Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/6f88b126-a16c-3df0-bdd4-74340943109e.roa
File:                     6f88b126-a16c-3df0-bdd4-74340943109e.roa (raw, json)
Hash identifier:          FAFqjhLIQe/o1g0mOF2aEKkt5qd7PmnP09zfYjaMJWI=
Subject key identifier:   54:89:6C:46:F4:FE:EB:29:9C:8A:12:91:FC:1D:7D:FA:3E:5B:5A:85
Certificate issuer:       /CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
Certificate serial:       010D0C9F43285849B149EE79D14C111412C40A20
Authority key identifier: 58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/6f88b126-a16c-3df0-bdd4-74340943109e.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     54657
IP address blocks:        2607:5340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:ee:79:d1:4c:11:14:12:c4:0a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=dfbcadde-2dd0-4b3a-8431-7f4d1aa560c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:74:cc:54:f4:9f:51:1d:a7:c7:b4:05:22:2e:
                    40:fd:cb:7c:3b:8d:81:6f:15:d7:ec:72:e2:f9:b7:
                    3a:82:bc:a4:73:3c:ef:0d:f9:89:7a:2f:45:dc:af:
                    5a:b5:ba:c1:52:12:57:c8:06:92:53:9b:da:30:09:
                    73:5e:ed:4a:f5:6e:99:73:c2:b6:cf:cd:8a:66:f4:
                    ef:0e:5f:b6:2a:28:59:59:41:f7:af:46:60:e8:3e:
                    9d:60:c2:27:dc:5a:f8:13:38:57:af:63:be:76:08:
                    3b:41:80:19:57:72:a9:5d:44:e4:5d:42:ed:d6:b6:
                    86:c5:4e:69:de:49:68:70:0b:23:30:49:11:60:4b:
                    f8:e8:66:18:63:60:e7:c0:f7:af:91:a4:61:84:e1:
                    13:a9:f6:21:33:c4:2b:d9:05:0b:42:77:97:15:95:
                    3d:2f:da:32:5d:0c:e5:f7:e1:b5:bf:75:2a:48:92:
                    bd:78:8f:a3:73:c0:14:40:24:e6:fe:91:8f:ae:d4:
                    c4:6b:bc:07:fb:0b:e4:a8:d0:78:73:b4:39:ea:8b:
                    c8:3f:b9:be:52:ca:ae:35:a7:c2:b3:94:5a:d8:c2:
                    23:e4:f0:57:1d:8d:dd:9f:05:94:01:67:69:ee:3a:
                    3a:d9:f3:bd:17:8c:03:21:6d:52:8a:42:18:aa:87:
                    39:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:89:6C:46:F4:FE:EB:29:9C:8A:12:91:FC:1D:7D:FA:3E:5B:5A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/6f88b126-a16c-3df0-bdd4-74340943109e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl

            X509v3 Authority Key Identifier:
                keyid:58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:69:76:f4:ea:2c:05:8f:25:bc:0b:a8:df:7d:ba:1d:e4:fb:
         27:63:23:f2:0f:e4:a3:71:c8:fa:34:c2:d7:da:40:f0:c9:0e:
         15:6c:58:60:43:00:20:cd:38:27:09:f8:e4:0b:7f:ea:bc:e8:
         cb:81:41:a3:1a:5b:a1:fd:e6:85:7d:e1:d8:05:ec:78:b6:c8:
         84:47:f8:65:ec:7f:43:05:aa:b0:09:c3:e9:70:f5:02:f7:02:
         7d:97:ba:ba:e9:e2:47:03:87:28:23:23:53:94:6c:f8:25:f7:
         b4:65:04:6e:4b:ed:fa:7f:4a:6f:67:10:58:ef:04:d7:3a:81:
         8d:28:36:48:6b:c8:13:df:85:79:b2:ac:86:38:04:c8:02:49:
         76:7e:ab:92:bf:79:7e:3d:dc:3e:74:23:35:a5:6f:01:9c:59:
         a7:55:a1:61:e0:db:cf:48:00:11:d7:b2:d1:e4:95:a1:00:d9:
         e6:36:70:bf:d1:51:d3:4f:92:f2:74:33:af:ca:8e:8f:e8:7d:
         66:28:8f:ac:f9:5c:2b:8f:57:7e:30:81:73:06:26:99:ff:89:
         68:fc:4f:09:34:7e:93:d7:c1:2f:0b:82:a9:42:eb:56:14:6a:
         a9:b3:b1:94:32:af:fc:f0:cc:79:fc:eb:74:a6:c0:46:10:9a:
         8e:4e:ae:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:57:58 2025 by rpki-client