Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/a04a609d-a750-3962-9e10-281c8436cdda.roa
File:                     a04a609d-a750-3962-9e10-281c8436cdda.roa (raw, json)
Hash identifier:          70qhPQigu6igl5v6b0tycxFLlDww2NlIP9r13RcQq9A=
Subject key identifier:   00:55:56:39:6E:35:F9:1C:A3:B0:1A:A6:0B:0B:E6:C6:E8:8D:04:C6
Certificate issuer:       /CN=497813be-498e-4129-a627-225f97d0e2b5
Certificate serial:       010D0C9F432858491ED6DB69FBBA4778A73C9000
Authority key identifier: B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/a04a609d-a750-3962-9e10-281c8436cdda.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     399606
IP address blocks:        2606:5e40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:db:69:fb:ba:47:78:a7:3c:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=497813be-498e-4129-a627-225f97d0e2b5
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=8e419b41-c48a-4f19-8d2d-0c108464d9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:4e:e7:ba:a5:ec:da:c1:e4:25:69:5b:45:
                    c8:1c:66:ca:9e:03:2a:24:4f:3c:30:0b:97:3f:20:
                    d1:4c:32:07:de:3b:12:71:34:17:e8:9f:93:c3:3e:
                    eb:48:1b:36:f1:b3:6c:69:ff:fa:da:b3:24:44:50:
                    31:33:ff:19:5d:c0:cb:cf:0b:16:e2:0b:59:19:59:
                    83:ef:1b:60:05:11:64:0e:60:c9:7a:2c:82:4f:c9:
                    4d:5d:15:15:ff:cd:ff:7a:1f:ae:14:74:bb:7e:e3:
                    4c:00:a3:c5:1f:ae:5f:07:2a:5b:e2:5c:31:39:e8:
                    df:7f:e3:be:7b:8e:58:0e:6e:f9:a7:3e:f1:08:0a:
                    fb:0a:27:f6:31:fa:9a:a3:97:05:6c:da:14:98:03:
                    5e:0f:ca:6d:f8:f6:a8:71:37:55:c0:05:e9:24:ef:
                    c1:84:9e:33:7a:69:0e:46:6c:86:70:d0:31:4f:21:
                    f6:2f:91:96:cb:6a:10:97:21:2b:a9:e4:8a:63:09:
                    ba:95:b8:eb:98:c4:a3:93:fe:3c:d9:46:31:d6:c5:
                    bb:0e:32:81:b2:55:cf:0c:13:0a:2c:35:2e:62:17:
                    12:55:70:f5:cd:20:c0:57:35:7b:6a:c8:5e:b4:22:
                    60:21:01:25:fe:ba:93:3e:d8:f2:17:45:b8:65:fd:
                    a7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:55:56:39:6E:35:F9:1C:A3:B0:1A:A6:0B:0B:E6:C6:E8:8D:04:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/a04a609d-a750-3962-9e10-281c8436cdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5/497813be-498e-4129-a627-225f97d0e2b5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:37:7B:4E:4F:03:FE:09:AC:C1:B9:40:8B:3F:9E:F0:4C:A2:FF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/497813be-498e-4129-a627-225f97d0e2b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5e40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:9e:d9:55:73:c0:bb:1e:32:a2:11:3b:d5:21:e6:3b:f1:67:
         a8:7d:c1:24:5c:e7:06:e6:56:b1:62:bd:c5:56:69:e3:cb:24:
         e2:52:c7:42:2b:10:db:9c:b7:27:7e:0c:f3:97:9f:35:dd:ef:
         d5:44:71:3e:2e:4e:80:e1:b9:75:41:44:3d:ab:35:5b:da:54:
         82:49:1f:2a:8e:91:91:04:9f:73:af:d5:8d:58:64:d8:1d:97:
         14:1f:dd:d2:81:71:13:de:5a:b3:e8:11:f1:16:0a:41:85:2d:
         56:21:0f:14:44:f8:e4:a6:a4:4c:a6:6a:59:49:0a:6a:1d:88:
         3f:79:52:20:a6:ad:82:ca:f7:90:53:15:f8:91:37:3d:da:2d:
         4c:64:bf:77:85:5e:55:ed:f8:73:b0:cf:4e:2c:3b:fe:dc:da:
         a0:eb:46:8b:34:4f:c2:09:6e:72:ae:49:87:02:23:02:6d:2a:
         ea:4d:bd:58:e8:16:ec:ba:12:e8:b4:7e:4a:5f:4a:81:0e:1d:
         77:6b:d4:8f:ad:ba:56:12:96:df:6c:14:b2:eb:3c:31:24:dd:
         a5:5d:f9:7f:0f:47:eb:36:4b:9b:75:29:6f:df:43:23:d1:06:
         09:67:38:38:3c:58:84:51:77:db:09:a2:5e:08:00:38:82:79:
         74:1c:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:46:34 2025 by rpki-client