Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/f3c81f4a-d997-391e-bd4f-3480c77100bc.roa
File:                     f3c81f4a-d997-391e-bd4f-3480c77100bc.roa (raw, json)
Hash identifier:          J0xqnvBI5WSfVZ16oEPTgO8+t7qhmsoV+2SmKknnQCw=
Subject key identifier:   55:6A:73:ED:34:3C:11:B2:9B:3B:E7:25:5C:36:CF:71:25:B5:93:73
Certificate issuer:       /CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
Certificate serial:       010D0C9F432858491D718786019FF32DF3F89B80
Authority key identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/f3c81f4a-d997-391e-bd4f-3480c77100bc.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     400725
IP address blocks:        2606:dbc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:87:86:01:9f:f3:2d:f3:f8:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=5a29c2ca-7b1b-4a33-9d9b-3967c3165103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:1b:58:0d:d8:6c:01:a5:90:76:67:2e:59:
                    90:8d:68:1d:2c:df:e6:3d:cd:d1:e0:ea:cc:39:04:
                    70:e6:73:e3:55:21:f2:b4:57:1e:84:8e:53:28:05:
                    32:b7:3e:cf:83:ad:fd:3f:9d:8a:f5:c7:bf:2a:22:
                    dc:08:63:74:6d:fb:53:d9:68:b4:8c:f8:50:fe:16:
                    67:0e:c7:66:98:9b:92:70:f3:d5:38:3f:ff:fe:fa:
                    c1:03:cb:d4:1a:21:c9:12:79:2c:db:b1:58:ef:bd:
                    51:86:41:b3:0d:43:7c:77:40:06:a3:1b:c8:bd:79:
                    1c:21:1d:ce:ae:b8:35:bf:75:6d:01:e1:2a:71:88:
                    12:fc:24:9c:08:f1:f9:e1:12:2c:eb:1d:39:22:70:
                    ed:b4:f1:c4:43:b6:76:46:a6:08:b4:63:1a:d1:bb:
                    d1:64:0f:c6:b2:b5:60:69:42:7c:ea:ec:65:d1:dc:
                    6d:98:b7:dc:4f:d2:3c:2a:c2:3f:78:1d:1b:38:dc:
                    03:e6:ca:b9:1f:b8:e4:92:38:1d:20:81:d1:2c:ef:
                    9f:8f:62:7e:05:41:00:69:96:c7:8f:17:6e:75:89:
                    f1:2f:42:80:3d:64:8e:85:fe:b6:31:a2:48:fe:51:
                    c1:df:29:08:c0:d5:3e:7e:02:d6:92:1e:ff:da:bf:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6A:73:ED:34:3C:11:B2:9B:3B:E7:25:5C:36:CF:71:25:B5:93:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/f3c81f4a-d997-391e-bd4f-3480c77100bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl

            X509v3 Authority Key Identifier:
                keyid:5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dbc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ce:70:75:41:67:c6:40:32:60:da:7c:5f:21:89:23:ab:b3:
         43:64:2c:9f:1c:33:ef:ae:bf:e2:61:e8:55:53:72:13:12:78:
         c9:7e:16:07:5d:59:61:02:4a:0d:04:d1:4e:00:20:34:c4:85:
         c4:fe:d4:3c:2c:13:63:c9:fd:a0:b3:06:65:3f:09:d9:e1:cc:
         f8:e8:d6:53:45:27:7d:65:46:ac:d9:d6:df:d3:8d:76:3c:3b:
         22:bd:e3:ab:6d:ff:85:0f:19:e6:7d:7e:ba:97:a0:bc:32:c3:
         5d:28:93:ad:7a:66:b0:0e:93:05:fa:72:30:5a:12:7f:c4:f1:
         bd:f7:3c:cb:17:99:89:89:23:81:b0:fa:06:56:f8:30:b0:95:
         60:0e:83:a9:d7:35:74:1f:98:18:d7:67:dc:61:20:8b:af:61:
         8d:79:dd:3a:44:d0:9d:d1:a5:ae:2c:85:ed:60:78:78:f4:2d:
         0e:dc:26:d3:8c:d1:c2:07:9f:10:81:a0:0b:06:b4:56:18:b2:
         4f:71:0f:70:e5:f6:d4:0e:43:49:5b:3c:03:45:07:3f:4e:70:
         1f:a4:48:c1:10:50:79:5e:54:c5:d9:b6:22:96:4a:9a:74:6b:
         a3:21:07:df:c7:cc:aa:02:3d:30:83:ac:c4:10:33:42:dd:61:
         ae:9c:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:29:48 2025 by rpki-client