Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/27366f43-e058-35c9-a01f-c58148ae8cf2.roa
File:                     27366f43-e058-35c9-a01f-c58148ae8cf2.roa (raw, json)
Hash identifier:          ANfQ0Gv7A7EEx76KYR/fJbi/RaYUOhzgpHT/0ckgLCE=
Subject key identifier:   2A:7D:A4:5D:27:87:33:9D:52:C0:81:22:6C:D2:78:A8:D0:9C:EE:B0
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F43285849ABB48E023B6DDDD3C4887800
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/27366f43-e058-35c9-a01f-c58148ae8cf2.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     400087
IP address blocks:        2606:7fc0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:8e:02:3b:6d:dd:d3:c4:88:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=4d66aa93-21ad-4068-afab-98d154c985e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:54:06:21:11:7a:99:e6:e9:50:23:83:ee:1c:
                    d2:98:82:c3:c5:e9:ff:ba:74:62:5e:1e:10:b2:81:
                    1c:3d:f9:bc:1b:1a:39:74:e8:68:7a:cb:e7:1f:1d:
                    d5:63:30:92:ee:55:a8:75:8a:65:44:68:1b:d2:30:
                    48:2e:cd:d7:e8:a7:f4:c2:d3:47:56:39:71:55:f1:
                    f6:6e:3b:53:b8:6c:f3:cd:e0:ed:d0:9b:16:c6:a7:
                    6c:68:5e:79:6a:61:f0:91:cd:29:8f:ec:8b:1a:69:
                    2e:18:f1:c8:1d:09:bf:2b:ce:0e:2f:7c:87:d9:7d:
                    15:64:11:a3:df:d4:95:a9:11:ff:60:92:5f:26:8a:
                    78:9c:4d:a0:95:f3:65:ec:f3:76:be:07:75:f7:b3:
                    28:24:8c:9f:47:2e:56:98:6f:f2:a4:11:d5:4f:bb:
                    54:b6:b3:06:26:ea:ae:1d:d4:fc:88:dc:41:cc:d2:
                    36:b6:a4:b4:da:0f:59:fe:2b:87:8b:64:f6:98:36:
                    72:6d:e2:0d:28:37:2c:06:24:f8:29:06:03:bd:ff:
                    08:69:be:af:d8:32:70:89:53:5c:1b:b1:12:8d:cc:
                    6a:53:90:28:52:21:79:2c:8a:15:df:b3:b1:32:2d:
                    2c:76:9d:2c:6f:ae:38:f3:90:cd:b1:60:83:de:09:
                    9d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7D:A4:5D:27:87:33:9D:52:C0:81:22:6C:D2:78:A8:D0:9C:EE:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/27366f43-e058-35c9-a01f-c58148ae8cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7fc0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:ad:32:d0:03:a8:53:03:a3:fb:59:87:79:47:0f:65:4c:
         29:66:8a:9f:d1:86:2b:1d:cd:b7:b6:8d:2a:15:16:1c:fd:8c:
         85:bd:6d:92:75:28:5f:f8:eb:0a:9e:9f:2b:f9:7e:38:62:59:
         71:f7:db:e5:0b:10:5a:0f:28:1f:2c:a4:10:e4:15:64:75:b0:
         9f:68:f3:8c:8e:9e:ca:af:24:42:de:f5:60:70:61:24:07:2c:
         04:24:bb:21:7f:cc:24:0b:f1:6b:f0:2d:51:2b:54:59:b7:11:
         bf:88:e4:8d:39:81:f3:ee:5b:07:c5:3a:3b:df:dc:12:65:c3:
         e3:69:ba:0a:1a:8d:01:f5:dc:a5:9c:e6:b8:cb:a7:74:5f:6c:
         7e:c0:81:04:fa:49:50:c0:c6:d9:d2:50:0e:b3:8f:24:99:d9:
         66:cf:dc:5b:d1:ca:89:7c:46:f0:bb:9a:b4:73:26:c7:4f:13:
         a3:25:70:4c:db:6d:cb:50:fe:54:c3:3b:8d:87:e9:81:c7:bd:
         6d:7f:4f:cf:97:67:21:8a:36:35:2c:81:b5:1a:57:bd:72:55:
         e3:3a:37:bc:6c:87:a7:da:fb:6e:6d:bc:fc:af:03:c8:14:a0:
         59:1e:61:c2:ce:43:88:21:ff:1a:dd:73:4d:47:4b:0d:22:f0:
         9f:2e:bb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:20:25 2025 by rpki-client