Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e37b5869-b2c1-3651-acaf-85d0925faaea.roa
File:                     e37b5869-b2c1-3651-acaf-85d0925faaea.roa (raw, json)
Hash identifier:          H94+HCdnPw048PGqCTKpBiAaNSFwqGOSIenIN3Qw/mk=
Subject key identifier:   36:A9:4F:67:88:A2:95:46:D5:44:C9:07:6C:9B:D2:22:C1:DB:9F:79
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285848B1F624739AFEE435D05AE900
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e37b5869-b2c1-3651-acaf-85d0925faaea.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     47720
IP address blocks:        2607:6b80:3d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:24:73:9a:fe:e4:35:d0:5a:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=073ab7cf-727b-47f4-b378-82887ef4b62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:ec:28:cb:ad:d1:39:33:79:3f:06:79:df:
                    7d:83:7a:04:12:f2:50:00:36:c1:66:8d:26:a1:d5:
                    30:8d:20:ce:fd:93:e8:a6:4a:15:26:9a:d2:e4:f6:
                    13:0a:f2:e7:4d:a2:07:63:3d:cc:96:f5:e4:a2:4e:
                    5e:7a:1e:95:a4:e8:a0:6d:b3:bd:2c:55:8f:83:6c:
                    e1:11:f7:f7:93:20:e6:7f:1f:5e:d3:c6:b0:5b:f8:
                    22:ec:79:c3:dd:08:a1:10:88:42:1c:28:e9:cc:0a:
                    c4:d3:83:e8:38:a5:a5:c8:02:c2:5e:fe:94:36:af:
                    d8:82:15:e3:01:95:42:f1:3c:72:5a:58:68:cf:32:
                    45:60:66:cd:0b:f9:72:28:97:b5:ae:ff:b8:f2:af:
                    df:23:15:37:96:4d:ad:0d:97:c3:ed:82:b5:4c:61:
                    b6:0e:f9:7f:31:82:6d:ae:59:65:6b:2f:6b:cc:98:
                    5a:13:0f:00:80:5c:ee:b2:e2:51:b5:ec:91:7e:ee:
                    db:e4:72:cf:9b:ba:3c:e4:7a:88:53:53:d0:a5:73:
                    6a:e3:e3:c6:97:64:5f:e5:a2:e4:55:3c:da:08:01:
                    e0:cd:dd:31:5b:72:07:16:19:31:80:40:ff:2f:de:
                    48:41:da:e6:d5:40:f7:df:7e:d7:96:fd:5a:4e:2f:
                    5b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A9:4F:67:88:A2:95:46:D5:44:C9:07:6C:9B:D2:22:C1:DB:9F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e37b5869-b2c1-3651-acaf-85d0925faaea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:3d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:78:d3:71:d7:4b:b9:a6:42:bc:59:7a:5c:59:bc:15:e9:ae:
         fe:2c:20:d5:f7:8d:b9:76:50:ab:58:39:ca:23:60:e2:17:3d:
         80:14:7d:ac:95:dc:1d:f5:01:f9:a4:35:d1:40:c5:5a:f2:1d:
         56:27:6b:b4:66:2f:47:1d:85:00:2f:47:7a:28:a2:cb:2e:83:
         e5:03:8b:12:40:00:4c:2c:06:c2:f1:ae:b6:1e:08:5b:1f:13:
         a5:1b:e1:a3:54:78:3c:7e:e0:28:6a:9f:99:97:f3:fd:41:7d:
         3f:b6:52:4a:47:42:4a:5b:8a:5a:5c:e6:c8:32:94:b1:9e:da:
         e7:88:a5:ce:3d:44:40:04:a7:b5:34:23:5f:63:c0:50:78:d2:
         42:5c:f3:d6:fa:e2:13:b3:dd:87:3a:e5:81:82:c8:50:4f:4b:
         88:d6:ea:27:62:5f:61:34:7b:59:18:5d:56:68:f8:2c:e4:c9:
         46:9d:5d:5f:f7:3d:d6:53:37:9f:ae:be:5a:78:33:09:71:1f:
         5b:37:5c:54:e2:98:c5:0c:53:40:a7:a4:cc:27:0a:17:db:82:
         6a:0d:3e:9d:ea:09:fa:0b:36:b4:a5:70:bb:45:ef:4f:21:f9:
         0d:df:c4:7b:b3:a9:a8:46:e6:3b:3c:af:7c:8e:1a:53:a1:fe:
         d0:e5:3f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:22 2025 by rpki-client