Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/7b6e1cfb-ac55-33d0-92c1-9fddd9cddea3.roa
File:                     7b6e1cfb-ac55-33d0-92c1-9fddd9cddea3.roa (raw, json)
Hash identifier:          cRjxm4DCJKwQCeNJT5qSzmiiMmxFts+XKVX/PtLFAw4=
Subject key identifier:   0B:DD:3C:E8:C9:1D:85:3C:34:90:B1:73:75:45:B4:E4:B1:EB:0F:BC
Certificate issuer:       /CN=d0677001-b062-4999-89f9-d882893f5a1c
Certificate serial:       010D0C9F43285849849EF1E756760EBA5FE676C0
Authority key identifier: 2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/7b6e1cfb-ac55-33d0-92c1-9fddd9cddea3.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     393607
IP address blocks:        2607:ee00:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:f1:e7:56:76:0e:ba:5f:e6:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0677001-b062-4999-89f9-d882893f5a1c
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=2213692f-c115-400d-bb65-ab0f00ec935b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:13:e0:d8:06:9e:34:1a:a1:67:4c:af:44:
                    51:24:21:cd:58:97:09:ae:a1:41:f2:6f:d2:f7:3d:
                    d9:92:02:60:a3:2c:c2:63:45:a6:1b:5f:23:80:d3:
                    a0:a9:7d:5b:55:98:b7:51:eb:53:43:c6:57:93:23:
                    c5:97:d0:83:eb:0d:8d:c4:4f:d8:09:36:38:a7:58:
                    63:b9:7a:06:3d:e3:e7:56:34:cd:32:c7:63:fb:ec:
                    3e:38:86:c3:f7:96:28:8f:9b:ae:da:6c:2f:e7:ee:
                    26:f5:d8:2a:20:40:4f:84:0f:68:86:cc:d1:79:4d:
                    29:72:95:7f:53:e2:ce:ae:3f:2a:f5:9d:08:b9:e3:
                    68:db:8a:06:ca:42:50:49:d4:f4:3b:20:1e:80:e3:
                    e4:b9:8b:d4:ae:ba:a4:af:f3:88:f1:20:0a:83:b8:
                    4d:ff:02:2e:a3:9e:fc:af:fb:5b:e8:f2:5d:4e:87:
                    20:b9:fc:ec:d0:11:1d:ca:21:dc:a1:65:e9:47:7e:
                    de:b1:78:91:fa:10:57:07:28:2b:fd:00:2c:8f:81:
                    fa:01:28:e9:f7:eb:ef:7d:c2:15:0c:2c:8d:5c:d1:
                    2c:d9:f6:52:00:77:4c:1c:4f:94:72:b4:8a:7c:7f:
                    2c:17:92:d2:f5:c7:65:df:fd:57:c6:71:20:4b:4b:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:3C:E8:C9:1D:85:3C:34:90:B1:73:75:45:B4:E4:B1:EB:0F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/7b6e1cfb-ac55-33d0-92c1-9fddd9cddea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c/d0677001-b062-4999-89f9-d882893f5a1c.crl

            X509v3 Authority Key Identifier:
                keyid:2F:00:EF:E4:1F:8E:3A:6C:90:45:AF:9D:8B:60:4B:70:D9:F4:B5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d0677001-b062-4999-89f9-d882893f5a1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ee00:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:87:ff:fd:fb:79:7c:97:86:69:24:b2:da:41:98:91:dc:2a:
         c3:64:d6:23:61:66:1a:ff:a2:a5:89:57:77:42:ed:93:c9:f8:
         27:68:74:97:8b:33:8e:ce:7f:8f:a1:cf:7e:c0:cd:14:88:78:
         06:0f:79:32:bf:ce:5b:07:b3:22:b3:bd:74:6a:a2:f1:3d:d6:
         76:b8:69:39:cb:d2:60:3b:b4:dc:1b:a8:bc:15:84:f7:dd:3b:
         d8:d2:5a:3b:3b:59:d2:b9:76:3c:8f:8d:5a:10:84:2f:d0:08:
         b5:ad:d5:66:1f:0e:45:30:ac:04:d6:ab:ff:42:40:10:9b:91:
         aa:cc:71:da:70:14:5c:46:a0:fa:cb:65:49:61:c5:64:2c:1d:
         d4:6f:72:0f:9b:27:36:a4:1b:75:8d:73:a9:2a:50:3a:df:43:
         40:2f:e4:76:94:d5:71:94:dc:91:33:9d:62:52:f4:af:07:b4:
         8a:47:79:35:1c:2e:3f:01:6d:ca:14:28:89:af:f1:6a:81:47:
         a6:39:8b:6e:55:fd:4d:18:6c:b8:93:e3:90:e7:76:00:c8:c7:
         a3:f9:10:97:69:f9:1d:0d:fd:94:f4:cd:87:80:62:16:97:44:
         c8:c1:07:97:3d:a1:92:5d:80:d8:a3:9a:c2:48:9e:00:f2:a5:
         bf:ea:49:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:49 2025 by rpki-client