Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/764cc973-e916-3365-bf3b-83c0ba27ed04.roa
File:                     764cc973-e916-3365-bf3b-83c0ba27ed04.roa (raw, json)
Hash identifier:          CiEHIAZaL5jBCWaxY+qqyh7GVDrx1+hMahhUIwy9UEI=
Subject key identifier:   F6:DF:93:7F:F6:44:1F:06:9B:97:6E:EA:B6:63:50:7A:93:73:64:AB
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F43285849AE7F4394EDEF969D415CC640
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/764cc973-e916-3365-bf3b-83c0ba27ed04.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     18771
IP address blocks:        2604:81c0:3d5::/48 maxlen: 48
                          2604:81c0:3d5c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:43:94:ed:ef:96:9d:41:5c:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=2fe56390-28e8-4a2b-9258-1587a85e66a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:28:05:eb:da:8c:99:79:55:4c:30:ac:f7:
                    eb:5f:35:20:63:f3:f0:a7:65:d2:67:16:63:bf:c4:
                    bb:db:66:82:d2:af:1f:5d:39:6b:d1:11:0d:56:5b:
                    70:f0:54:a0:6d:cd:4d:5d:11:f4:a9:f1:5c:81:9d:
                    92:af:00:55:02:de:a8:f9:d6:fd:38:08:41:e9:f9:
                    8b:a6:f4:59:1b:4f:44:b5:01:f5:d2:f0:58:a6:d7:
                    3c:d5:91:44:1a:18:24:e2:bc:36:93:a0:4e:39:d5:
                    c3:5d:fe:59:1e:13:3a:7b:fd:91:72:e3:f5:ed:4a:
                    d2:76:b7:1d:3e:b4:83:cb:36:ac:6e:1f:6a:33:06:
                    61:34:f1:e7:0d:e7:af:a0:cb:75:63:ae:ab:e8:d9:
                    63:68:7a:0c:4d:07:73:d1:8c:6a:1d:92:4a:47:8f:
                    52:4b:37:05:21:7b:3c:5e:0f:3e:1f:e0:8f:ca:82:
                    a3:90:87:e0:f2:01:eb:c6:46:93:20:cb:ea:db:18:
                    f5:a0:44:36:bb:cf:09:d2:31:fc:59:77:1a:b8:ea:
                    8b:56:d8:d2:6b:13:29:ee:95:40:13:77:86:36:37:
                    62:98:6d:5e:c3:01:10:87:29:ea:b7:98:17:b7:68:
                    24:3c:b3:03:3e:9d:68:39:6a:c6:45:0b:53:c9:8f:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DF:93:7F:F6:44:1F:06:9B:97:6E:EA:B6:63:50:7A:93:73:64:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/764cc973-e916-3365-bf3b-83c0ba27ed04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:81c0:3d5::/48
                  2604:81c0:3d5c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7e:69:a7:9a:e4:3a:f7:01:43:73:31:b6:c5:0a:d6:73:d9:
         39:71:2a:b0:e8:5c:e7:d9:6f:df:f9:7e:92:84:dd:18:96:ca:
         ce:6d:19:6a:cc:5a:57:74:e7:25:05:72:85:20:4f:5b:ea:ee:
         3f:ec:51:82:3d:90:1b:83:a7:79:34:ca:d7:22:a9:e6:66:1c:
         b5:21:42:0f:38:24:b3:bd:e2:c8:8c:67:ac:7c:a6:84:ad:d0:
         00:44:87:00:8d:bc:78:15:56:3a:93:6e:0b:df:8a:1b:41:05:
         7e:da:94:9e:f6:3c:b2:dd:ae:cf:c3:91:da:23:29:09:a2:87:
         84:ea:bd:ec:c8:34:7d:fb:3c:24:bf:10:ec:f0:c7:2f:81:5f:
         84:38:e8:e7:ee:18:66:59:23:70:5d:81:e9:68:20:9a:9e:0a:
         ba:5f:3c:ac:8f:ee:c6:c3:cc:b4:16:a6:68:24:87:50:97:82:
         de:65:15:fb:74:bd:0f:6d:0c:ba:72:fa:1e:e0:2b:57:6d:f7:
         f8:c9:46:8d:f1:c5:29:4a:79:44:86:7a:7a:76:f0:bc:09:3f:
         31:b7:d4:46:31:09:ea:4c:20:94:db:0e:32:0f:29:5c:e3:cd:
         36:f3:01:ff:5f:c3:b4:b1:83:a7:b7:f2:f4:60:4f:c9:eb:e9:
         f1:a2:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:40:45 2025 by rpki-client