Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ac816649-9299-3a2e-bc05-74848b509dd8.roa
File:                     ac816649-9299-3a2e-bc05-74848b509dd8.roa (raw, json)
Hash identifier:          vAHXKcNgTPOp4lyHo9IST759FwTsyWJ5s0c5icqf2nU=
Subject key identifier:   07:0B:63:55:87:EF:05:CB:4F:15:68:DD:0C:AF:2E:98:F1:57:60:40
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285849CBCFA2DEEC70AFB478183580
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ac816649-9299-3a2e-bc05-74848b509dd8.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     62240
IP address blocks:        2604:ea80:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a2:de:ec:70:af:b4:78:18:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=2b0e2a57-0cec-449d-b9b9-b796e4cac391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:67:98:3d:b7:31:9e:32:b2:0e:2c:79:9f:27:
                    1d:04:57:e0:df:82:d1:7d:63:aa:75:e3:c6:bf:03:
                    01:3d:f0:ec:cf:4f:9b:14:ce:dc:91:ac:bb:a7:03:
                    60:43:ab:df:41:88:0c:00:2b:6c:3b:f1:a8:78:4f:
                    2a:70:5b:12:97:c7:e0:6a:ba:01:cf:b8:e1:c2:a7:
                    8e:90:ef:b9:c8:0e:24:e2:54:31:9f:17:44:08:ec:
                    29:fa:f5:87:7d:8b:2d:3a:c9:a3:0a:74:cb:cc:ba:
                    d6:c3:01:4e:22:8e:81:fc:45:14:39:a6:12:92:30:
                    73:26:28:94:3a:37:f1:00:67:ad:dd:15:24:04:24:
                    24:74:4c:e4:0a:58:63:81:f4:ed:3b:7e:0c:38:1b:
                    94:8b:6e:0f:d7:0c:05:6f:54:c0:35:4a:86:b1:61:
                    b1:1d:91:0a:2f:2e:dd:97:26:ed:3f:4b:4e:1f:e0:
                    11:a5:d8:04:8b:e9:ef:fd:d2:4c:ee:61:32:b8:9e:
                    b1:52:fc:6a:21:de:13:4a:04:2c:34:28:7b:df:5f:
                    6b:1a:ff:33:ab:aa:16:46:42:b0:0a:b4:b5:e9:4b:
                    c1:5e:b8:67:5f:a8:f5:4e:4f:02:ee:c1:b0:8e:0f:
                    f1:ce:fd:8e:b3:94:6f:b3:59:eb:5e:00:0e:ee:0a:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0B:63:55:87:EF:05:CB:4F:15:68:DD:0C:AF:2E:98:F1:57:60:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ac816649-9299-3a2e-bc05-74848b509dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ea80:1400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:12:2d:a5:ba:cf:5a:17:58:fd:e0:da:c5:20:ea:b8:86:3f:
         d4:ce:5b:e8:18:3a:0b:b9:b3:dc:c0:72:6f:44:3b:e7:09:50:
         08:05:b9:a9:ca:5b:98:93:94:e8:8c:d6:23:cd:a5:22:91:c4:
         b4:d2:da:1d:04:3d:5a:b9:76:46:95:27:74:f0:0b:56:7d:38:
         28:5e:9f:f3:b9:8e:20:1d:a3:77:2e:1a:79:e6:60:0e:d1:1a:
         24:53:b5:7c:ae:06:56:97:ce:b4:89:bb:e7:b2:e2:1d:99:7d:
         40:fa:70:9c:a9:8b:56:f2:f8:d1:3b:ac:87:13:a7:1a:40:79:
         4f:10:45:40:e3:38:11:f5:6d:79:e4:05:d6:5d:2c:82:9e:e4:
         a7:6e:a6:27:78:fa:56:5d:3f:40:38:3f:4e:d1:09:4b:08:b0:
         cc:50:08:0c:cf:5f:08:65:fe:cc:ae:e6:37:35:b9:59:6c:39:
         a5:4b:a5:a5:c0:7c:c3:3d:76:c3:cd:26:31:38:e2:be:f1:85:
         ff:dd:4a:38:b3:bc:54:cf:23:a5:bb:2c:ee:ea:30:dc:34:ba:
         b7:ba:40:bb:c0:88:f4:24:d1:10:6b:04:4c:77:02:37:b7:49:
         5b:17:91:8a:01:c2:ec:3b:2b:99:9f:69:ef:4d:26:16:2f:7f:
         4d:1d:36:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:09:16 2025 by rpki-client