Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa
File:                     2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa (raw, json)
Hash identifier:          WCrSvEI0KrlsDEUBQd92QQqmBnk1tnuopI+ml2bavwY=
Subject key identifier:   85:92:22:DC:EF:48:8A:2A:FF:53:66:F0:20:DC:F3:A2:65:54:8B:55
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F432858493ED3D054CED59D14E49F7380
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     398351
IP address blocks:        2607:f790:fff6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Mar 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d0:54:ce:d5:9d:14:e4:9f:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=d4b3b633-335e-42fb-a6b4-5b30659910c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0d:aa:3c:d5:9c:72:69:fd:5f:55:f4:11:91:
                    31:aa:3c:2c:af:dc:30:99:5d:04:29:eb:f5:80:ef:
                    ef:b0:73:b5:36:66:1f:fa:8f:73:e8:94:1e:1a:b1:
                    9d:bf:bd:c1:c4:09:27:0f:46:7b:83:a2:59:4b:84:
                    96:59:c2:17:05:f1:61:6b:e6:80:f6:d0:56:2c:56:
                    a7:2b:2a:ac:09:10:cc:02:f2:a9:3a:60:8e:a1:72:
                    83:1d:5c:dc:31:2a:40:e3:9d:16:71:39:e1:7b:09:
                    b0:4b:03:7a:f2:26:ba:61:31:ea:9a:ab:e7:37:e2:
                    e2:33:ba:22:2f:64:82:d2:56:59:92:f4:62:c3:c4:
                    6f:65:a4:2f:15:c6:3d:c3:de:cc:48:6f:d8:41:ed:
                    84:cb:44:26:70:4c:18:64:8e:19:87:d2:84:00:11:
                    4a:ef:26:73:f5:e6:f2:4c:8e:82:92:eb:85:99:06:
                    9c:6c:79:a2:36:3e:97:5b:8b:c4:61:e5:5d:58:81:
                    9d:f2:ee:e8:55:83:e6:f8:33:94:81:60:77:db:d2:
                    7a:c7:f7:b7:27:6b:e1:5a:ed:35:53:88:a5:a3:06:
                    85:7c:2a:a5:5d:be:a8:48:dc:7f:f2:56:c1:34:58:
                    b3:a6:b9:1b:82:f4:fb:47:64:81:58:2b:91:9b:8a:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:92:22:DC:EF:48:8A:2A:FF:53:66:F0:20:DC:F3:A2:65:54:8B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d5e3620-52fd-30cf-9ab4-5a9e9e9a4348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790:fff6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:55:bd:ac:fc:76:45:5b:1a:a4:d0:68:0a:7c:5f:77:34:21:
         43:6b:cb:92:fd:7d:02:9a:db:e8:5e:a1:0a:cf:14:88:81:fe:
         d5:7a:8a:09:42:fe:a7:45:88:5a:ce:81:14:a1:c3:de:e6:82:
         32:ca:4a:9c:77:63:6c:7e:b5:d6:2c:e0:b7:2f:ff:df:ae:7d:
         f4:8f:3c:26:6a:ed:82:7f:83:99:12:de:7e:4e:5f:bb:8f:09:
         bc:cf:aa:8e:94:bc:98:b6:f0:bc:63:db:5e:33:ab:c5:cb:11:
         a8:f0:25:69:3e:69:c7:ff:a5:50:f0:1f:5d:89:90:65:1c:65:
         40:fa:3e:0f:2b:29:80:17:d8:f9:0a:d1:16:f0:9f:34:91:9b:
         32:5f:40:8b:b3:d3:b6:33:1b:39:87:50:c1:ee:23:d4:77:84:
         d9:66:61:6e:e9:b3:d7:8f:1d:1e:91:19:33:aa:15:70:df:63:
         0b:a2:27:47:ae:c7:6b:74:f8:3d:d1:26:91:e4:62:49:97:36:
         48:84:e1:16:ea:1c:94:90:cd:0f:d8:08:11:94:24:c5:73:cf:
         65:2a:96:ea:a4:00:26:3e:35:e8:e2:b3:28:f8:87:e2:b1:47:
         fa:06:8d:12:6b:ec:07:1a:9e:9a:76:ad:85:c3:90:d1:d0:2e:
         2b:f8:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 24 20:19:47 2025 by rpki-client