Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa
File:                     b465a98c-c874-38a4-b591-0a2be8ee676c.roa (raw, json)
Hash identifier:          tTMdz2k9uEqSWWrV1DB0LjO68kBlhI4nUbsK+SvP3W4=
Subject key identifier:   41:1F:8F:59:86:D3:D9:FC:37:5D:D1:7E:55:54:86:2C:0C:A5:74:26
Certificate issuer:       /CN=b06aad26-b91f-432b-94ca-bf78ffe68996
Certificate serial:       010D0C9F432858497279B3DBE14EDE80F55023A0
Authority key identifier: 42:72:EA:5B:2D:4D:E7:1D:68:27:45:FB:1B:45:B2:75:9B:E4:5C:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     14183
IP address blocks:        2620:e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b3:db:e1:4e:de:80:f5:50:23:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06aad26-b91f-432b-94ca-bf78ffe68996
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=608e4871-9238-4248-9c8b-f3290a2e2e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bf:5f:a7:4b:ff:b2:d6:cf:80:30:f1:48:ed:
                    a3:b8:d1:72:57:53:c8:33:1d:b1:76:e0:2f:72:70:
                    80:ce:58:76:34:55:33:3f:45:51:44:71:4e:46:db:
                    17:c3:80:f8:a2:00:90:2e:99:06:2a:05:56:eb:4a:
                    ad:54:20:2b:11:82:65:cf:7a:dd:dd:a7:8d:30:b1:
                    40:e0:8b:b3:4e:03:78:22:62:7f:bc:4f:8b:b6:ae:
                    45:4f:c2:fb:42:11:30:d5:d6:63:05:0e:8a:c3:75:
                    bb:11:1d:18:a2:1f:59:9a:85:23:d9:76:59:bc:54:
                    1a:4a:73:d3:48:09:d7:5e:f9:3d:69:f0:8d:5e:5d:
                    70:6e:3e:1a:37:6d:1d:f5:62:c7:f7:0b:19:60:7b:
                    e4:12:43:6a:1b:f1:1b:38:56:bc:fa:1c:6e:5e:31:
                    9b:4b:e8:90:7b:b5:5e:68:c9:7a:d1:61:77:50:1f:
                    28:ff:65:92:8b:33:2d:a4:0b:65:d8:1e:95:20:49:
                    68:1e:92:99:2b:87:8f:fc:37:bc:f8:73:9e:94:28:
                    b9:10:f2:21:f5:5e:63:43:6b:ef:54:fd:c9:18:33:
                    4c:2d:e3:07:f4:72:7f:41:e9:82:80:df:83:94:3d:
                    c8:29:d7:54:c8:80:42:ad:53:fa:e5:b6:bd:eb:c6:
                    e5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1F:8F:59:86:D3:D9:FC:37:5D:D1:7E:55:54:86:2C:0C:A5:74:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b465a98c-c874-38a4-b591-0a2be8ee676c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996/b06aad26-b91f-432b-94ca-bf78ffe68996.crl

            X509v3 Authority Key Identifier:
                keyid:42:72:EA:5B:2D:4D:E7:1D:68:27:45:FB:1B:45:B2:75:9B:E4:5C:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b06aad26-b91f-432b-94ca-bf78ffe68996.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:91:26:d0:13:5e:84:65:68:66:ec:9e:e7:7d:32:b6:92:ca:
         4a:31:08:97:b7:bc:8f:bf:55:a7:0a:7e:7b:bc:d4:b2:67:d1:
         b5:77:ce:ef:bd:50:95:db:e8:54:b9:6f:ff:3c:b0:c6:fc:ae:
         08:d0:30:e2:8b:1c:0a:0d:f7:ac:a0:b6:ea:20:ff:27:5a:f6:
         81:ad:50:f5:cb:9b:6c:e9:76:0b:ff:a4:cd:45:94:d3:cb:8f:
         d7:00:91:d8:1f:56:2f:f0:2c:65:9d:da:58:af:7a:33:57:a4:
         c5:7e:44:38:a8:55:2a:6b:29:c0:ac:ba:a4:7f:e8:7d:ea:93:
         81:30:1d:32:37:b0:13:66:3c:33:74:37:eb:15:e0:5a:95:24:
         51:d4:ad:2d:39:8b:3d:47:43:a9:25:1d:5e:aa:93:82:ff:7b:
         23:d1:cc:b1:2e:e8:35:f7:40:e1:15:00:6b:f5:42:cb:8c:88:
         8a:52:06:8a:31:a6:29:0e:d7:7e:8f:74:9f:a1:e0:7a:9f:a4:
         78:b6:21:aa:13:f4:77:d7:5d:f3:c6:54:21:d0:bc:46:41:d6:
         48:ed:59:31:2b:f5:19:f2:02:98:f1:e6:6c:2d:c3:68:55:96:
         78:c5:98:88:92:dd:a3:6e:e3:ae:31:e0:1c:ca:5b:f1:45:51:
         ca:e8:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:53:03 2025 by rpki-client