Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/61523b07-190f-34e5-b8bf-99d74a5b6f54.roa
File:                     61523b07-190f-34e5-b8bf-99d74a5b6f54.roa (raw, json)
Hash identifier:          /bzzqsiibJrlsemGuc02FBYmZv+fqLLWMkNig/MTcNY=
Subject key identifier:   0F:41:DD:DD:E0:EC:5E:C7:86:CF:87:96:C5:7B:3C:43:78:E1:87:45
Certificate issuer:       /CN=618a40c8-2175-4e55-926e-6516ce21ec74
Certificate serial:       010D0C9F43285848AD7C83CBB490E5835563B000
Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/61523b07-190f-34e5-b8bf-99d74a5b6f54.roa
Signing time:             Sun 26 Jan 2025 23:32:37 +0000
ROA not before:           Sun 26 Jan 2025 23:32:37 +0000
ROA not after:            Sat 26 Apr 2025 22:32:37 +0000
asID:                     14618
IP address blocks:        2620:1d8::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:7c:83:cb:b4:90:e5:83:55:63:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74
        Validity
            Not Before: Jan 26 23:32:37 2025 GMT
            Not After : Apr 26 22:32:37 2025 GMT
        Subject: CN=f21135ad-774d-4a45-9814-dfec370810fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:c7:9b:81:2a:38:50:d5:91:66:9f:52:31:
                    02:92:ff:85:7d:8c:66:28:d2:f0:e0:0d:36:3b:6f:
                    bb:30:47:f5:07:e7:6e:15:a0:6a:08:7f:36:67:db:
                    11:45:13:ef:ad:81:db:83:b0:3a:51:31:40:f2:88:
                    8c:2b:13:cc:6c:7d:6d:f4:f7:8f:af:5a:ef:78:01:
                    30:20:48:bc:5f:08:0a:cb:c4:53:66:01:3e:99:8c:
                    68:e9:f7:89:b2:9a:b4:61:f2:ff:40:de:c0:e3:3e:
                    44:b5:71:a9:86:41:bf:2c:ea:9f:15:a7:18:b5:47:
                    cb:e0:49:76:51:79:ec:a8:c6:2b:41:7e:80:66:b8:
                    ea:1f:41:9c:dd:40:b1:af:1f:fe:c5:24:7a:5e:a6:
                    84:41:1a:7f:61:c0:3f:b6:9e:2f:b6:5b:42:c9:2d:
                    93:68:f6:0b:25:10:e5:03:57:b4:22:10:09:a4:b5:
                    0f:9a:d5:77:38:91:a3:e1:e0:05:cb:92:bf:c3:dc:
                    4e:ef:53:b2:f8:d1:33:f2:52:48:27:6a:8f:06:2b:
                    01:00:2c:1b:b8:99:af:ef:6a:1e:1d:6b:87:38:58:
                    75:c1:ac:82:df:61:19:80:02:c8:a2:c3:04:07:fc:
                    5c:93:fb:2e:f0:a4:54:c0:5c:b6:19:b5:14:b7:9e:
                    af:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:41:DD:DD:E0:EC:5E:C7:86:CF:87:96:C5:7B:3C:43:78:E1:87:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/61523b07-190f-34e5-b8bf-99d74a5b6f54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl

            X509v3 Authority Key Identifier:
                keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d8::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:61:a3:e3:0e:73:c9:7a:af:97:6b:24:5e:88:bf:4f:79:20:
         9a:9c:89:bb:a4:a1:3f:1c:2d:60:c3:aa:f3:60:93:cb:76:54:
         fb:04:6b:83:ae:a9:44:ec:7d:e6:bd:d1:97:f4:f9:69:46:91:
         8b:2a:f4:9b:d0:92:f4:a9:a1:c6:46:29:ae:c4:14:ef:27:c6:
         3e:a3:0e:41:4b:a2:3c:70:66:b5:e0:15:b1:81:a3:56:30:f4:
         72:19:6b:fd:59:ee:4a:df:12:88:4e:a9:8c:24:94:82:28:63:
         46:7b:b5:cf:10:71:df:7b:f5:e0:ec:30:ac:b4:6d:2e:30:05:
         eb:d1:06:9d:93:c3:67:06:c6:af:9a:11:8c:5b:2c:95:dd:7a:
         57:ff:be:56:67:f7:ba:11:1e:f9:2d:ff:29:ca:7f:d9:98:1f:
         9a:14:29:4e:28:1c:6a:76:6c:e1:14:26:ee:89:02:3a:98:43:
         8c:52:7e:d6:42:e1:5a:d5:66:3e:02:7e:49:22:45:98:55:e4:
         bf:56:97:15:b8:81:a9:cf:02:e6:f4:3b:db:e4:67:81:51:4b:
         d0:36:f3:27:df:13:92:05:20:e6:13:89:54:e1:51:a4:79:2e:
         35:13:4e:c6:7f:0f:34:9a:05:f0:27:71:1d:6a:d8:2c:a6:fd:
         a5:6f:b4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:07 2025 by rpki-client