Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa
File:                     bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa (raw, json)
Hash identifier:          fDdqOEkBFVqWp02rXFHOuNxXi+ouyeJ2iDCH3q264q0=
Subject key identifier:   5C:7A:27:3E:0C:10:63:E0:38:32:37:F9:C1:C2:5E:33:2E:74:90:6F
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F432858494E2EAF0EF1D10BD3F046DF80
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     30698
IP address blocks:        2606:e740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:af:0e:f1:d1:0b:d3:f0:46:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=4ca481bc-f3fe-4a45-95fe-10fce3885269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:75:51:15:c1:f7:99:69:2a:8f:6b:25:bd:
                    0d:ae:ff:99:a6:6f:4e:7e:cb:98:06:8f:ba:f3:11:
                    62:c7:b1:40:66:7a:87:24:8b:91:e1:9e:65:bc:3a:
                    dd:37:c9:9b:a9:07:71:a7:8d:61:eb:87:5b:86:ab:
                    f0:eb:8d:6c:a2:81:2f:f5:3e:4f:37:1e:76:40:5f:
                    44:11:6d:be:99:fc:c6:a6:04:c7:1d:ec:77:73:4d:
                    07:b8:2c:5c:61:0a:ae:40:05:cc:0e:85:39:1d:9f:
                    fc:7b:76:cf:f4:31:87:51:f3:6d:4b:ed:52:9e:a0:
                    86:64:0d:4f:d9:d4:6e:79:38:cf:f8:b6:1c:9f:8b:
                    4f:7e:c5:97:25:d4:ce:52:b0:10:ef:4c:4d:19:2d:
                    14:0b:fb:c3:c5:47:a3:08:95:c6:e0:63:dd:a4:18:
                    fd:b8:81:f2:15:7f:61:20:d2:36:66:de:9d:fe:7e:
                    d0:c5:2c:a8:38:21:4a:21:4d:59:82:f9:0a:3d:67:
                    bf:48:a0:73:a7:08:c3:f3:0a:3f:48:d3:50:f8:89:
                    30:49:31:56:04:07:06:cc:16:09:52:23:ae:f2:bb:
                    6d:6a:90:23:1c:0f:e0:a9:28:48:85:67:93:53:97:
                    bd:fe:5f:37:73:18:61:a5:5a:1c:2c:10:32:39:75:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7A:27:3E:0C:10:63:E0:38:32:37:F9:C1:C2:5E:33:2E:74:90:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/bd2034c3-eeb6-3a5d-9432-f14ba173d18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:e740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ac:f4:c1:7e:5c:92:cc:cf:a7:c4:0e:1f:9b:b4:25:bc:ee:
         ce:fc:22:f3:1a:f4:64:70:4f:f0:91:1d:40:a7:46:9d:64:f1:
         71:03:7c:76:61:33:06:ff:e4:b8:91:d1:96:da:f4:1d:f8:4d:
         36:8d:a6:e2:0f:f9:21:5f:ca:90:4a:7b:70:79:b9:84:8d:8f:
         71:a5:72:7e:c4:a4:7c:ea:20:4f:44:10:1b:79:0a:74:7f:3e:
         24:eb:b1:27:ad:5d:53:f3:bd:22:fb:cd:ab:f6:00:5f:e8:c8:
         8c:25:b1:ea:9c:65:3f:9f:c9:7b:ff:ca:c7:8b:d0:a5:06:5c:
         2b:04:8c:ef:db:02:d8:c2:b4:58:37:8e:e2:88:f5:dd:62:cc:
         98:a6:52:dd:1c:58:52:09:e1:c0:59:b5:55:64:38:81:ea:1b:
         48:8c:0b:29:38:26:10:fd:2c:6a:ad:56:d9:50:b8:fe:aa:db:
         da:e5:bc:8c:74:10:2f:78:7e:51:b9:c1:6f:fd:9a:08:59:10:
         0e:60:df:4f:8d:19:74:20:0e:bd:00:8e:26:99:64:e3:50:9c:
         48:56:88:7d:d8:2e:82:af:47:e5:61:38:a8:f7:d2:ed:54:df:
         2c:3d:63:db:0e:b8:6a:df:b4:7a:1f:53:01:67:fd:36:31:67:
         04:24:4c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:03:05 2025 by rpki-client