Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/568473bd-3806-3bdf-b05d-68b5fa3836cc.roa
File:                     568473bd-3806-3bdf-b05d-68b5fa3836cc.roa (raw, json)
Hash identifier:          rN8AVkabipd8Hma5wOLN5T5uhKhNxvd6n3GLzGaIceg=
Subject key identifier:   07:A5:BF:CC:2C:57:CF:CE:22:42:E4:48:BE:A6:CC:DF:03:EC:CC:D2
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C4252A4DCD79144CE78A80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/568473bd-3806-3bdf-b05d-68b5fa3836cc.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        2620:11a:c014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:25:2a:4d:cd:79:14:4c:e7:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=ad222148-3b23-4f99-b069-469f9bd6a3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:13:8c:f3:7e:40:34:cb:3b:c9:e6:c6:43:48:
                    5f:cf:63:b5:90:f5:ac:f3:98:98:b2:c5:3c:b1:7d:
                    0d:1f:9c:44:8c:b6:52:d5:bd:ab:05:55:8d:53:83:
                    bc:ff:0b:56:aa:df:c9:66:18:1d:ed:81:15:10:cb:
                    13:30:04:c1:e7:b7:f9:50:2d:cd:5e:94:a8:9b:13:
                    75:79:d1:92:8b:cb:78:e6:f2:83:4e:2f:ba:4a:91:
                    d2:6c:01:29:7e:06:8c:25:cc:9c:02:97:e2:21:ad:
                    79:a1:34:c8:59:a5:b2:12:35:d6:d9:59:2c:a6:da:
                    7d:8d:9f:8b:4b:40:2b:50:3b:41:e3:30:fc:2e:43:
                    ae:67:68:c1:28:78:cd:71:2c:25:83:62:a3:10:f2:
                    89:09:1a:72:97:e0:3f:8c:3c:e9:30:e8:78:f5:65:
                    9c:38:fa:95:92:38:09:dd:e7:bf:29:bb:4d:48:d9:
                    d8:5e:82:4c:a2:ae:5d:27:aa:78:a8:36:e0:f6:83:
                    6c:5a:68:ae:b9:ba:ef:bf:f5:0e:fe:73:e8:fe:ae:
                    24:ea:3f:29:ad:da:28:79:8e:b5:11:7f:ca:a6:26:
                    7b:35:b8:df:e5:9f:c5:ca:c9:86:8a:39:63:c9:ac:
                    d6:12:de:7e:83:2d:f6:97:a8:cf:62:30:a8:01:b7:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:BF:CC:2C:57:CF:CE:22:42:E4:48:BE:A6:CC:DF:03:EC:CC:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/568473bd-3806-3bdf-b05d-68b5fa3836cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:c014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:22:69:90:c3:91:1d:84:75:14:7c:8b:7c:c2:e1:78:db:8f:
         3a:17:89:5d:cc:cc:22:1b:e8:d6:81:7f:4b:cb:4e:a9:f2:73:
         7d:d5:40:4d:d6:e9:ee:60:86:62:78:8a:39:3b:a8:27:2e:90:
         23:76:ea:fa:6c:c6:30:0e:81:f9:03:86:e0:39:8d:10:c0:41:
         c3:48:d7:ce:ab:e0:1f:8e:a8:3a:74:83:25:8c:53:eb:0e:1a:
         9b:8e:82:d8:84:1e:62:5c:cb:4c:18:ca:47:25:fd:43:f6:76:
         5a:c7:41:72:d4:f3:b1:6b:45:b4:fd:ca:de:ad:f6:a3:51:6f:
         36:31:a5:5b:72:7c:25:20:2a:c2:41:3b:bb:dc:7b:c8:e3:81:
         9b:77:6d:5f:95:77:50:c2:99:a8:3b:3c:9a:57:b1:51:bd:5a:
         b4:e1:ce:07:6f:37:19:9e:26:39:5d:62:1b:2a:d2:2c:37:39:
         09:fa:5a:ec:cd:45:33:5e:ec:38:4c:86:e5:e2:74:4e:cc:09:
         fd:ec:84:b1:07:a8:dc:97:06:37:a4:d4:57:bd:16:71:2c:f5:
         e5:8e:40:6b:aa:c3:fc:88:28:c4:63:08:1c:c7:8d:41:b4:3b:
         44:8f:3a:8f:25:cc:cd:d8:06:6d:88:f2:0c:4d:3d:dc:64:37:
         2b:30:3f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 03:01:19 2025 by rpki-client