Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/a5fc0ec4-4867-34fa-9b41-9ae6b2698253.roa
File:                     a5fc0ec4-4867-34fa-9b41-9ae6b2698253.roa (raw, json)
Hash identifier:          hwwceddi3Ql86eOIRfv8O2P4KLibF770pNtb8bNHlG4=
Subject key identifier:   6A:5F:2F:E1:DF:44:42:25:99:0A:06:5B:1A:2B:35:E8:E4:9D:72:3F
Certificate issuer:       /CN=1fb001d4-3a2b-436f-a572-51822a315945
Certificate serial:       010D0C9F43285849D165026773F437C462FF2C00
Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/a5fc0ec4-4867-34fa-9b41-9ae6b2698253.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     395363
IP address blocks:        2620:129:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:02:67:73:f4:37:c4:62:ff:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=14e80501-2512-4bde-ba7f-7afea678fdd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:93:37:c8:47:89:bd:f7:90:bd:1e:50:e2:4a:
                    2e:16:2d:88:17:6b:50:0a:31:6f:4e:55:46:29:6d:
                    0b:82:84:fb:ca:64:85:0a:59:b7:bd:df:99:12:dd:
                    d7:b8:9f:01:cc:d2:e6:49:87:6b:51:92:00:73:7b:
                    dd:9e:a2:14:69:0b:41:06:9d:f3:6b:cd:87:40:5c:
                    11:50:3e:91:72:38:c5:fe:56:8b:79:c0:da:7e:1d:
                    e3:f8:3f:c1:93:84:60:c5:7c:88:ba:5e:a9:8f:6a:
                    4d:3b:07:cd:66:bd:f3:3f:f8:13:e0:77:88:2c:0a:
                    7a:5d:92:52:f0:86:43:d5:57:46:3e:33:c4:fb:91:
                    ac:d1:28:c9:bd:f3:52:77:ea:3f:b7:64:45:14:71:
                    51:11:d7:d4:09:e2:83:63:3f:fc:3e:30:68:aa:9b:
                    56:6d:55:1f:8b:9e:15:64:43:de:3b:a5:8f:59:6f:
                    32:f3:f4:a9:26:db:0a:02:61:8a:35:fb:40:d8:c4:
                    d8:72:23:87:23:e7:61:5b:ee:79:36:19:36:f7:3e:
                    ef:33:c1:68:06:01:8d:ab:ca:44:b4:0e:d7:9d:50:
                    8f:73:3a:ab:d1:27:eb:4b:cf:04:c9:cd:1f:25:38:
                    a7:11:9b:b9:d8:87:ae:32:ca:6f:69:ec:ac:5c:09:
                    86:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5F:2F:E1:DF:44:42:25:99:0A:06:5B:1A:2B:35:E8:E4:9D:72:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/a5fc0ec4-4867-34fa-9b41-9ae6b2698253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl

            X509v3 Authority Key Identifier:
                keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2c:08:85:85:a2:9e:55:ab:a9:2c:c1:b8:f4:32:99:e5:ad:
         a3:ec:3c:7e:5d:52:76:c1:63:77:ce:44:9e:0d:0e:0d:e3:5d:
         07:01:c4:03:60:1d:82:18:ba:27:c4:e3:e3:e3:4c:bd:26:14:
         88:cc:21:b7:10:11:42:46:4d:55:8a:63:62:67:c5:66:7f:93:
         2f:2c:f3:21:3a:53:49:7f:18:3a:bd:62:d5:1c:e3:4b:0a:06:
         87:7d:6a:a2:c3:6d:da:f3:51:ff:93:5b:88:c0:b4:17:59:37:
         84:88:f2:6e:21:68:15:82:ea:d6:6b:59:06:20:de:be:35:05:
         eb:10:86:35:dc:04:3c:85:31:37:e9:35:2b:67:77:b0:1b:a0:
         63:dd:c8:3d:21:86:0b:c9:a5:2f:7f:77:ef:ee:1f:1d:11:e4:
         d9:23:5c:30:c0:0d:f5:4c:ac:5c:c4:2c:d4:b0:4f:18:68:a4:
         2f:10:9c:06:23:ba:9d:f5:e7:95:02:08:6d:bc:0a:24:7b:26:
         04:38:1c:09:cd:98:c3:32:45:40:64:93:fa:34:f3:c6:b9:0a:
         ff:28:ab:16:b0:cf:44:1f:c5:7d:0d:eb:76:f2:e6:63:22:f5:
         54:6c:76:43:33:ba:7a:79:3d:1c:fe:c7:31:5d:60:15:54:55:
         29:21:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:14 2025 by rpki-client