Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa
File:                     9897673b-da30-342e-a2ae-a0611cdcd3b3.roa (raw, json)
Hash identifier:          GPTvgXuROk1+6YJs9CW4a8nIDyrf5VussWbGiSWisyM=
Subject key identifier:   96:A7:5F:05:D2:81:64:AA:31:E5:10:A6:61:70:8C:4C:33:25:85:0B
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F43285848F926AE7B1092D50C0F2F6100
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     27419
IP address blocks:        2606:2f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ae:7b:10:92:d5:0c:0f:2f:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=322b401f-cde0-431c-aecb-a2739ce2331d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:b3:21:5d:69:8e:91:a3:c5:fb:18:3b:94:
                    50:d3:ae:5e:94:05:19:4c:fa:e2:e9:e7:94:09:4b:
                    a8:b7:c2:cc:fb:92:3c:6c:67:41:c0:75:03:c6:d4:
                    5b:7b:83:20:0e:01:fd:86:ba:81:ce:c5:00:55:6d:
                    16:ae:1e:d6:96:e0:b8:3f:b5:f0:a6:2a:40:84:fc:
                    2c:bb:6e:bc:98:86:cf:9a:9a:2d:0e:15:5f:29:4d:
                    33:6a:96:da:32:68:b6:86:fa:9e:dd:e1:a0:8a:19:
                    70:12:2e:f6:17:e4:06:f6:f1:a4:aa:83:43:b8:59:
                    2f:e5:51:3a:bd:d8:40:fc:32:6f:5b:18:56:62:7e:
                    f4:4a:d1:cc:98:6b:c0:f9:14:59:ba:dc:94:3b:01:
                    46:4e:8f:f4:7f:2c:4b:a1:40:81:a8:a6:5b:0d:31:
                    79:e9:ff:ff:9a:75:c1:7f:bd:e5:1d:bd:cf:79:e1:
                    21:c8:a3:33:7d:3e:43:82:8c:fe:54:99:b0:9b:46:
                    2e:35:56:db:a0:64:36:a3:a3:34:99:cd:4e:eb:b7:
                    6e:da:fe:64:f2:97:7f:7f:31:ad:2a:4b:d7:cd:99:
                    31:4f:14:3e:5a:46:69:0f:a1:1a:60:33:ce:b4:2c:
                    3b:42:05:e9:3f:19:23:17:d2:f0:51:25:4b:5a:94:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A7:5F:05:D2:81:64:AA:31:E5:10:A6:61:70:8C:4C:33:25:85:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/9897673b-da30-342e-a2ae-a0611cdcd3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:9b:e5:3a:6b:4b:9e:7b:9d:1b:84:7d:c1:2d:42:be:0e:e6:
         02:67:8b:89:2f:2f:a9:6e:bb:51:52:33:b9:c6:d3:b2:12:da:
         9e:b9:4c:ab:c7:4f:54:e5:ed:6d:c3:7d:e2:71:f7:b0:fb:1f:
         54:ff:14:ae:43:7f:63:57:90:d8:32:d9:a0:8d:11:6f:32:fb:
         b4:9e:ab:4c:7f:d9:5e:cd:da:7d:7d:72:dd:cf:6e:1e:d9:f7:
         de:a3:45:12:00:ce:7b:42:c3:0c:79:66:78:93:c8:5d:da:ff:
         dc:32:9e:8c:66:61:f5:d0:94:be:f2:0c:34:61:c5:10:8b:fe:
         40:13:f6:6a:37:ac:9e:9b:20:1f:ca:d8:3e:89:5a:22:8b:74:
         9c:1b:9d:9c:6a:91:13:16:43:4d:f2:1c:94:13:0b:3b:81:c3:
         31:ad:7a:70:5f:25:62:12:6e:25:9e:40:24:62:e5:c0:44:9d:
         2c:d0:a3:ce:fc:82:9d:16:03:51:db:ee:f2:a5:21:92:58:e1:
         2a:6e:ab:73:f4:5c:c3:7b:59:e2:6e:52:0f:7c:68:a3:5b:15:
         2f:7b:bd:3b:fa:0d:93:e0:ae:2a:b4:cc:04:60:bc:4c:1b:ff:
         09:d2:5e:33:1d:11:b3:55:4b:51:fb:0b:fb:31:4b:58:a4:77:
         00:b9:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:48 2025 by rpki-client