Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/6216c9cb-a038-37d4-9b6e-66b74218cccb.roa
File:                     6216c9cb-a038-37d4-9b6e-66b74218cccb.roa (raw, json)
Hash identifier:          pgWZOYXrR9Y5WAAEMRnByNB4UnKFzV8u0dJzGcvyIRY=
Subject key identifier:   F9:39:FF:F9:14:1B:F5:58:05:43:05:99:77:53:43:16:11:CA:6B:4E
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F4328584900215E98D1FC2351D9F7B8E0
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/6216c9cb-a038-37d4-9b6e-66b74218cccb.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     19257
IP address blocks:        2605:1880::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:5e:98:d1:fc:23:51:d9:f7:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=1ff6df47-2252-4418-8df9-fd384be410cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:98:d2:02:2f:39:c8:86:f2:b6:16:dc:4b:8b:
                    e9:bc:76:16:4d:03:64:dd:a7:63:cf:87:79:22:66:
                    49:84:c8:83:d1:1c:12:ed:52:49:81:f0:7c:fa:3f:
                    43:2f:a5:a4:1f:3b:e3:f3:cf:6a:fd:52:06:f9:b3:
                    f6:f3:04:79:0e:05:dd:6d:ea:e1:2c:77:1c:10:38:
                    39:58:a1:a7:63:bc:85:b7:70:1c:33:fd:f0:92:9e:
                    1b:69:77:de:f4:f3:52:be:bf:0e:49:68:33:8a:52:
                    a7:76:f1:06:52:5a:76:6e:b0:25:1d:8d:27:c8:9e:
                    3e:f2:50:cb:ff:29:3b:34:6b:a7:ed:4c:52:cb:61:
                    a2:03:57:ec:f3:5d:ac:6a:5d:ed:74:13:46:31:e7:
                    86:96:3b:44:be:09:6c:be:3c:19:7b:35:7d:fc:4a:
                    fa:98:3e:70:c9:7e:0e:66:a7:69:a6:21:42:a1:7e:
                    4b:a4:e3:e9:29:b7:4f:2b:f6:02:6b:ab:10:25:02:
                    88:f3:19:c5:4a:11:24:c0:2e:db:3c:44:05:d1:bc:
                    fc:7c:2c:62:03:99:4b:33:2c:f5:0e:7c:1e:db:27:
                    27:15:7c:c7:80:42:61:0a:92:fd:13:1f:b5:59:03:
                    34:bd:77:1f:14:56:5f:5a:5a:84:54:a9:7a:1f:0b:
                    ad:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:39:FF:F9:14:1B:F5:58:05:43:05:99:77:53:43:16:11:CA:6B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/6216c9cb-a038-37d4-9b6e-66b74218cccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:b6:e5:26:13:9c:67:3a:06:79:ae:df:ff:c1:99:ec:2b:6e:
         67:d2:1e:2b:d0:cc:59:17:e9:9f:6d:e4:34:2d:9c:4c:d7:43:
         bf:41:97:ff:02:b2:c7:03:c0:39:65:09:d0:ec:08:86:18:cc:
         42:8f:f2:d8:08:0e:67:07:a7:6f:e8:60:f0:17:88:d0:cf:eb:
         43:18:03:59:2d:a7:13:c2:d6:73:79:23:01:ea:29:e7:c0:bc:
         1b:df:e5:ff:57:35:fd:67:ad:bf:23:3c:1f:1b:c7:79:3f:f3:
         e0:78:ed:91:a6:59:85:3f:d3:77:81:a2:c4:21:df:d1:d6:3c:
         8d:1d:2e:56:37:bd:25:e8:87:c1:5c:2f:ed:80:3f:5a:1a:a8:
         3a:2c:e2:6d:04:85:b5:7c:e9:8f:70:17:59:f3:29:d1:20:d7:
         43:73:e4:27:55:98:89:ca:15:7a:e2:17:f2:58:0a:22:ab:11:
         3f:86:17:81:04:ec:7e:3d:8e:46:ba:eb:a2:6c:7f:f6:16:f8:
         f9:4f:2d:a1:a3:16:a3:5e:dd:3c:4a:cf:90:33:61:62:4f:07:
         39:49:42:97:97:09:8a:ac:72:6a:c9:8f:92:ed:14:01:b8:75:
         2e:9c:4a:76:48:89:24:1d:84:d8:4d:6b:60:c0:42:e4:01:76:
         be:ac:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:14:10 2025 by rpki-client