Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa
File:                     13aa41a2-005a-35be-8760-54a1b0f5df39.roa (raw, json)
Hash identifier:          u1QyuaSq1RQJ1mGs/5hlx7iw42VL0jYEKhoG1/u/6Qw=
Subject key identifier:   13:C8:73:56:80:20:0F:66:71:BA:37:27:DE:81:68:1D:98:79:75:8B
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F43285849CBCF9F4C5E439FF8B7C5D670
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     63023
IP address blocks:        2607:a140:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:9f:4c:5e:43:9f:f8:b7:c5:d6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=cd6c866e-4a29-4f48-be45-9698c92efe82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:88:18:43:af:65:5e:de:46:87:8d:26:1a:3d:
                    71:fd:bd:7e:6f:57:c9:04:d3:bb:2e:90:9e:7d:5a:
                    ab:0d:57:aa:59:ad:91:66:5e:b5:63:1f:e8:96:d4:
                    6e:c6:d9:af:d5:ff:b6:1c:90:b2:64:85:2b:80:ac:
                    b9:5a:af:ac:d0:7a:9b:61:9e:74:5a:69:4d:e6:33:
                    e2:e7:0b:6a:74:e7:51:67:5d:d3:a8:39:64:2f:e2:
                    3c:3e:f8:2c:f0:95:51:4b:42:08:cb:6e:cf:cb:83:
                    da:54:3e:94:2a:b0:34:47:60:aa:af:00:3a:b5:38:
                    e4:8b:84:ef:f1:af:18:d6:8e:35:c8:ff:bc:64:ea:
                    21:56:f9:e4:16:d2:c7:58:30:6d:45:ac:b0:17:48:
                    af:c9:ef:f1:75:04:8e:6a:61:57:da:58:21:54:6a:
                    bc:ab:b2:16:7b:2a:98:a4:a9:f3:ec:19:d0:39:cb:
                    f1:a3:b4:bc:5c:e4:8c:80:23:4a:08:1b:60:e2:ba:
                    81:f6:aa:75:ea:c5:55:a3:d1:91:d3:fa:4f:3b:e1:
                    93:2e:96:d5:49:32:22:83:c4:5a:08:21:ee:cf:c7:
                    7b:bd:35:b1:41:52:23:c7:ca:f3:cd:6e:82:20:90:
                    3f:eb:40:a9:16:97:0a:44:aa:a4:60:f3:69:9a:3c:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C8:73:56:80:20:0F:66:71:BA:37:27:DE:81:68:1D:98:79:75:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:5a:16:f4:69:70:64:b3:b1:88:9a:c1:1c:54:fe:95:6b:8b:
         a8:17:63:56:dc:17:23:7e:bf:dc:b1:11:68:22:ef:c8:c6:92:
         60:5d:21:10:3d:dd:8a:af:82:81:3c:be:99:1f:6d:12:84:c9:
         52:75:30:37:54:86:11:a8:b9:6d:3c:34:09:08:e6:d9:06:82:
         d1:fd:18:60:e8:78:d6:8f:11:a6:14:3b:11:5d:df:71:ab:34:
         b2:cd:36:9f:37:06:c0:d3:02:e4:49:64:84:78:70:f9:90:ab:
         d0:db:4d:a2:f7:f6:0d:2c:e3:72:1a:ea:2f:a7:a4:99:99:da:
         c2:6b:e2:fa:0a:9f:50:bf:06:b0:7e:83:11:93:27:10:64:66:
         c6:3c:1e:40:54:79:1a:b0:9a:31:f2:7f:06:34:aa:41:b6:16:
         ad:27:36:b1:a8:ce:77:3a:8a:eb:9c:36:b7:88:e1:4a:49:a8:
         a1:ae:79:76:f4:0e:8b:14:40:9d:43:34:9f:b0:e1:8c:61:9d:
         02:9d:a9:1d:6f:ce:ef:a0:b8:c3:43:22:d1:05:ab:c9:3c:81:
         7e:0f:ad:36:2d:1d:33:f0:82:53:a1:f9:27:7c:52:3f:8d:40:
         8c:af:3e:e7:a3:2d:36:14:bb:c7:d4:8a:ea:57:29:ed:55:58:
         62:f8:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:48:34 2025 by rpki-client