Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa
File:                     1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa (raw, json)
Hash identifier:          C/4e3EauDThVBqHRJQqqSpvpfwe/BHzhwRlz0hp3ewI=
Subject key identifier:   D4:98:7F:E6:02:E6:55:3F:7D:68:FA:6E:DF:C6:87:72:BB:96:56:32
Certificate issuer:       /CN=6459964e-cb44-4be5-88da-03fac554e95c
Certificate serial:       010D0C9F43285849912F2F7FA951DD470799C440
Authority key identifier: 2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     32771
IP address blocks:        2620:111:8001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:2f:7f:a9:51:dd:47:07:99:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6459964e-cb44-4be5-88da-03fac554e95c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=d132a7f1-57b4-4a3e-bd38-693c69738379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6c:87:6e:41:63:1e:c5:11:e5:87:c1:ba:88:
                    52:3d:41:be:8b:46:4c:f2:6c:22:d0:2c:20:15:da:
                    00:b4:8a:11:dd:e7:48:b3:87:6d:10:ac:21:d9:b7:
                    5d:2e:41:c4:82:42:f3:87:7b:f2:a7:9f:09:3d:4b:
                    02:dc:3f:c0:77:16:72:2d:d5:9c:db:3c:ee:1d:0c:
                    ad:c5:18:61:59:e7:83:6c:82:93:f8:81:4d:8d:98:
                    41:ff:6a:85:af:60:d5:11:5b:ce:ef:f3:e7:6a:2c:
                    8b:db:35:fe:54:27:0b:92:3e:d2:25:01:89:af:26:
                    15:fd:e6:fc:ce:f7:68:7a:c4:f1:5f:3e:d0:ca:56:
                    e4:1b:3d:cc:06:d0:fd:fe:a1:b0:f6:27:17:23:81:
                    c5:b6:a1:2c:4c:59:18:2a:4d:d9:5f:90:13:85:d1:
                    8f:b3:4a:1e:b9:c0:bd:e1:b0:ca:d9:9a:b3:f0:30:
                    4b:87:20:98:b5:73:65:a6:d8:3a:91:a2:9e:21:08:
                    46:55:7e:37:aa:db:99:9f:34:1f:5f:95:87:12:bf:
                    3e:32:23:55:a2:02:a8:fc:c3:a5:14:13:56:1d:71:
                    a7:9e:a2:81:92:0a:33:4c:68:d2:50:88:2d:93:a9:
                    ae:43:a3:07:d4:3a:16:6b:88:d1:cb:68:9a:07:15:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:98:7F:E6:02:E6:55:3F:7D:68:FA:6E:DF:C6:87:72:BB:96:56:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/1b4e8652-7780-3c6b-82f1-b6213a7c69ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c/6459964e-cb44-4be5-88da-03fac554e95c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:DE:EC:A4:72:AC:F1:D7:85:7E:C5:46:E2:2F:35:74:98:FA:0A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6459964e-cb44-4be5-88da-03fac554e95c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:111:8001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ec:c2:c3:4d:72:75:df:75:00:10:2c:bc:f8:f8:a6:3e:90:
         2c:b3:98:52:ae:4d:16:0f:1d:7e:5e:98:12:6a:3b:3e:ed:df:
         a4:11:bb:d1:ee:79:ef:48:82:8e:82:6d:30:63:de:9b:cb:ef:
         35:89:0f:93:86:9e:37:0a:89:a9:8f:8b:88:41:fd:c3:dc:96:
         66:39:b4:e2:77:76:39:53:d6:f0:29:b0:bc:6d:36:8d:8f:f9:
         63:2b:34:93:af:6e:99:48:89:15:d0:73:c9:7d:c5:6e:2e:cc:
         d5:11:bb:a2:b3:17:3a:b4:84:10:d7:d6:8a:58:65:ec:84:68:
         57:51:f7:7d:b1:89:41:89:9a:ad:82:fc:6c:55:a0:b3:ee:8b:
         60:40:24:87:c8:c2:5b:de:1e:bd:41:92:34:a7:98:34:a2:75:
         a4:ea:3c:ca:34:e0:b3:65:10:a7:da:e0:56:ef:5b:1b:58:bb:
         57:22:9e:1c:36:88:e6:1b:48:fa:39:64:50:50:de:18:cf:08:
         48:24:08:c3:ec:02:7d:db:6e:54:03:e4:2b:68:1a:4e:31:d0:
         0b:d6:f9:18:21:73:f1:6c:39:28:c4:ee:6d:4d:9c:fc:68:df:
         00:e7:39:fc:f8:d5:60:90:74:40:1a:a5:24:dd:75:59:3f:08:
         43:7e:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:24:43 2025 by rpki-client