Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/bd79e5c1-1ca4-39a6-939c-15ec3b58f89a.roa
File:                     bd79e5c1-1ca4-39a6-939c-15ec3b58f89a.roa (raw, json)
Hash identifier:          VRh4NAbrefIG5HEEl+kAex9I8pGiaNaahgNMk0Hyedg=
Subject key identifier:   1C:99:AB:55:9D:91:F7:EC:65:50:84:28:52:31:A9:97:4C:B6:6B:1C
Certificate issuer:       /CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d
Certificate serial:       010D0C9F43285849AA4F6EB88458CBCA1CE99BB0
Authority key identifier: 38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/bd79e5c1-1ca4-39a6-939c-15ec3b58f89a.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     21529
IP address blocks:        2606:1fc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6e:b8:84:58:cb:ca:1c:e9:9b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1934fa05-d7a3-4b7d-be5d-dc83d4a7199d
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=bac41150-7f3a-4a8d-b4ec-845d74af3d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:76:aa:f4:c0:4f:23:aa:86:47:1b:b8:3c:db:
                    68:f2:6d:cc:4c:82:d0:5b:96:45:29:1c:a8:fd:57:
                    38:e2:ca:84:f8:9b:b2:9e:5e:7f:82:75:eb:1f:e8:
                    d6:f9:f8:d5:59:8e:74:0d:0b:01:66:cb:57:03:3f:
                    b1:02:08:bf:b3:e1:0f:e8:ee:87:bb:6f:4b:94:9a:
                    a5:84:1e:8e:7e:e1:75:eb:08:1a:dc:7c:b7:2a:3e:
                    58:18:26:61:3c:20:c8:3f:ec:ac:41:a3:59:32:82:
                    0a:51:e3:3b:f1:dc:79:df:05:43:45:46:22:ad:af:
                    5e:82:6d:82:e8:15:7c:3d:bb:3f:3c:52:8d:2e:74:
                    ec:cd:10:a2:b5:e8:57:2b:95:21:91:c6:75:04:3b:
                    7d:ae:e2:1e:88:d8:25:11:4e:b8:e0:35:6c:bf:76:
                    d1:c0:04:ec:34:82:76:3c:14:d5:a2:fa:5a:cb:a3:
                    e3:f0:85:ae:b0:36:f3:26:11:d6:9a:a4:51:5e:f8:
                    72:a2:36:6e:45:ea:f9:a7:1a:b5:fb:43:9e:c2:87:
                    36:74:a0:7d:c7:64:1d:f0:79:59:40:42:e3:77:f0:
                    03:43:82:1f:22:95:18:a2:97:45:a5:7a:8c:f0:2f:
                    ab:f2:13:e1:79:01:77:ed:ec:5b:b7:6f:45:57:89:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:99:AB:55:9D:91:F7:EC:65:50:84:28:52:31:A9:97:4C:B6:6B:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/bd79e5c1-1ca4-39a6-939c-15ec3b58f89a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.crl

            X509v3 Authority Key Identifier:
                keyid:38:8B:95:35:2C:AD:AF:3C:EE:68:E0:29:45:86:0F:27:48:D0:D4:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1934fa05-d7a3-4b7d-be5d-dc83d4a7199d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:54:85:1e:18:e9:0b:20:86:e3:aa:68:18:ad:90:24:97:05:
         16:77:e6:af:08:e0:59:c5:cf:2d:40:34:f8:22:fe:62:3a:e6:
         d3:2b:9d:79:ba:56:c4:c9:01:25:17:d4:f1:b2:1a:29:b4:80:
         61:87:09:5b:1f:23:46:1b:c8:e7:a9:ad:72:40:d8:04:dd:31:
         d9:cf:36:71:f2:93:96:ff:a0:ad:4e:ce:81:24:ed:b5:32:f2:
         2a:78:7a:de:d4:07:d4:9f:e0:02:85:76:80:ad:c5:8b:ce:93:
         16:b8:dd:de:32:ae:8e:60:c6:5c:a3:17:1c:f8:6b:dc:61:a5:
         27:ea:59:22:61:05:43:61:8c:3b:4d:a5:54:15:65:e5:47:50:
         cc:30:be:42:21:6a:db:6f:3c:fe:ce:ed:7e:d5:de:2a:da:d6:
         10:04:6b:0a:c2:93:fe:60:45:ac:a7:fc:3b:2e:c0:51:67:10:
         57:ce:36:24:8a:2a:4b:8f:84:54:0f:a0:5a:da:fc:83:6b:93:
         1c:36:6d:04:82:9d:fe:9b:97:00:76:70:5e:c7:d0:d3:23:92:
         ee:06:73:d1:b7:71:82:a1:90:33:39:dc:19:82:60:c5:50:a1:
         6e:29:18:e9:02:a2:0c:e0:c5:73:de:4a:bf:f0:30:8d:3b:0e:
         f0:2d:cd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:21:34 2025 by rpki-client