Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa
File:                     06fbf2c0-813d-3842-8c17-978a309b106c.roa (raw, json)
Hash identifier:          ApnZ2o/GUdiaJX4jBQezcxAXJLtuyiwxHUWJoyqv5Dk=
Subject key identifier:   B1:2C:1B:5B:DB:F0:1A:47:47:AD:7D:4E:33:98:BD:EE:61:34:E0:4B
Certificate issuer:       /CN=1fb001d4-3a2b-436f-a572-51822a315945
Certificate serial:       010D0C9F43285848F22C65F672CF99C82AE16B00
Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     395363
IP address blocks:        2620:129:6010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:65:f6:72:cf:99:c8:2a:e1:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=1831cc28-87fb-48fa-b2c8-281bdb99d1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:62:4e:af:e1:6a:f7:f0:2e:a8:9c:79:35:
                    14:bb:d0:58:0b:e9:bd:ac:76:38:d7:67:48:62:b8:
                    71:2c:f6:07:22:f1:4f:27:38:75:d9:b2:2f:6e:4f:
                    fb:8f:73:b4:9b:7a:4e:4b:f2:11:af:a6:94:c1:6b:
                    ec:df:e8:20:d6:31:93:1c:90:30:3c:7c:13:83:ae:
                    16:0e:08:de:9b:fe:99:f2:a4:60:03:07:ff:30:65:
                    f3:7f:52:03:0e:41:ba:68:c4:c5:f0:12:5d:ec:7c:
                    f6:c0:c3:1f:23:d4:17:de:10:8a:10:02:5f:26:b3:
                    a5:46:d4:85:0d:89:16:39:86:a0:4f:24:cd:42:02:
                    c2:58:29:00:b2:c9:cf:9a:91:b5:be:bf:0e:1f:78:
                    e3:5e:98:a3:86:9b:51:1f:2a:e7:6b:cb:d3:1b:c1:
                    be:23:df:17:4a:61:49:62:f4:52:c9:d7:3c:01:c4:
                    05:a2:9f:e3:07:ff:0b:9b:d4:50:54:e8:5d:24:b1:
                    ab:d7:aa:48:2c:2c:23:7a:37:c0:03:37:68:5e:7f:
                    90:cb:8b:b0:0d:18:e1:f2:84:a7:21:7e:e2:98:85:
                    b0:a5:58:48:2c:da:1e:44:b2:c6:28:eb:e7:47:e5:
                    3b:24:4d:43:2b:74:fc:4b:0c:d8:d1:7b:37:7b:e7:
                    ec:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2C:1B:5B:DB:F0:1A:47:47:AD:7D:4E:33:98:BD:EE:61:34:E0:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/06fbf2c0-813d-3842-8c17-978a309b106c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl

            X509v3 Authority Key Identifier:
                keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129:6010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:73:da:af:88:d7:44:f2:76:29:c5:df:7b:0d:41:ab:fd:f5:
         72:2a:40:53:70:a7:cd:1e:a9:43:f0:ca:72:48:d0:d7:c0:d4:
         5f:32:5f:fc:eb:54:98:91:78:22:85:8d:e8:fa:e9:f9:07:a8:
         7f:43:f4:91:d0:ea:6d:f9:6c:b7:54:0c:1a:49:ca:bd:de:2b:
         ca:c3:ec:15:32:54:f6:76:68:66:55:af:34:9e:27:4b:21:93:
         18:e1:2a:49:1c:b1:e9:5c:06:e7:87:36:3b:e6:b8:9e:58:68:
         16:d1:7a:3e:f7:b1:d2:fd:56:1c:96:58:6f:c6:0e:07:ea:ce:
         0f:b0:34:10:d9:d8:de:88:44:69:7a:39:02:48:69:d1:9c:4f:
         41:7c:be:ec:f7:c6:b3:0a:a0:d9:ff:fd:d1:e7:d8:cf:8c:d8:
         59:3c:df:43:0f:76:d8:97:ff:ec:20:a7:da:ea:f9:87:3a:eb:
         11:61:2a:e9:e2:6f:31:ae:e5:b9:b8:14:09:74:21:40:6d:b5:
         e2:fc:e1:43:76:a4:cd:04:29:18:fc:44:3b:36:bf:70:bd:26:
         94:2d:73:2d:64:ea:e4:16:2e:76:75:82:f7:7f:23:18:ae:e1:
         e0:79:7b:6d:9d:64:72:f4:08:c7:e7:a9:93:c8:56:36:e2:db:
         ed:09:a0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:26:19 2025 by rpki-client