Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5580679c-fe47-36a2-af08-7e277e246b50.roa
File:                     5580679c-fe47-36a2-af08-7e277e246b50.roa (raw, json)
Hash identifier:          5JQqdMnx5SiydME5Gjrbui+dRY4qLKhFymRRiMN/fQI=
Subject key identifier:   FD:94:38:51:69:D4:AA:51:77:A0:A7:67:07:70:AE:97:9C:95:DB:79
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20A423217A65DBB311CB0C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5580679c-fe47-36a2-af08-7e277e246b50.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11351
IP address blocks:        2600:6000:f5d5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:42:32:17:a6:5d:bb:31:1c:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=39cf30a8-55a1-4452-9c9f-f7fdeb740fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:98:b5:78:6a:d0:67:1a:41:db:78:f2:0f:ba:
                    a1:ea:29:3c:79:a5:3f:25:20:f3:f5:b4:7e:22:be:
                    7f:7e:ec:0f:5f:25:ad:0c:fb:dd:bf:c2:88:29:51:
                    9c:91:eb:bd:77:c1:8e:f3:f1:94:7e:6e:93:c1:01:
                    f3:23:24:ed:7a:1f:07:50:0f:9d:c6:85:7d:a4:74:
                    17:ad:66:19:e0:8a:2d:a3:18:d1:f6:64:58:8b:1d:
                    b0:03:8e:cf:08:0e:06:bb:54:fa:ad:65:13:8d:b9:
                    52:69:3a:08:4d:8a:eb:4d:70:12:dd:5d:49:52:d3:
                    a9:96:5d:85:a6:2c:fe:ee:db:de:3a:5d:36:7b:e1:
                    30:31:01:2d:a1:02:79:2b:77:67:23:e6:7b:55:26:
                    a0:42:9a:40:4c:f1:1a:58:5f:8d:c6:d5:f3:4c:37:
                    84:20:ba:35:87:86:70:11:f4:d6:b4:27:83:de:4e:
                    34:b9:2a:b7:7e:48:77:28:6c:b8:42:57:11:44:ad:
                    44:cf:5d:5f:7d:a6:8f:4b:7e:f1:dc:e9:8e:5e:76:
                    da:28:6c:83:0f:19:1d:37:66:d5:72:94:8c:d2:79:
                    f1:01:55:2a:b9:7d:cc:74:05:cb:dd:cd:04:1e:b2:
                    14:e9:00:2e:9e:b8:98:bf:a9:5b:6a:fa:b8:08:39:
                    18:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:94:38:51:69:D4:AA:51:77:A0:A7:67:07:70:AE:97:9C:95:DB:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5580679c-fe47-36a2-af08-7e277e246b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:f5d5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:91:7c:0b:95:f1:cf:c7:63:36:d0:03:9d:5f:af:47:29:e7:
         13:3a:d5:06:6d:d0:5a:c2:f6:d5:aa:60:84:cc:51:8a:05:fa:
         01:39:48:43:ab:0e:a9:7b:9e:03:d1:dc:ea:48:54:90:20:a8:
         42:46:80:fd:bc:99:07:11:cb:f8:d5:b8:a3:7c:5f:35:55:6c:
         59:9f:a3:a9:86:8c:ca:b9:bc:b2:cc:00:4b:93:c8:05:c4:9f:
         99:b6:35:f5:39:db:b1:f8:6d:39:7a:86:63:77:c2:e1:c4:c7:
         63:2c:32:10:82:a9:39:b8:c9:61:c4:47:d5:42:37:90:d2:e9:
         53:ae:06:db:0b:67:26:62:cb:82:62:63:f7:0e:14:d4:76:2c:
         72:51:d0:31:cc:20:80:33:db:e9:8d:5a:0c:3a:99:0a:28:e4:
         bf:ea:75:c0:56:c2:6e:ba:4d:4c:50:00:db:ae:cb:6b:6e:3f:
         23:ac:17:a7:82:27:43:6d:cf:b5:4e:78:36:df:c2:64:cb:70:
         98:8b:eb:87:e5:e8:33:ae:35:4c:41:83:cd:71:9b:67:af:42:
         f3:b2:f5:6b:cb:10:28:23:34:1f:09:0a:88:f0:b9:4f:18:dc:
         e9:5d:39:fd:fc:fe:f0:dc:f4:37:91:c6:c1:9d:16:59:f8:48:
         1c:90:74:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:27:49 2025 by rpki-client