Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/07d349c9-b96a-3b4c-8bff-bae6b7e6d882.roa
File:                     07d349c9-b96a-3b4c-8bff-bae6b7e6d882.roa (raw, json)
Hash identifier:          PiHkq8pmWhh0U9UUV8SPEVTtS5JHecMWxpklL6Ud4Oo=
Subject key identifier:   08:D3:B3:25:03:2A:5D:49:CC:50:36:2A:3D:A2:B6:BF:6C:54:37:8B
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F43285849B14A0A82B92B8387C732EF00
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/07d349c9-b96a-3b4c-8bff-bae6b7e6d882.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        2606:3dc0:80::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:0a:82:b9:2b:83:87:c7:32:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=f9d3b160-7d6c-4d63-bf6b-a4bf1dec6239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:61:65:8b:04:d9:b5:5a:c6:64:23:a1:0b:82:
                    10:b4:2c:6c:94:92:2d:e4:27:47:3e:79:58:8f:50:
                    ca:5d:e7:91:b4:16:00:74:ad:02:30:a6:42:3e:a3:
                    0f:af:ce:44:35:21:9b:99:88:43:9a:92:36:74:73:
                    41:f9:de:c8:ef:04:73:18:8a:8f:54:36:60:89:8b:
                    f5:9c:a9:3d:c7:3e:2d:52:41:cd:62:fa:3d:b4:74:
                    c7:4c:2e:46:c4:01:8b:9d:93:8c:67:6d:7a:58:38:
                    6f:5d:84:be:3f:b4:95:a2:b2:4a:38:29:e5:34:ce:
                    b8:ec:59:41:28:49:b5:a1:ec:21:6c:73:0a:98:e8:
                    e6:37:8c:95:98:36:9c:a5:bb:fe:66:af:67:1e:03:
                    65:5e:c9:c9:39:07:64:90:0b:e4:e3:a2:40:48:52:
                    35:94:f5:9c:7c:29:d9:69:14:d1:0e:32:9f:2c:72:
                    9e:d3:3c:cc:5d:58:05:e1:2e:63:28:eb:0c:40:fa:
                    a0:b5:6c:25:6c:75:b3:6c:10:dd:9c:0e:de:02:f9:
                    80:17:f5:7e:50:4e:e5:25:fd:71:69:7e:52:ff:55:
                    62:93:a9:fb:4c:c8:56:86:40:a7:cf:d2:f3:a7:8b:
                    7e:65:70:fb:76:b7:4a:f2:0b:23:32:b4:22:eb:77:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D3:B3:25:03:2A:5D:49:CC:50:36:2A:3D:A2:B6:BF:6C:54:37:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/07d349c9-b96a-3b4c-8bff-bae6b7e6d882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3dc0:80::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:5b:48:d8:a8:90:27:c0:90:f3:36:9d:74:bc:43:6e:1d:
         65:dd:f6:b1:a6:68:ff:cb:d9:21:1d:72:06:bd:5a:ca:e2:27:
         80:08:0d:39:32:2b:fe:81:90:ea:1f:4b:4f:d5:7d:b9:b0:6e:
         12:14:5c:5a:5c:17:e0:c3:b4:ce:9c:54:d5:58:25:07:e3:d3:
         8c:43:63:78:d0:a6:89:db:3c:b9:97:d2:a7:6e:a5:9c:15:9b:
         52:50:63:a9:4d:8b:6d:27:a3:eb:9e:ca:76:d3:18:e8:93:ad:
         21:2a:9f:4a:d5:5b:76:98:93:c4:d1:52:26:fe:7a:3b:64:4a:
         10:cf:03:23:7e:b6:47:bc:cf:69:50:d6:ab:d7:1c:47:56:e6:
         fa:e4:fc:25:5a:86:cf:93:1a:13:0f:8a:d5:19:8c:90:d4:95:
         1d:8c:a6:49:aa:94:20:cc:be:9f:4e:0a:45:cc:2c:34:22:6a:
         47:ca:db:1c:d8:51:0d:0c:e4:10:b8:6a:bd:27:e7:83:d8:20:
         5f:1c:90:bf:7e:83:7a:22:a0:9b:07:a6:65:b0:f0:b0:af:03:
         ed:a1:f6:3e:32:d6:c3:cb:2b:0d:0c:18:28:f5:ec:c4:97:51:
         84:e2:31:30:06:b2:66:f4:2c:8f:2a:40:98:ac:a7:29:1a:92:
         75:64:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:52:08 2025 by rpki-client