Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa
File:                     4a42fb5f-b644-37be-b039-55b5dbcabadb.roa (raw, json)
Hash identifier:          BbzvdMVEnaFCMGrAX0vySLuqiDBmglH5JNtnMREhuM8=
Subject key identifier:   1A:D3:09:95:1B:0A:2A:EF:90:2A:F5:5B:BB:33:F2:62:6C:8E:80:C1
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F432858498FC9C07932F8EF5DA8F94680
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     2648
IP address blocks:        2610:20:6b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:c0:79:32:f8:ef:5d:a8:f9:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=d473b3b4-4da7-4ab8-afc8-9ee0a86c6b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:11:d2:b6:72:29:c6:e3:4a:4e:b8:2b:87:63:
                    40:86:75:f5:aa:b1:73:58:17:b6:04:a3:a4:49:f0:
                    8c:b3:f5:73:8a:4f:c4:b9:b3:a5:da:a9:3e:03:17:
                    ed:21:6a:49:90:a2:2b:af:32:b7:48:c7:65:6b:5a:
                    91:3d:fa:54:4d:f1:88:f6:bc:78:3d:d6:87:72:ab:
                    c6:fc:3a:68:01:fc:4a:5e:11:37:9c:11:d3:dc:c4:
                    d5:7d:71:75:01:9b:c6:74:dc:d1:f2:02:9b:bc:52:
                    9a:5d:6b:d7:af:2f:5a:42:83:79:29:7b:76:64:e4:
                    0f:26:a6:bb:e0:42:72:a9:65:97:cf:f8:2d:0c:ed:
                    85:a4:9d:9b:a5:c6:42:77:a2:cf:43:30:5e:c4:c6:
                    3f:27:49:ae:7b:f6:3a:e7:54:7c:a3:c5:07:08:28:
                    0a:c0:66:26:6d:6e:9b:b8:3a:2d:18:df:99:2d:87:
                    13:de:9e:20:37:b5:85:0e:92:22:06:d8:c3:0f:77:
                    a5:cf:1b:03:fb:57:c4:e0:59:13:83:c5:98:f2:94:
                    aa:1a:16:44:9f:af:7d:29:c5:ae:e3:82:d2:3d:e5:
                    af:81:bc:a7:27:d3:1e:0e:ca:3c:d2:ca:48:6b:b5:
                    65:69:6d:55:50:51:2e:2d:78:c1:12:d3:57:3f:29:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D3:09:95:1B:0A:2A:EF:90:2A:F5:5B:BB:33:F2:62:6C:8E:80:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4a42fb5f-b644-37be-b039-55b5dbcabadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a9:bc:9a:26:ff:01:bd:4b:f4:49:03:97:1f:6c:99:e0:05:
         8b:60:1a:aa:6a:0b:2b:13:f5:59:cd:50:10:76:56:d6:ea:a5:
         8a:ac:d2:f3:9c:db:f6:fc:96:fd:92:a6:9d:5b:b8:62:2b:09:
         5f:fb:ef:07:e0:69:ec:72:f3:bb:61:f1:52:81:8b:db:90:37:
         cc:12:2b:a4:97:77:ad:65:ff:10:00:40:06:93:80:f0:2e:fc:
         b7:5c:d6:ce:8e:ab:fc:25:9f:db:5d:d6:ba:00:c9:1d:2a:9d:
         c5:81:1d:2e:48:d2:4e:58:0e:d5:48:81:e0:6c:46:6c:6a:9d:
         9c:8b:d3:ee:68:7a:12:30:0e:cd:7b:10:ef:ca:b1:e1:43:02:
         1e:55:fa:46:13:bd:60:ee:83:5b:ef:f6:e1:ab:13:d1:77:8b:
         58:1c:13:09:2a:5f:33:6e:0c:31:ad:80:4f:c9:76:dc:df:c6:
         1d:24:ab:b6:46:60:0c:68:15:1d:6b:25:84:c7:5d:f9:c4:7a:
         90:29:b4:99:db:a1:2b:64:f0:ae:29:bd:ed:47:81:d3:d7:8f:
         27:2e:60:4d:46:29:44:87:19:e4:60:21:75:88:fb:a9:5d:4d:
         80:a6:05:08:a1:5e:b1:83:c7:6c:89:b7:91:da:60:9c:e6:08:
         46:b4:4a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:31:01 2025 by rpki-client