Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa
File:                     e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa (raw, json)
Hash identifier:          8bAW5WK0Vvc1W8Dg6i1hoxBgUfrhGDklGYWm74F4sbM=
Subject key identifier:   66:C3:26:1B:A5:08:53:D0:2F:7C:56:22:46:BD:6B:C6:44:CE:1F:CD
Certificate issuer:       /CN=6288979e-3de3-4c2b-9663-274b980094e8
Certificate serial:       010D0C9F432858496B7ECD4510E9AA45FCC683A0
Authority key identifier: EE:A6:80:69:BA:9F:74:19:EC:3D:57:C3:E7:9D:92:7F:4F:C3:32:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     401593
IP address blocks:        2606:dac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:cd:45:10:e9:aa:45:fc:c6:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6288979e-3de3-4c2b-9663-274b980094e8
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=f329854e-1528-47ab-b456-2b2ca9abf3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:6e:6b:df:fe:a5:0b:36:91:23:cc:57:89:
                    ab:2d:b8:02:06:6b:f7:8c:71:0f:31:4b:a7:52:a3:
                    62:59:0a:87:6f:56:8b:7e:2c:1b:5d:0d:de:7a:67:
                    9f:3b:19:b0:30:b3:62:97:8c:a6:8a:bd:52:32:bd:
                    77:47:26:a4:60:e9:0a:9f:79:a8:00:2a:16:73:9f:
                    6a:07:26:d5:91:88:fe:91:dc:05:cc:b8:e6:93:82:
                    00:0d:19:ea:7e:58:a0:83:31:34:c2:f8:e8:83:1b:
                    23:2b:d1:ca:df:01:c1:61:00:5b:71:cd:d5:81:1c:
                    7a:ce:58:8e:ca:75:a1:99:02:da:2d:00:8b:cb:a5:
                    05:63:4b:e8:73:fa:9c:23:09:46:8f:2e:d9:d1:9d:
                    e2:36:c2:fd:42:80:51:8c:27:5b:b2:22:78:3a:75:
                    9d:0e:c3:c7:59:24:17:8b:45:37:c4:04:82:68:e8:
                    11:2d:26:08:73:b2:9b:1a:28:38:9d:94:17:8d:07:
                    61:bd:33:fc:2c:f3:2c:14:48:cf:85:b7:e5:8b:36:
                    8d:05:d6:6c:c6:7b:35:ca:df:a4:ef:f4:28:d9:fb:
                    1d:65:7a:9b:af:a3:3e:09:a3:0e:2e:7e:df:6c:db:
                    c7:e5:12:b3:1f:1f:b3:93:70:f1:fd:41:8c:c3:69:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C3:26:1B:A5:08:53:D0:2F:7C:56:22:46:BD:6B:C6:44:CE:1F:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.crl

            X509v3 Authority Key Identifier:
                keyid:EE:A6:80:69:BA:9F:74:19:EC:3D:57:C3:E7:9D:92:7F:4F:C3:32:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c3:de:55:f7:88:d4:63:69:fd:2d:51:eb:86:d4:0b:ea:fe:
         0a:e3:a4:36:1c:7e:95:0d:39:16:17:2b:83:f3:6d:1f:a5:74:
         8c:f3:da:a9:18:53:ba:18:ff:8d:64:f5:78:7d:4a:90:32:9e:
         70:32:1e:a9:b0:a4:6a:cb:49:d0:d5:6c:87:f3:14:30:b3:89:
         59:ef:b5:60:2f:e8:52:d5:2a:73:eb:47:ac:bf:ea:9d:8a:3a:
         41:13:ec:fe:e6:34:34:39:9f:e8:82:79:19:b5:1a:3f:bb:31:
         b9:8a:16:ac:8e:c4:2c:f4:52:0c:86:d1:8e:11:15:85:e2:48:
         d5:63:1f:05:10:ce:4a:54:96:d3:40:55:38:0f:31:c0:55:61:
         c6:f3:42:3d:9e:8d:8f:db:52:9b:04:54:32:b5:51:60:3e:62:
         d4:9e:cc:51:fb:72:ea:83:73:23:64:2f:31:e4:61:71:5e:3b:
         9d:8d:9c:d2:fd:41:e0:82:94:da:3e:af:bc:10:1f:a1:91:fa:
         90:e6:42:13:36:c3:ea:60:a4:68:a5:a5:3b:96:47:1c:04:e2:
         21:35:2f:83:2c:48:57:4d:e4:94:c2:af:42:6e:29:58:42:18:
         1e:c0:e7:56:4c:05:5f:ba:e1:b3:11:d0:98:62:2b:ac:ab:d4:
         b2:f9:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:28 2025 by rpki-client