Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5fb6268b-1b5f-37cd-b9da-8c5d80e369d1.roa
File:                     5fb6268b-1b5f-37cd-b9da-8c5d80e369d1.roa (raw, json)
Hash identifier:          GRC/e7Qc8o2YArEVWG3vB469kDYy+FnaCUg4l66R7e0=
Subject key identifier:   B4:F5:F5:C4:7B:5D:79:C1:81:B0:71:86:FC:1F:3E:52:33:1C:4D:E2
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F43285849AE7F38E7A2EEBDAD2FC71C60
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5fb6268b-1b5f-37cd-b9da-8c5d80e369d1.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     8070
IP address blocks:        2605:4300:3611::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:38:e7:a2:ee:bd:ad:2f:c7:1c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=73e832e0-8a43-4ec4-ab2b-57795a24805e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:4b:40:50:82:9d:be:b0:b1:07:a1:56:f7:
                    c1:3a:66:a8:5a:be:b7:15:65:f3:b4:eb:41:6e:bd:
                    31:a0:68:8d:11:66:00:16:56:5e:7d:a8:d5:8d:d9:
                    48:06:a0:48:34:e0:bf:38:0a:f1:4d:03:cf:ff:b3:
                    fe:6a:44:18:34:e0:ea:6f:21:33:f9:eb:8f:09:d0:
                    c3:0d:de:ab:bb:83:6d:79:d3:2e:68:ef:2e:67:e0:
                    9a:0e:57:df:9e:6b:05:73:d1:c8:98:1b:9d:4c:85:
                    0a:ab:72:dc:70:a6:f1:b5:44:cf:32:5f:b5:b0:3c:
                    87:88:d9:fe:ab:a1:94:12:81:7e:90:7b:c3:58:51:
                    f6:61:07:62:ef:2c:c6:2a:7c:8d:1f:73:7e:4f:90:
                    9d:a0:cd:6f:56:57:76:b5:ac:94:41:34:96:22:f9:
                    19:fc:e3:9c:a0:52:c1:fa:51:d6:a7:6c:14:b7:f3:
                    6b:92:fc:fa:9a:3a:b8:eb:7e:ad:3a:49:ca:56:10:
                    67:37:a4:c4:4e:e3:f8:5c:6e:69:91:18:e9:fe:21:
                    3c:42:d3:ee:59:f9:1f:e6:32:de:43:1c:27:ba:ab:
                    21:12:52:cd:f8:af:76:de:84:41:ae:4c:63:a9:1e:
                    fb:cd:14:a7:c7:53:52:6e:f0:9e:ae:7a:c7:e8:78:
                    bf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F5:F5:C4:7B:5D:79:C1:81:B0:71:86:FC:1F:3E:52:33:1C:4D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5fb6268b-1b5f-37cd-b9da-8c5d80e369d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3611::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3e:dd:ec:9a:e5:04:55:d9:9b:92:88:a9:25:f4:78:0a:ea:
         51:92:1a:9f:c0:4e:0a:0a:69:1b:e4:d2:35:9e:9d:bc:ad:36:
         79:22:ce:28:72:a2:e5:3b:ac:b3:6b:21:ae:c4:f1:43:8d:68:
         12:90:30:d8:d2:4d:c6:b5:8b:dd:d0:7c:eb:e4:cd:88:aa:10:
         60:99:49:c2:51:d6:cf:72:a7:9e:1a:b7:77:53:79:cd:50:af:
         57:27:b6:0f:e9:82:95:84:ff:63:87:5a:29:00:51:75:5d:de:
         fc:89:41:96:4e:ac:a4:fc:b7:50:e9:1d:cf:6a:54:1d:d8:01:
         c6:7b:7b:45:94:0b:cc:88:fa:5f:a9:7a:fe:b3:47:cc:8f:39:
         80:0a:99:08:ad:bf:d2:31:c2:73:6c:3c:7e:c7:a2:8a:ee:6e:
         c1:13:c1:44:42:38:bd:61:f2:5f:14:b2:61:15:9a:cd:3e:53:
         39:be:af:fb:8f:54:fc:30:31:00:d1:c7:02:52:ea:89:8b:48:
         e2:8f:4c:b3:40:84:bb:85:7e:05:e6:6b:f2:61:22:7f:82:3c:
         e5:fb:b7:00:1b:75:b5:c0:ea:9f:b2:05:4c:2d:35:39:a4:70:
         17:c2:b9:41:d3:f5:02:28:e5:94:66:af:16:23:03:31:5f:3b:
         24:80:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:06:35 2025 by rpki-client