Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1dddc1c-9b84-3914-861a-ce4ab64ece04.roa
File:                     e1dddc1c-9b84-3914-861a-ce4ab64ece04.roa (raw, json)
Hash identifier:          x1He0hLDn84LqavigCexiSLssl4L8UzsqMaHtqiniIA=
Subject key identifier:   6E:47:1C:A9:21:AC:2D:48:80:2F:EF:A7:E6:10:C9:B7:80:A0:B4:B3
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F43285849ABB498852FA5B3EAF22119E0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1dddc1c-9b84-3914-861a-ce4ab64ece04.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     8070
IP address blocks:        2605:4300:3601::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:98:85:2f:a5:b3:ea:f2:21:19:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=71d53945-3970-4e9d-a83c-84f2032f1a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:26:10:8f:3d:47:c4:6f:d7:e8:29:14:18:
                    20:60:26:6a:35:3c:20:ee:08:21:ab:3e:38:3f:5b:
                    29:d4:af:20:ea:f9:7f:f1:9c:89:1a:36:79:a6:16:
                    80:d2:55:ba:b4:cf:38:61:43:3e:dd:a2:61:a2:c4:
                    d4:57:53:ae:84:79:25:9d:e7:db:e3:59:ab:e3:28:
                    ad:bc:48:27:31:fa:71:d0:33:49:c1:05:8b:fd:92:
                    29:99:2a:7b:0b:c6:43:1e:c9:ea:53:78:90:32:b0:
                    d0:57:f4:1a:c9:99:c5:09:c5:1c:c8:f7:09:37:f0:
                    a1:69:e0:c5:ff:dc:f0:62:5e:8f:a9:26:e0:88:4c:
                    2e:a0:fa:80:d6:62:bf:eb:80:fe:aa:79:9e:c6:bd:
                    ff:91:77:b1:05:99:74:d5:99:28:9d:a6:93:92:f2:
                    d3:4c:a0:11:f7:18:93:a6:d8:0c:12:00:1e:bd:ac:
                    43:5d:ea:2e:89:f6:3b:6a:ce:2b:ae:9a:37:bf:ca:
                    db:d7:84:5f:a8:f5:f5:f7:80:15:a1:35:62:6e:f1:
                    6e:8a:e2:e5:ca:11:ea:8d:de:29:37:a1:0d:50:8e:
                    0b:2e:e7:e2:41:9a:87:fd:98:dd:eb:63:5c:8a:11:
                    a1:e3:4a:e6:e0:b4:8b:e8:eb:ed:fa:d5:a6:7b:b2:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:47:1C:A9:21:AC:2D:48:80:2F:EF:A7:E6:10:C9:B7:80:A0:B4:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1dddc1c-9b84-3914-861a-ce4ab64ece04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3601::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:6f:1e:6c:91:c2:85:03:fa:ad:de:9e:19:5e:f6:40:16:db:
         96:ee:6f:74:05:1f:78:00:97:dc:3d:2e:b4:2e:5a:5a:74:61:
         e8:0f:50:b0:2e:29:a5:3a:25:8b:06:50:25:92:e0:06:e6:25:
         bd:ea:9f:09:02:3e:28:2a:1d:87:eb:da:76:28:d5:ff:64:fe:
         5c:17:ae:ed:18:46:b7:6d:e7:1d:d2:10:25:d1:56:74:0b:e8:
         89:b9:96:bb:b2:3e:86:42:e7:85:d8:ab:4b:d6:0b:5b:59:52:
         54:92:4c:14:d8:3d:6f:5f:48:e1:e8:b8:85:17:e1:4c:82:c5:
         86:45:21:13:af:40:08:84:cb:cc:c2:bc:0a:79:c0:99:04:39:
         27:15:3b:9f:3e:58:d4:1a:69:f1:b2:91:7f:12:63:fb:b9:9a:
         16:62:69:a6:49:02:41:1a:59:d6:f7:2e:73:6c:c4:85:8b:ce:
         d3:22:36:d6:9a:1d:00:b7:4e:7c:c5:ce:7a:03:92:4e:2e:d5:
         d9:ef:10:10:01:2f:69:35:ed:eb:80:1a:54:72:23:fd:bc:7f:
         11:dc:79:9d:67:e8:54:c0:f1:bb:64:01:cf:ae:c5:3b:10:ce:
         0d:5e:df:ec:78:e6:39:47:b6:4b:48:9b:6b:33:a9:13:87:1c:
         fd:65:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:12:03 2025 by rpki-client