Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d2ddcb1-8700-33fd-9d24-e4227190d7d5.roa
File:                     5d2ddcb1-8700-33fd-9d24-e4227190d7d5.roa (raw, json)
Hash identifier:          fkXP6FS/qy3VclzJ6mPGohNlwng9B+fcu0uMMAw8JXQ=
Subject key identifier:   41:1D:14:6B:EB:A2:A3:3E:72:A0:96:C9:9E:C8:3E:34:9E:17:FD:1F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849C20AD05D1EBF1C7B7205CFA0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d2ddcb1-8700-33fd-9d24-e4227190d7d5.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11351
IP address blocks:        2600:6000:f570::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:d0:5d:1e:bf:1c:7b:72:05:cf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=d74ae6d7-b480-42ea-9fa3-92492863a5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:e4:87:a7:72:ea:b0:90:1b:06:16:cd:60:
                    f1:97:a9:eb:1b:e9:7e:c1:6d:9d:14:bf:54:d0:71:
                    14:09:3e:99:3d:6c:4e:2a:05:1b:0d:48:1b:19:78:
                    63:1f:4c:29:9f:37:2e:9e:cd:f2:48:e7:d3:5a:bc:
                    54:a5:a4:ea:97:d7:83:cf:ba:93:1e:e1:a7:b2:b1:
                    f0:b3:76:83:d5:22:75:d8:e6:33:8f:84:cd:b6:59:
                    fc:e4:12:15:60:5a:bc:47:e1:0d:d1:a0:f2:6e:e6:
                    13:a0:1e:d9:69:27:a0:86:01:28:77:4f:c8:9d:ce:
                    28:79:f5:4b:86:d6:1f:4d:ff:f3:3f:15:d9:2c:50:
                    8c:73:aa:e0:2e:cc:12:35:e5:b7:02:06:22:63:14:
                    e3:4d:43:ea:c6:73:24:25:65:a0:86:04:59:c7:9c:
                    a4:6a:6c:94:ee:23:4b:2e:26:3f:ef:96:64:89:e9:
                    a7:5f:5d:74:08:ea:79:b0:06:0b:c0:c2:25:2f:24:
                    c9:66:1a:b8:0c:8a:3f:93:68:db:c0:8f:23:36:c6:
                    b6:f5:03:a0:a0:2d:45:41:5d:44:b0:d1:e5:5c:ea:
                    74:62:67:f9:b7:50:d0:4b:fe:e3:2c:e7:87:9b:ad:
                    9a:0a:f6:c3:9f:48:26:08:20:69:ac:79:6a:e3:85:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1D:14:6B:EB:A2:A3:3E:72:A0:96:C9:9E:C8:3E:34:9E:17:FD:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d2ddcb1-8700-33fd-9d24-e4227190d7d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6000:f570::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:9a:f2:9b:27:f1:ca:62:1f:3f:11:44:21:6e:86:06:0a:2f:
         dc:8e:5a:fe:5a:ea:2e:59:c7:2a:a2:23:23:1a:c0:e8:a8:8d:
         94:ee:8c:1e:f0:52:c3:02:14:2b:fc:42:77:c3:67:ce:3d:a3:
         09:20:8f:ec:dc:8a:07:8b:3c:5d:e3:d9:89:af:4c:55:7e:29:
         37:12:c5:36:17:ba:a5:2f:e1:47:c8:e6:90:ef:c1:b2:a1:53:
         37:b8:86:5d:99:ba:6e:c6:a6:6c:6d:85:0e:13:60:34:f3:26:
         92:9a:7e:15:22:d0:34:b3:87:1e:3b:16:43:6f:91:22:59:b5:
         76:fc:3a:fb:d3:c5:13:bb:af:01:b1:ea:67:e5:33:5c:64:2d:
         26:1a:6f:b3:63:2e:45:db:bb:eb:e3:ff:8a:25:6b:d8:33:11:
         9c:1f:44:0d:0a:57:1d:b6:9a:87:05:b3:c0:6f:24:8c:30:f1:
         26:e3:a3:76:f8:dc:f7:7c:d5:02:67:95:54:23:d7:41:83:09:
         6d:06:12:40:27:22:dd:bc:dc:80:dd:e8:96:28:69:de:98:f2:
         25:69:90:05:f1:2f:5c:c3:40:34:dc:9f:29:21:af:b0:8a:24:
         5c:16:be:72:9b:88:0e:c9:8a:5d:b9:a1:a4:b4:1e:e8:00:eb:
         7c:81:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:43:45 2025 by rpki-client