Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/7b7de2eb-07d8-35b6-8995-070065110196.roa
File:                     7b7de2eb-07d8-35b6-8995-070065110196.roa (raw, json)
Hash identifier:          KKgaXaqDH1jhLJxy7BtXjr2ecw1qulHwQgB95smCSXE=
Subject key identifier:   DD:E4:8E:84:53:76:79:82:D0:AF:7D:FE:AF:07:DB:1F:3E:2B:DD:34
Certificate issuer:       /CN=f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b
Certificate serial:       010D0C9F43285849CE9A5954C64A4800BB477AC0
Authority key identifier: B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/7b7de2eb-07d8-35b6-8995-070065110196.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     393256
IP address blocks:        2606:fec0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:59:54:c6:4a:48:00:bb:47:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=03b92c42-8883-486e-8417-f4a01285015c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d4:e8:ef:70:dd:f7:6c:8d:9c:7e:1a:62:92:
                    3f:45:79:8b:7d:8a:9b:65:96:62:a9:dc:27:63:3e:
                    4d:74:f7:3b:4c:f7:ca:70:b7:cf:00:c1:36:4e:49:
                    cb:bd:54:c3:3c:45:e5:09:63:d4:98:2a:72:04:d3:
                    15:88:1d:b5:65:66:6a:c4:c1:36:a0:b7:1b:c0:1a:
                    3e:24:1d:58:4a:6b:8e:58:06:15:a3:ac:b9:a8:11:
                    69:61:c5:7f:99:4c:af:a8:2d:f4:a5:9a:6f:24:96:
                    53:25:bb:c5:c2:98:80:c0:d6:d5:a9:a7:f9:0d:68:
                    fe:d5:76:71:e3:68:5d:eb:84:2c:d8:22:da:82:3b:
                    f9:ca:d8:47:bf:58:69:af:b9:9c:3b:00:e0:80:07:
                    9a:05:6e:87:d3:f9:90:8b:50:0a:00:f7:8c:79:e6:
                    20:47:af:1a:e5:41:8c:f6:d2:a1:14:08:59:f2:97:
                    a5:f0:04:7c:ed:e1:f7:bb:79:f4:43:8b:fe:a8:56:
                    4e:64:65:39:cb:73:8d:2e:3a:89:56:2e:46:50:fe:
                    84:af:96:39:8a:41:bf:9b:0e:48:35:a4:ef:8e:d2:
                    c8:55:30:c6:05:24:f8:bf:e2:db:bd:f4:3e:2b:12:
                    62:84:35:c8:6a:43:f4:b0:a2:1f:1f:c8:ef:c1:d8:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E4:8E:84:53:76:79:82:D0:AF:7D:FE:AF:07:DB:1F:3E:2B:DD:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/7b7de2eb-07d8-35b6-8995-070065110196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.crl

            X509v3 Authority Key Identifier:
                keyid:B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:34:68:2b:2e:27:3c:83:6c:e7:4d:72:dd:d7:23:fd:a7:
         68:ec:c6:41:ad:f5:7c:e4:b8:07:b4:ce:ee:43:bc:a8:31:b1:
         25:a0:12:ec:bb:d4:da:50:ba:8d:c7:b1:34:0f:83:b0:3a:cc:
         74:10:57:8d:2c:cf:9d:ff:ac:36:2a:15:df:fc:cd:3b:4b:1c:
         00:96:b9:bc:4b:1b:cf:dd:14:c4:6a:13:86:9d:fd:78:0a:40:
         32:f0:18:67:39:11:cd:dc:75:9a:ad:ee:ac:43:32:c1:41:84:
         82:5e:82:f2:85:01:40:3d:3c:24:43:29:00:73:5e:e5:9d:0d:
         6a:c8:8c:2a:86:7b:fa:c2:c9:2b:45:12:6c:2c:6e:3e:4f:db:
         46:f5:df:fa:d9:39:5a:12:9e:91:2a:99:e0:f0:a1:86:87:5f:
         24:aa:8b:74:25:29:fd:09:42:3a:bb:67:b8:9a:82:9d:8f:7e:
         c0:a5:25:f6:df:63:dd:87:dd:7f:c4:56:30:f3:61:ce:be:58:
         01:b6:55:51:57:a4:d3:bb:33:44:75:5d:95:d5:af:40:d1:07:
         06:d0:1f:36:09:a1:80:09:7c:50:f7:1c:15:01:f9:65:ae:a0:
         83:0e:59:2f:bb:a8:b4:11:02:ac:b5:3e:41:06:4f:d5:8c:58:
         97:c2:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:23:31 2025 by rpki-client