9:4d:f7:33:ec:9c:41:64:
                    55:b2:7c:77:c7:3b:22:ee:21:71:47:a8:5f:b4:43:
                    d3:59:37:b1:3e:7d:a7:6d:1c:46:c7:d0:03:3c:3a:
                    45:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:78:DD:E0:0F:D9:1E:FB:6D:4D:D4:DC:59:8B:94:6C:67:E9:FD:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ae413136-97ad-3224-a22c-ce71845ef7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl

            X509v3 Authority Key Identifier:
                keyid:3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:b3:79:69:6d:ab:a6:77:30:3b:26:34:1f:54:78:59:20:
         74:9a:62:60:1a:22:f6:c7:c4:9c:e4:35:a2:c5:ad:7f:a7:f7:
         bd:78:66:2f:2f:ca:62:73:9f:76:92:98:d8:dc:79:0f:91:1d:
         04:18:f2:1c:d7:37:46:d5:93:84:83:22:ac:55:67:ad:bc:bd:
         5e:63:6a:3f:8e:5d:5f:2b:69:3c:85:42:49:da:fd:d9:ef:8f:
         a5:2d:0e:48:59:71:29:64:e6:80:78:b2:80:05:22:d2:31:06:
         71:2a:cf:85:e0:25:42:39:87:14:91:8a:a6:d1:91:c0:0b:2b:
         ea:75:89:47:89:ff:a5:50:42:30:cf:21:04:e7:a5:37:54:7a:
         16:e8:24:2b:81:52:74:c3:64:f2:09:f8:be:6c:9b:80:11:d8:
         58:ac:88:67:27:05:8e:41:a0:75:a9:20:c5:e8:40:fa:fa:27:
         19:7c:54:ae:4f:5e:ae:8c:2b:45:64:1a:c6:d6:65:c3:2d:91:
         0e:72:10:7e:ae:85:d4:0c:85:8f:d5:e0:cd:25:b2:5f:fe:e4:
         b2:bf:97:98:a0:8d:4d:a1:53:45:b5:75:70:d9:08:4f:89:90:
         43:bc:6d:2e:f0:87:94:4f:b9:e0:9b:ac:a1:13:ec:08:d4:90:
         67:80:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:06:46 2025 by rpki-client