Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/43c41054-7ae1-370f-91f9-46e26bed1b6b.roa
File:                     43c41054-7ae1-370f-91f9-46e26bed1b6b.roa (raw, json)
Hash identifier:          rZes/VnvvtmZzp0h/++mYa0CqzU8qWaTuwtKRjO86Fs=
Subject key identifier:   79:C7:29:63:DE:D5:B0:A9:BE:62:F2:94:3B:08:83:B1:DA:1F:2C:99
Certificate issuer:       /CN=a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0
Certificate serial:       010D0C9F43285849C0A4E510EA0C733CDECF7300
Authority key identifier: B3:3C:FA:77:C0:A6:7D:0A:F6:F9:19:8E:41:82:EE:A9:3B:6B:D2:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/43c41054-7ae1-370f-91f9-46e26bed1b6b.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     19171
IP address blocks:        2607:4100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e5:10:ea:0c:73:3c:de:cf:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=ea50ba16-fe95-427f-b490-f811f6a955cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:30:72:2a:0b:b2:ec:5f:78:2d:1a:1c:7d:74:
                    e0:fc:f6:61:57:1c:d4:5d:f0:1e:50:db:f0:ca:13:
                    22:e5:13:f2:9a:de:3b:5e:9b:a6:da:c8:d6:18:30:
                    af:a6:66:2c:71:b7:9f:cc:dd:9e:db:e7:0c:3e:29:
                    38:e1:4c:bb:6b:e2:9b:af:78:e0:a9:ee:54:b6:5b:
                    cb:09:12:4d:db:e2:59:c5:fc:35:38:72:8d:10:96:
                    6c:d7:eb:d0:28:32:cb:63:ff:95:86:77:91:1a:39:
                    8c:92:0f:d5:99:88:26:c0:84:61:9f:80:a4:91:52:
                    5a:f1:55:02:88:f6:69:41:9c:18:df:15:32:dd:77:
                    a6:2c:93:36:5d:dc:cf:ce:91:ec:2f:e0:63:47:73:
                    1f:af:e6:10:83:1d:e8:13:e1:a1:ca:10:2d:05:11:
                    b6:8c:56:73:9e:ba:e0:bc:6d:51:a7:a7:8d:de:a3:
                    07:3e:73:35:dd:42:ea:49:63:17:90:5d:51:fe:e6:
                    ab:8f:72:6f:39:e7:85:b8:64:49:f4:9e:3e:99:e1:
                    0a:9e:c3:c0:49:c4:7b:9b:18:c9:94:1d:7b:1e:8e:
                    fc:6c:fa:8e:ef:97:ab:e2:08:4a:bf:88:42:9f:53:
                    9c:07:01:d4:cd:90:5e:9f:66:95:ac:6a:26:44:ad:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C7:29:63:DE:D5:B0:A9:BE:62:F2:94:3B:08:83:B1:DA:1F:2C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/43c41054-7ae1-370f-91f9-46e26bed1b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.crl

            X509v3 Authority Key Identifier:
                keyid:B3:3C:FA:77:C0:A6:7D:0A:F6:F9:19:8E:41:82:EE:A9:3B:6B:D2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:64:dd:f4:ae:2c:2a:84:1a:c4:b3:77:d8:24:b1:05:98:e4:
         e5:0d:f5:f5:59:a1:a5:4f:e0:f6:31:83:e0:e1:a1:d2:de:e2:
         d4:44:d1:66:e2:df:88:ec:92:86:bf:7d:9b:59:78:7e:91:60:
         80:26:61:d6:c8:f8:46:80:46:2e:71:09:13:56:e8:1a:c9:05:
         a8:db:8a:b2:6c:ca:e6:e7:0b:dd:eb:d7:83:83:bd:39:8f:66:
         31:f6:f1:f6:31:4f:79:1e:05:37:8e:67:b9:54:a4:51:32:39:
         55:b4:1e:58:d2:c7:d5:56:fd:e3:1f:8a:05:6c:5f:73:1a:ae:
         f9:fe:02:bb:fc:46:e1:48:b6:e7:f8:c1:ea:79:5f:94:3a:88:
         1d:bb:ec:77:81:b9:38:41:8a:11:4a:76:3b:bd:a8:2c:7a:bd:
         3f:39:5c:da:91:b7:a1:7c:da:71:39:38:ce:18:b0:49:6c:8f:
         89:82:22:74:ed:8f:3a:d7:17:f1:5e:75:64:5b:ba:c9:17:a2:
         28:87:c9:bb:47:2f:c4:64:80:fc:0e:3b:09:5b:34:8b:fc:db:
         87:13:7e:2a:10:ef:ec:ec:47:b9:1f:d3:17:7d:20:5f:bb:fe:
         36:d4:9c:b8:65:d3:a0:44:46:f4:d3:18:80:b0:53:82:36:5e:
         0b:cf:1c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:45:17 2025 by rpki-client