Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/bd9d1609-1eaf-3d9d-89c8-3b6b08fb4011.roa
File:                     bd9d1609-1eaf-3d9d-89c8-3b6b08fb4011.roa (raw, json)
Hash identifier:          U2JByDKoDs3Aq/QDwXLN6/lmWnz6k7tDA5CnJTBn2Ag=
Subject key identifier:   B1:B4:92:17:78:BA:02:DA:6F:EB:74:70:A7:5A:3A:9A:AF:FD:2E:B0
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F43285849194183C20E443F750F38D300
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/bd9d1609-1eaf-3d9d-89c8-3b6b08fb4011.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     400544
IP address blocks:        2607:76c0:a::/48 maxlen: 48
                          2607:76c0:b::/48 maxlen: 48
                          2607:76c0:c::/48 maxlen: 48
                          2607:76c0:d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:83:c2:0e:44:3f:75:0f:38:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=303ace77-8bd5-47e2-a336-2c4af9e06838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c7:91:f3:c7:ac:43:58:a3:d4:3f:e8:87:80:
                    b9:d9:a0:8b:ce:87:da:ea:ab:48:07:dc:6b:8b:1c:
                    d1:cb:0f:56:15:d1:04:23:2c:fb:44:f7:72:b3:88:
                    cd:65:fc:80:1c:1a:9b:d5:f1:09:32:52:29:05:9b:
                    7d:8b:fe:f0:de:9b:a5:5f:d7:de:00:fb:e4:a9:1a:
                    c7:24:4e:19:f7:4d:32:0b:dc:e9:13:75:69:ae:91:
                    bc:04:fe:79:29:1e:ad:12:c0:7f:a3:c8:9f:0e:40:
                    a7:01:98:b3:81:b2:05:ca:b0:3e:ca:f4:35:dc:6e:
                    d9:50:5e:7c:5f:8a:83:6c:17:5c:b9:b4:1e:42:a9:
                    ca:d8:76:19:f3:b8:94:b9:23:53:fa:de:4d:5e:3d:
                    1d:14:b6:a5:c6:42:99:9c:64:73:88:8e:34:db:19:
                    f8:93:7f:8e:09:04:f6:f9:af:76:1b:a5:da:c3:a1:
                    bf:d5:5d:a8:41:65:6b:ce:5e:49:16:b3:0d:86:d2:
                    cb:94:01:cf:d1:4e:db:ab:3a:10:0b:cc:57:b3:46:
                    bf:68:da:1d:7c:e4:2f:3b:31:c4:2d:c1:73:f6:5d:
                    58:2d:50:c7:66:90:09:c7:b0:3a:15:b4:1b:90:7f:
                    71:dc:57:0f:b2:be:bd:66:69:dd:45:76:ec:4b:48:
                    8b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B4:92:17:78:BA:02:DA:6F:EB:74:70:A7:5A:3A:9A:AF:FD:2E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/bd9d1609-1eaf-3d9d-89c8-3b6b08fb4011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:a::-2607:76c0:d:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:dc:4f:83:00:7a:4f:1f:f2:88:60:5b:12:94:ea:e2:c9:
         7b:96:d0:23:4b:51:f6:b2:3d:08:8f:a8:4e:7b:2e:d8:a7:2a:
         27:57:95:54:56:c9:5d:e0:7c:e9:f7:9b:84:43:39:2b:9a:69:
         11:f3:a3:ef:d5:3f:bd:0d:d1:98:01:59:c7:0e:6e:68:1d:cb:
         45:e7:10:f3:3b:d8:a6:4e:f7:f9:24:3c:81:c8:cc:d3:25:37:
         0f:23:c0:fa:42:4b:14:af:69:43:1f:58:e5:b6:19:39:c9:00:
         8d:48:39:ce:00:52:ee:93:db:2f:69:19:89:40:c0:e2:e5:35:
         32:2a:06:c5:ce:7b:01:7b:a6:8d:3c:c3:73:60:58:ce:b2:76:
         93:36:62:d5:18:d1:49:b2:ab:d6:27:8e:b2:5f:04:59:c5:b9:
         fe:4d:5b:bb:a9:96:ce:d8:6c:9f:69:a8:c1:2e:3d:f5:6b:f7:
         90:d3:33:f3:72:15:58:90:ff:d7:8d:9c:72:bf:c0:31:c0:da:
         b2:7f:99:e3:25:25:7a:73:0a:6e:02:11:08:b7:71:ec:69:55:
         5a:64:32:2e:0e:7e:12:04:b0:11:4a:c7:f8:0b:d2:bc:83:59:
         08:83:46:96:f2:c3:3c:85:8a:87:e8:ac:b5:3a:a9:57:52:b2:
         89:12:91:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:29 2025 by rpki-client