Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa
File:                     adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa (raw, json)
Hash identifier:          kaMNEkDMHeJVGkRS2rv2+KJWva+scWzJoRpAtvLjWb0=
Subject key identifier:   35:77:21:5A:0D:66:D7:38:B0:C2:49:69:61:E4:11:AA:2C:6D:F1:C2
Certificate issuer:       /CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
Certificate serial:       010D0C9F43285848B35B6ACC5F9488F76C174980
Authority key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     20148
IP address blocks:        2001:5c8:f7ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:6a:cc:5f:94:88:f7:6c:17:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=6613a50f-aba4-498b-8b63-2d15f5cf9866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:51:30:38:58:29:c9:de:3d:40:66:95:89:1d:
                    7e:f1:4f:bd:6f:ca:8a:17:2f:bb:0c:5b:92:8b:bd:
                    03:8a:77:44:9e:d8:62:23:c0:77:de:d7:dc:5b:af:
                    c0:80:49:a3:52:0f:43:4e:10:00:51:08:e0:84:39:
                    b2:3d:c5:9d:1f:9a:b4:6c:7d:39:8d:f3:fc:56:da:
                    c0:cb:ba:6b:c7:9f:9a:d5:42:b6:09:c5:35:15:f9:
                    ee:83:78:1e:91:cf:13:e1:c4:4a:41:34:03:8c:f2:
                    49:77:62:b0:18:5f:96:1b:45:5b:e8:af:e2:98:09:
                    88:18:fc:d4:a9:4f:dc:36:9c:3d:8f:67:3f:2c:98:
                    1f:57:a9:59:cf:6d:14:60:98:e3:be:74:c6:19:6a:
                    ca:be:2b:c5:aa:9b:da:c4:a9:db:c3:79:79:ea:c6:
                    69:71:90:f5:a3:a5:d8:43:08:5c:4f:e5:8b:51:9d:
                    ad:dc:84:c9:25:d1:b3:88:2f:c5:91:25:a6:77:1d:
                    22:30:47:af:37:3c:06:34:15:31:24:35:ad:64:17:
                    92:b1:8b:34:07:44:ac:7d:2f:12:e7:31:31:77:80:
                    16:06:87:b4:ed:5c:7a:f6:69:85:88:29:3f:56:f3:
                    20:d1:7e:b9:19:69:c4:a2:73:de:06:bf:f0:a7:1c:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:77:21:5A:0D:66:D7:38:B0:C2:49:69:61:E4:11:AA:2C:6D:F1:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/adb9862e-f09c-3b2f-ac0b-1da2c67e8b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.crl

            X509v3 Authority Key Identifier:
                keyid:89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5c8:f7ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:8d:0d:0e:37:67:47:c5:32:31:20:55:a3:a8:b8:4b:09:
         31:57:15:f9:44:a3:4c:e5:77:90:1d:b2:4a:9d:6f:a9:a5:e7:
         92:ee:0c:a6:be:56:61:36:9e:2e:9d:b0:17:3f:a5:38:6e:4d:
         9e:aa:a2:43:68:f7:1f:82:c3:2f:6a:ab:cd:9b:49:57:d6:30:
         ee:9b:67:a1:52:28:99:5a:89:db:0e:fc:b7:c7:f5:42:aa:4c:
         8a:c5:fa:d8:c6:9f:ed:0b:95:0a:20:03:de:7e:81:56:05:83:
         b4:fc:71:a3:b2:cf:18:c3:57:30:57:31:50:cb:db:a0:b2:73:
         09:b7:ae:3d:74:8f:da:8c:d1:53:35:b5:5b:69:9e:8a:b5:ff:
         55:95:61:93:ac:f8:8c:5c:a8:a6:e4:ff:37:b3:c7:f7:3e:7b:
         24:ad:5b:34:a1:a3:26:0b:5e:c0:98:92:0c:11:30:0d:a4:6c:
         5c:30:36:15:52:5b:95:c7:4c:f9:af:7d:4b:fa:c2:77:b2:ac:
         5d:14:da:4a:72:f0:b2:07:d6:fd:0f:b5:69:99:7f:f3:9e:af:
         55:fa:db:d8:50:10:fb:40:e4:39:5a:db:47:49:8a:f6:31:6a:
         f5:66:52:0b:ba:d6:4e:ed:3d:bb:33:21:50:2f:c5:01:f7:43:
         17:67:57:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:52:03 2025 by rpki-client