Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa
File:                     1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa (raw, json)
Hash identifier:          dHsRQUFn7ThiwrCswZPlmDckkRRbRwWn7vd4hi2H34Y=
Subject key identifier:   33:C6:9D:33:1E:D9:41:34:3D:01:56:F1:60:77:1F:0B:40:62:EF:A6
Certificate issuer:       /CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
Certificate serial:       010D0C9F43285849BC74B1869E8ECB8472A5FE40
Authority key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     12233
IP address blocks:        2604:6040:a20::/48 maxlen: 56
                          2604:6040:a25::/48 maxlen: 56
                          2604:6040:a27::/48 maxlen: 56
                          2604:6040:a70::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:b1:86:9e:8e:cb:84:72:a5:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=d7619c14-e954-44c1-993d-3a45c08dbcc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:97:27:9c:a9:fb:97:c0:40:2c:88:6e:16:
                    00:c3:4d:6f:d1:1c:e6:c6:f7:cc:31:2f:81:4d:90:
                    b7:73:cf:16:01:d6:f8:b5:0a:29:ba:8a:d2:03:ba:
                    0b:de:4d:dd:49:32:a0:e5:bf:3e:80:17:13:b9:e6:
                    9f:d2:06:ae:1b:cc:5a:01:e7:fc:c3:4c:e7:1a:60:
                    61:12:05:80:8d:59:d2:42:74:9e:1f:67:46:61:5d:
                    6a:e2:36:0d:18:7a:e3:0e:70:64:8c:7d:cf:91:5f:
                    06:6c:4f:ec:6f:57:db:43:15:ec:00:d2:94:35:3a:
                    ef:4f:17:b5:7b:55:90:2d:fa:df:7a:03:77:62:c6:
                    8b:0a:e7:cc:a0:1a:aa:8c:19:23:10:b2:72:88:9d:
                    56:5a:f7:54:19:19:45:0a:10:57:a5:e8:16:6a:ae:
                    2a:62:81:67:8a:07:2b:42:94:c6:57:d6:b5:c1:b3:
                    6e:c8:d1:cc:d5:d3:8a:6d:a6:1e:04:83:d7:8a:03:
                    e4:ec:c5:09:53:6b:39:f7:cc:36:f5:e0:ef:7d:f3:
                    06:67:e0:5f:2f:d0:a4:ce:e3:d6:cd:85:d5:15:86:
                    21:77:e2:29:26:64:82:ba:f1:3b:19:ec:53:74:e6:
                    b7:48:6c:06:51:3f:a4:f3:45:2c:cb:70:a1:5b:77:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C6:9D:33:1E:D9:41:34:3D:01:56:F1:60:77:1F:0B:40:62:EF:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/1c56b26d-d483-34c7-95b0-f12c1e3289f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl

            X509v3 Authority Key Identifier:
                keyid:7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:6040:a20::/48
                  2604:6040:a25::/48
                  2604:6040:a27::/48
                  2604:6040:a70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:17:4e:58:d3:ce:2a:43:05:1d:c4:e7:57:f4:df:9b:8a:e4:
         8b:b7:fe:b1:c6:09:aa:2c:56:3c:a4:b2:50:65:41:39:08:35:
         0c:6c:a0:37:a2:a0:26:f1:96:3b:85:f5:48:e5:23:ec:a3:46:
         d5:a2:ee:11:75:69:e3:b6:8c:b2:8c:28:61:dc:a1:90:cf:1a:
         45:a1:5a:1e:70:3a:5a:20:e5:7d:61:15:69:fe:70:ac:dc:1b:
         6d:d4:e3:d4:df:d4:03:71:75:a7:5e:13:a5:33:e1:18:b0:d9:
         aa:9c:2f:cc:76:17:1d:af:8a:3c:e8:f3:a7:4d:10:b3:c8:d7:
         b4:04:c1:80:bd:85:59:34:ed:83:71:07:ca:ce:f9:31:b6:d4:
         da:c5:57:78:b5:b8:f4:35:45:d9:94:cc:b9:f4:e0:19:94:d1:
         b8:84:f9:18:0e:4d:9a:ee:a2:3a:ac:4b:1e:c8:c4:d6:d3:4f:
         0e:f5:0c:46:31:1c:d7:0c:81:d3:63:e6:8e:e7:41:50:38:38:
         06:06:28:21:d1:1d:bf:0c:e3:52:1b:95:b7:7a:96:6e:79:0c:
         89:22:83:27:93:d5:12:63:d8:48:9d:b6:0e:e1:12:40:2a:50:
         f6:34:98:05:af:b8:d9:9a:1b:98:b5:72:28:be:70:82:ad:59:
         7a:ad:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:14:49 2025 by rpki-client