Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa
File:                     51ce0173-4a36-359f-b3af-21efe7090623.roa (raw, json)
Hash identifier:          ssDDHjG3a20dVhwpgG9LR0IzGl/tqoJNAVyQieY9s48=
Subject key identifier:   10:3A:59:79:50:5A:47:C1:27:CB:0D:9D:86:E0:F9:30:C6:E0:EF:E8
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285849BB0F70673F272800C1D54C40
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     7862
IP address blocks:        2620:16d:1000::/38 maxlen: 38
                          2620:16d:1000::/40 maxlen: 40
                          2620:16d:1200::/40 maxlen: 40
                          2620:16d:1400::/40 maxlen: 40
                          2620:16d:1800::/38 maxlen: 38
                          2620:16d:1800::/40 maxlen: 40
                          2620:16d:1a00::/40 maxlen: 40
                          2620:16d:1c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:70:67:3f:27:28:00:c1:d5:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=9916cc25-3c43-485e-8c79-ebf4c02ad482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:86:b0:d8:02:d9:ee:13:37:5b:d7:01:92:
                    1c:47:6d:0c:e9:b4:50:b2:80:55:a2:37:f5:76:03:
                    e3:61:6a:22:ab:b0:cd:71:8c:c9:68:fd:b3:0c:25:
                    36:37:51:ee:77:74:5d:37:d4:76:8f:e7:1a:6c:40:
                    40:7f:e0:f8:5d:65:b8:23:db:2f:66:c1:cb:f8:ac:
                    b8:48:c9:73:05:b2:7c:0d:be:48:e6:26:a2:76:64:
                    5d:79:93:50:d4:c8:4b:c4:7a:0c:a1:84:5b:68:ff:
                    92:9b:2f:82:2c:ca:d6:5b:8a:97:fc:24:af:c0:b1:
                    c6:e9:cd:18:9c:03:92:e7:b1:f8:88:ea:1c:86:77:
                    a6:78:7a:01:49:66:25:64:3d:4d:d3:35:43:61:ba:
                    8b:b7:ba:28:8c:2f:d8:87:21:ce:ba:17:4f:74:bb:
                    35:1b:ac:85:08:6c:10:4a:bb:00:13:a1:20:eb:bc:
                    74:53:47:d3:20:b7:0d:d0:8d:9e:7d:ef:9c:97:bf:
                    15:cc:f0:8e:b5:ef:6a:2e:ab:34:97:88:35:f7:bb:
                    1d:ad:60:d1:85:ae:b3:a0:12:cb:98:f0:d2:0a:3f:
                    43:68:68:fb:9d:a2:51:7b:31:86:2c:c7:d2:63:b0:
                    30:e0:49:dc:82:0a:4d:07:1a:5b:2e:ef:66:76:b0:
                    83:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3A:59:79:50:5A:47:C1:27:CB:0D:9D:86:E0:F9:30:C6:E0:EF:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/51ce0173-4a36-359f-b3af-21efe7090623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:16d:1000::-2620:16d:14ff:ffff:ffff:ffff:ffff:ffff
                  2620:16d:1800::-2620:16d:1cff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:8e:4a:d3:b1:74:a6:b1:0a:1c:e1:2e:3d:39:f1:4a:c1:9f:
         d0:d4:58:78:20:3f:ac:8c:d1:3c:11:cf:9f:56:ae:ab:1c:6b:
         b8:53:8f:90:8e:68:16:e0:c5:f6:3b:51:c3:80:73:e9:2a:52:
         0e:be:08:80:d2:a4:2e:78:6b:f5:5b:bc:79:23:7b:b5:2c:a6:
         6c:44:85:be:28:d9:e5:8d:c3:73:e2:b6:0d:db:70:0a:a7:6b:
         2b:7d:c0:d8:38:07:63:db:2e:49:fb:78:74:d2:0a:28:90:47:
         1f:f8:1a:91:2a:36:6d:58:2a:ac:81:64:4e:d7:95:70:d3:a8:
         fd:d7:fa:0c:96:c6:0a:a1:b9:70:d1:6e:7c:b5:ed:2e:91:98:
         50:2c:48:3f:c9:49:b5:ba:3d:eb:41:28:ac:99:44:04:48:bf:
         80:06:2b:dd:c9:c6:01:07:68:9e:f2:b5:1f:04:84:b9:99:4d:
         6b:ee:8b:73:98:3a:81:ae:8b:39:28:64:a0:68:e5:47:91:75:
         63:e5:d1:74:42:06:c8:30:2b:f6:94:6d:e4:c6:6c:e8:48:60:
         4c:1c:74:8b:82:9d:40:e9:94:6e:5c:43:04:cc:07:ff:cf:af:
         ef:53:e8:07:2e:7a:01:61:f0:3c:65:aa:3a:26:70:45:66:d6:
         6a:e3:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:35:14 2025 by rpki-client