Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa
File:                     884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa (raw, json)
Hash identifier:          J/PJnhOTlAYf0Azi00fDg3Q9a2SB1hYS6h7vR1+5ycU=
Subject key identifier:   ED:EA:C1:9F:AE:58:98:78:70:90:59:B0:38:DE:72:B9:1D:7A:A8:0C
Certificate issuer:       /CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
Certificate serial:       010D0C9F43285849631EC162B0201254B8185280
Authority key identifier: EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     36858
IP address blocks:        2607:75c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c1:62:b0:20:12:54:b8:18:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=92c80689-8c4e-47d7-8433-69dcaf4feeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:0b:aa:91:7f:d1:d3:59:bc:e9:99:97:41:
                    14:ac:83:71:21:8b:bd:28:4a:f9:a6:b1:12:6e:ae:
                    d5:d3:eb:69:0e:15:88:dd:43:cf:06:43:7b:6d:80:
                    da:f3:20:8c:d2:22:b3:11:55:04:cf:1e:3c:ed:ce:
                    95:e9:9d:8a:3d:d1:18:e8:72:56:d1:b4:7f:5c:10:
                    d5:5a:54:37:71:51:81:e0:ea:e2:39:b7:eb:8e:85:
                    b6:c2:74:ee:fd:3f:24:83:01:28:a2:79:67:6f:31:
                    30:81:57:18:52:dd:27:da:70:46:cd:f5:87:b9:83:
                    e4:01:83:4d:62:09:d3:ea:75:96:43:ef:a7:cf:3f:
                    f3:ec:97:1a:7c:52:92:e8:e5:84:78:df:3e:a0:3f:
                    fc:7d:6b:fc:ae:6d:ae:2e:55:7e:57:40:ef:82:0f:
                    db:d9:5e:40:5d:f8:d3:78:40:09:5b:e7:cf:bb:59:
                    e8:2e:e1:d5:4b:b8:69:45:f4:a4:00:b6:5d:76:49:
                    32:5d:82:a2:f6:f6:dc:26:39:e5:ad:1d:38:14:ab:
                    6f:c3:d9:9a:af:9c:76:32:1f:5f:59:60:74:5c:5b:
                    94:9a:54:92:bc:b8:f6:a2:e0:be:c7:81:9f:93:15:
                    15:ce:a4:3d:ae:b1:4a:5a:d5:7a:f3:af:32:49:e7:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EA:C1:9F:AE:58:98:78:70:90:59:B0:38:DE:72:B9:1D:7A:A8:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/884ed427-6a6a-39f1-a2a4-4f4f7a1b2a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl

            X509v3 Authority Key Identifier:
                keyid:EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:75c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:3f:f5:3a:59:ef:f1:18:74:69:1f:31:6c:d1:f8:f4:43:
         3a:96:2d:de:5f:47:55:95:f9:5d:a1:fa:0c:dd:2b:e6:33:ae:
         74:47:e5:6b:60:00:fc:11:26:12:cd:5b:7e:0b:8d:95:92:50:
         c5:25:2a:4c:6b:17:38:d3:59:62:68:ff:66:63:e9:ec:af:5f:
         8b:a7:d8:53:8f:01:b8:b3:7a:2a:94:89:57:1c:ef:67:e8:6b:
         8c:e1:9f:5d:5e:c6:bc:4d:37:4a:3f:d7:c0:3c:fd:8c:10:d6:
         a9:54:45:b4:dd:00:6e:dc:e7:04:74:27:c9:21:b3:0a:73:2c:
         b9:3f:e2:86:c9:14:f4:27:9b:56:b1:2b:f2:ec:93:99:73:4c:
         75:0d:e7:4b:8e:2e:74:92:7c:7f:3d:3c:9e:97:91:75:a1:80:
         ef:cf:d6:4a:b9:ad:f6:21:9e:8a:70:6a:0b:56:26:de:15:fb:
         18:a3:23:fe:9d:1b:5e:74:5f:dc:7c:ea:28:20:f3:ff:dc:04:
         d1:d2:76:9a:cb:28:16:0e:28:24:52:c9:4a:2e:9b:30:d3:08:
         eb:36:4b:d9:ca:3c:32:3b:89:4a:3a:dd:47:74:4d:b1:cf:25:
         fc:f3:3d:fe:52:56:db:93:58:9d:0e:7f:5c:bf:d6:00:dd:ed:
         ad:1b:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:52:17 2025 by rpki-client