Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f4fb5113-77fe-3880-9ae2-c77e6d615e05.roa
File:                     f4fb5113-77fe-3880-9ae2-c77e6d615e05.roa (raw, json)
Hash identifier:          5+OdfOjZeyYwRUMq+jZW5Iz1STJrm3wGbiYO832bY84=
Subject key identifier:   22:AB:37:5A:B9:E1:AA:A0:83:A2:42:54:8C:B2:DB:59:60:6A:2A:9F
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848F65BEAC3A14C6CD586DB8640
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f4fb5113-77fe-3880-9ae2-c77e6d615e05.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     393886
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:ea:c3:a1:4c:6c:d5:86:db:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=30434139-d2f6-4709-844f-bb331aa9c06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2c:cc:ae:96:7a:f4:44:d4:a1:cb:ad:e9:4e:
                    fb:a4:72:e6:60:95:b6:6a:ea:99:bb:24:6c:59:3d:
                    af:93:04:0b:81:62:64:1c:23:bb:87:67:33:e9:82:
                    97:95:ed:bb:09:e4:aa:ce:9d:ac:0c:2f:b7:05:b0:
                    ee:30:9c:1c:45:e0:6f:50:9d:8f:88:9d:bc:37:88:
                    0a:e8:39:4c:84:da:30:12:b5:ce:7c:eb:f2:b5:e2:
                    d9:b5:e1:a0:49:35:98:ce:54:59:88:61:c6:3d:7a:
                    37:19:ed:6c:5d:e5:bd:68:56:a8:67:58:4c:87:f6:
                    95:61:92:a9:50:01:f9:8b:97:1b:6f:94:29:54:fc:
                    f7:25:90:12:53:14:65:a5:4a:26:2d:86:c7:e8:8d:
                    2f:77:97:d4:08:af:03:58:ac:a7:4f:ef:f7:69:5b:
                    9e:60:26:4b:f5:a4:8c:e7:21:b3:68:fa:9c:28:54:
                    b8:32:4b:b0:6a:cf:5b:66:8f:eb:41:ec:da:f0:24:
                    d0:49:15:78:c5:03:f8:a7:34:ec:55:5c:c7:14:6d:
                    63:ed:08:f2:c8:3e:d4:0c:35:47:73:44:12:b6:35:
                    8f:fd:42:6a:e6:1d:93:69:0b:c5:64:4b:d8:1b:dd:
                    af:73:ba:3f:8e:65:f5:1d:64:a1:ce:2e:7c:7b:1e:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AB:37:5A:B9:E1:AA:A0:83:A2:42:54:8C:B2:DB:59:60:6A:2A:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f4fb5113-77fe-3880-9ae2-c77e6d615e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:76:73:95:49:b4:2e:5f:e1:45:65:d2:81:f3:b1:59:6a:c4:
         92:3d:d0:5b:80:52:87:1f:ac:14:ba:a1:88:2f:22:70:5e:fb:
         31:51:c7:11:0d:ec:50:0a:e7:4e:50:11:22:c7:7c:d3:7d:1a:
         0a:15:41:98:dd:77:5d:a4:51:68:0d:14:53:bf:19:a8:d5:4f:
         dd:76:cf:75:5f:6d:91:97:51:0b:a0:e1:74:11:67:a0:56:fc:
         91:3f:f6:83:6e:96:e0:e4:a2:04:fd:0f:16:41:bf:b0:d9:82:
         2a:81:85:ff:da:56:63:44:29:93:a0:bc:23:fc:d2:fc:7e:de:
         41:4e:8e:fc:f0:60:2a:bf:bc:94:6a:79:39:0f:b5:3b:28:d2:
         b0:34:51:05:b1:31:d7:f3:ce:56:8d:a9:69:47:97:a9:bf:a0:
         e3:d4:d8:3b:c5:3d:50:7f:91:e7:cb:ed:9a:b1:0f:47:1f:9e:
         a4:23:13:03:9e:a2:f5:fd:64:70:73:59:33:58:de:bc:91:76:
         27:3f:63:e9:91:d2:27:52:7e:3c:f5:73:fb:8c:6c:73:1f:db:
         ef:d9:75:ca:be:88:b2:16:8f:63:47:17:ea:69:09:74:0e:ca:
         d6:c6:09:34:9c:d9:0f:28:9c:b1:ee:b8:06:58:be:94:a2:65:
         c5:62:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:02:10 2025 by rpki-client