Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/22155043-6f19-3c19-b951-75ed01fc47ae.roa
File:                     22155043-6f19-3c19-b951-75ed01fc47ae.roa (raw, json)
Hash identifier:          GGkpPAKltsV45KkhDgFYPaiIRTG8cM/flTKCFMBPK2s=
Subject key identifier:   3F:E3:BE:F6:47:09:30:B0:36:20:7E:3C:05:64:6F:A5:5C:30:DA:6B
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584973DEEC80B36DE72A74C1A500
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/22155043-6f19-3c19-b951-75ed01fc47ae.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:ec:80:b3:6d:e7:2a:74:c1:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=ca51b473-ba72-4cdb-bb6e-a8eb930296cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:09:bf:08:df:11:dd:f3:9d:df:18:10:6e:a6:
                    3f:da:f9:40:7d:cc:c4:d4:75:55:42:37:73:81:f4:
                    5b:3d:1c:85:24:ec:ec:13:14:5d:2c:5d:6d:66:8d:
                    7a:c3:af:27:f9:7d:f5:59:a5:47:7e:60:c8:3c:11:
                    7e:99:1f:ae:7d:8e:a3:39:77:92:98:7b:ef:11:bd:
                    89:77:9d:44:cb:bc:03:f7:5e:52:99:dd:ed:f7:1a:
                    44:2c:54:6c:28:40:05:04:4f:c3:60:9d:4c:d8:34:
                    96:c5:a7:e4:62:1d:05:db:c6:5e:4d:65:fa:96:05:
                    b1:f5:33:a9:99:4c:47:ec:bb:33:dc:e4:88:a2:96:
                    ff:cd:60:b6:63:44:9d:25:4d:fc:05:11:23:0c:e6:
                    b9:8d:f4:36:84:71:a2:d6:d6:45:df:27:70:d3:c4:
                    a4:06:2c:bf:83:34:bd:61:17:98:d6:ac:63:cd:e5:
                    fc:03:0a:f6:21:ea:12:97:30:0a:ff:d4:f7:29:63:
                    c1:60:64:be:b0:42:28:b2:29:fb:47:65:8c:32:91:
                    75:33:ff:10:c8:96:47:af:6c:42:76:bb:72:f5:14:
                    29:80:fa:28:bf:d1:b1:94:51:63:9b:b6:3b:bd:99:
                    6b:40:31:33:4a:7a:ea:97:50:50:fa:2b:ef:53:0f:
                    c4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E3:BE:F6:47:09:30:B0:36:20:7E:3C:05:64:6F:A5:5C:30:DA:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/22155043-6f19-3c19-b951-75ed01fc47ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:de:a6:7f:a4:df:a4:9e:2b:4a:b5:94:f2:5f:65:b5:ac:4e:
         42:cd:d9:6c:3b:2a:ce:27:c0:20:af:fa:59:a9:17:2d:79:03:
         1d:36:d0:17:cd:7c:c3:7c:df:8c:30:dd:25:59:f3:60:62:df:
         a4:94:9b:11:8b:79:3e:2e:9b:d4:21:fa:64:95:c4:ee:3d:ef:
         b2:0c:0d:24:da:27:64:8c:8f:b9:5e:60:37:56:a0:87:3b:9d:
         8f:03:b7:12:2d:20:33:6c:00:b7:49:af:23:d3:79:08:80:f0:
         ef:6e:ed:f3:8a:75:f3:93:64:c7:dd:72:18:d4:64:0f:28:b8:
         0d:5e:fb:98:05:95:f9:9f:d6:87:a1:9b:8a:d8:5f:54:4d:43:
         b1:2f:ad:a3:f5:8a:18:06:8a:f7:20:9b:bf:2a:d7:0c:93:aa:
         2d:90:db:f3:c7:3b:3e:e9:8f:4c:24:fa:3c:0f:b6:f2:b6:9c:
         a2:56:ec:cb:c8:1d:83:d7:96:34:b0:3b:48:04:35:e8:52:56:
         19:15:9d:3d:81:16:ae:8b:9c:3c:4e:46:f9:1a:89:33:5c:79:
         1e:bb:68:2d:72:4d:46:0c:0c:6b:ea:0a:5a:4a:f6:bd:88:c8:
         4e:d6:2d:d8:c8:92:6c:b4:5e:18:50:90:af:3e:1e:bd:cc:30:
         9f:bb:4e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:47:22 2025 by rpki-client