Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa
File:                     6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa (raw, json)
Hash identifier:          9dTrSeA/TsyiVpxOhqmG/7RLSDoAD9M4bLc9XJCZqA8=
Subject key identifier:   2D:99:53:8B:AB:C4:24:27:F2:85:DF:84:80:9D:9C:54:BE:FB:BA:84
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285849AE7F39D150C89CC55E42E200
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        2607:fad8:1101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:39:d1:50:c8:9c:c5:5e:42:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=182acd0e-6c30-4e7d-9ef7-f74c860ca750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bd:87:2e:93:47:65:d0:d4:fc:f3:c4:3b:0f:
                    98:bb:76:4a:fb:d8:8a:51:dc:43:86:ed:02:1d:68:
                    f1:ab:b5:1e:99:e7:74:0a:39:dd:1c:95:a5:1b:79:
                    4b:2e:70:1f:0d:4b:92:b9:ec:43:a1:b7:11:55:19:
                    1e:f3:1f:2a:86:99:59:1a:c0:65:1d:23:cf:3e:31:
                    9b:01:27:2a:7f:92:b8:20:81:e3:bd:d7:30:f1:62:
                    56:87:d1:4b:33:27:26:6b:22:4f:09:5b:61:de:7b:
                    bd:f4:0f:e0:93:c8:86:c4:69:b5:52:01:12:d5:4a:
                    11:2e:fa:3a:3e:8c:8e:31:05:a1:3d:72:f6:e7:34:
                    31:58:20:4a:23:97:ea:c2:db:dc:26:a9:8c:80:a2:
                    05:28:47:e8:1d:73:b0:2c:26:19:7d:a9:af:2b:8b:
                    77:aa:8e:22:a2:2f:32:96:49:6f:0a:11:14:41:26:
                    9e:65:7e:74:7d:fb:4e:80:0f:97:da:3b:7e:36:e2:
                    1d:88:eb:47:30:97:f8:b1:4a:10:82:b7:f0:b0:e6:
                    c6:52:c7:06:66:41:bf:19:ac:cc:72:72:a8:c1:13:
                    fd:db:8d:ce:56:d8:9b:45:f4:79:50:c8:f2:4c:b4:
                    c8:81:06:6a:13:9a:2e:33:de:95:ae:7f:ae:c1:ec:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:99:53:8B:AB:C4:24:27:F2:85:DF:84:80:9D:9C:54:BE:FB:BA:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fad8:1101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:1f:ac:f6:ab:e4:43:e0:3e:66:fb:2c:4c:81:0e:ed:12:d0:
         4f:13:54:16:40:da:d7:cb:6f:16:bb:ed:18:c2:e4:23:a3:40:
         7f:c9:93:dd:be:63:56:01:e9:e2:b9:92:45:1d:e5:ad:2d:d3:
         21:ad:76:bc:11:14:05:a6:33:69:3f:a3:1e:53:35:87:1d:64:
         c9:f2:7e:94:df:cb:39:d0:7e:ce:2b:f3:56:21:3a:35:f5:c3:
         37:f4:0b:8a:63:3f:25:be:b4:79:16:29:86:9e:03:f2:93:b0:
         d5:fb:41:08:4c:4e:cc:2f:c3:af:2c:7a:17:67:41:b7:f7:95:
         9b:96:4e:a0:8d:ac:42:3c:47:b2:69:78:f3:0f:46:88:74:36:
         5e:0a:de:61:ac:09:cb:f3:2e:5e:7a:36:39:ab:26:1e:a2:ee:
         bd:1a:5a:54:24:ec:d7:c6:25:7e:21:c4:91:ec:53:bd:38:eb:
         88:79:04:02:f1:e2:47:e3:69:a0:84:8b:83:8a:48:de:fc:46:
         a2:11:66:0a:d3:d4:b7:77:66:c0:da:67:65:2d:b0:67:a8:b8:
         ba:2f:6e:24:0e:b6:b8:07:b1:7c:04:ed:86:90:54:57:aa:63:
         60:8d:9a:30:8e:40:1d:4c:8f:60:6e:16:93:bf:c1:a7:3f:43:
         3c:5d:e6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:01:42 2025 by rpki-client