Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa
File:                     dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa (raw, json)
Hash identifier:          ugjksdzAkUTduraNGZnQ7FnfBw52vthZRpsxJWGhhsM=
Subject key identifier:   44:1A:C5:7E:B1:65:2D:4E:ED:FB:40:2D:D4:DA:FE:E8:7D:DE:FE:33
Certificate issuer:       /CN=05791d14-11f0-4527-a43c-e6b2425f6d16
Certificate serial:       010D0C9F43285849A3547E312128B70273A88F80
Authority key identifier: 53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa
Signing time:             Fri 25 Apr 2025 01:00:47 +0000
ROA not before:           Fri 25 Apr 2025 01:00:47 +0000
ROA not after:            Thu 24 Jul 2025 01:00:47 +0000
asID:                     32738
IP address blocks:        2604:4a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a3:54:7e:31:21:28:b7:02:73:a8:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05791d14-11f0-4527-a43c-e6b2425f6d16
        Validity
            Not Before: Apr 25 01:00:47 2025 GMT
            Not After : Jul 24 01:00:47 2025 GMT
        Subject: CN=0fca6aed-0ad2-4ce1-8df1-5248fd841386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:bc:05:f3:51:68:2c:13:84:3a:ce:da:e9:
                    5e:b9:a5:f8:1a:08:0a:9d:4d:53:16:ca:6b:9a:f0:
                    ff:36:ec:72:01:e8:20:fa:aa:16:fc:66:50:2f:7a:
                    e4:df:2e:84:b3:a1:8a:c5:8b:06:94:ff:67:7d:b3:
                    28:35:42:3b:45:e2:e3:20:1b:ee:56:00:8c:15:ed:
                    0b:3c:32:e9:c3:05:ad:1b:ad:d2:b6:f0:06:11:af:
                    d6:34:5d:f3:e0:bd:1f:9f:cd:c9:cf:e9:c5:40:12:
                    1d:d8:99:67:2b:77:a3:d9:7d:78:0b:b8:40:1b:84:
                    24:1d:ce:6c:8b:2c:aa:51:56:6e:54:c7:60:61:7d:
                    d4:b7:73:d0:5f:24:df:21:57:59:a7:6f:45:ed:49:
                    05:24:0d:a6:6e:fc:9c:3c:a9:d5:5a:8c:78:6f:3e:
                    e0:85:91:a9:49:e1:39:e9:5b:37:cf:5d:a0:b9:20:
                    9f:0e:43:11:fd:99:ba:73:33:0a:cf:21:2b:8e:a3:
                    c6:5c:45:78:57:e4:0c:3e:e4:64:51:87:8a:c0:71:
                    73:78:6c:12:59:66:50:ce:36:88:5a:e4:01:c3:eb:
                    01:7c:4b:0e:9b:0e:2e:6b:90:54:66:bd:b2:f3:8a:
                    b5:e8:3c:dc:85:b0:e7:8a:2c:1f:ae:3c:54:a0:e2:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1A:C5:7E:B1:65:2D:4E:ED:FB:40:2D:D4:DA:FE:E8:7D:DE:FE:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/dafd8568-abcf-38c2-ab0a-122f4f104c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl

            X509v3 Authority Key Identifier:
                keyid:53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:bf:cb:81:10:58:5c:57:2a:a4:1f:9a:ae:97:64:0a:ed:30:
         cd:01:c1:13:50:d8:70:93:30:b4:c0:64:b2:32:1d:ae:0a:f6:
         76:78:11:0b:69:54:78:38:de:df:53:8b:95:24:a8:22:c8:62:
         7f:a0:e0:01:b5:e7:2c:b7:1b:ea:4e:7b:06:d2:c2:57:df:ab:
         09:a8:33:ff:ca:47:27:59:60:44:c9:93:e6:16:d2:8c:4b:98:
         47:f2:8a:75:4e:2a:a6:db:ff:f3:d9:fc:c2:12:2e:e8:da:bc:
         87:fa:ad:e4:68:3b:90:41:e3:7b:17:c2:98:dc:f1:95:37:b5:
         a5:a8:5a:1e:23:a4:3b:91:8b:7a:82:1c:da:fe:9d:0c:bd:43:
         54:19:58:3e:19:c6:13:86:cd:9c:7d:8a:d8:98:39:4b:dd:00:
         9c:bc:c5:69:d2:af:38:ee:44:01:49:9d:17:50:d9:cb:fa:fb:
         08:08:f0:a8:8e:35:4e:9d:85:7d:9c:d4:d0:d3:8a:19:b4:98:
         45:7f:3c:cf:5a:47:5f:9c:1d:ea:97:a3:ff:dc:f0:67:7a:91:
         c7:fc:e6:5a:ea:37:91:4b:9a:78:89:f3:11:7f:86:80:fa:17:
         86:bb:28:f9:ca:93:6a:8e:ab:17:e3:b9:d7:0b:f1:23:6c:1e:
         80:10:44:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:49:19 2025 by rpki-client