Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/7819596c-8a59-37cf-a9a1-ea5443d388cb.roa
File:                     7819596c-8a59-37cf-a9a1-ea5443d388cb.roa (raw, json)
Hash identifier:          7f3SLFD1oY0QlZc7eFbu4Ec2AbyqeWzqDeVWgqomHm4=
Subject key identifier:   8E:6C:70:68:87:A6:E1:58:DE:39:D5:DA:59:5D:22:01:E6:67:40:16
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F432858498339F15674471DFD3E257A20
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/7819596c-8a59-37cf-a9a1-ea5443d388cb.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     50131
IP address blocks:        2604:9cc0:c00::/38 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f1:56:74:47:1d:fd:3e:25:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=f8f5f2e2-e080-47fe-8146-6dbdf62a0c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:9c:1d:6d:48:05:41:27:9d:8f:29:33:aa:
                    00:64:63:ef:74:4e:be:93:35:c7:67:1f:c4:77:4d:
                    65:d7:4b:dd:0e:8e:13:ce:42:d5:bb:3e:7b:e7:36:
                    19:c3:b3:28:ea:c2:80:07:dd:3e:de:98:d4:9f:fd:
                    f9:0e:46:f2:ce:18:b5:8a:4f:6c:20:8c:dc:28:c3:
                    0f:6e:9e:98:59:1e:b1:aa:7a:bc:5a:91:02:33:53:
                    6a:cd:62:a6:37:8f:f4:8a:9b:14:71:2e:e8:53:97:
                    10:a9:ff:75:63:c4:f6:6e:3a:8c:72:68:a4:89:d3:
                    80:53:0f:45:56:9a:de:08:11:1c:82:87:b6:a8:dd:
                    dc:d6:9c:a2:33:7a:51:9f:4c:30:c6:6d:48:00:be:
                    f3:eb:b7:96:d8:88:bf:6c:eb:07:bb:ef:b6:0f:6d:
                    17:a6:1e:2b:62:63:3b:b8:c0:8a:16:11:69:1a:6b:
                    cb:60:6c:3e:3d:bd:a9:63:b4:63:43:a7:f0:ca:e6:
                    2c:af:4b:15:7f:24:56:8f:78:08:59:60:74:ad:6e:
                    d2:f2:03:c5:d8:ae:eb:21:51:43:f4:60:b9:f2:99:
                    6a:90:4b:32:9b:65:08:2b:20:1b:de:87:91:b4:ab:
                    1e:3c:bf:42:3f:be:7d:2e:51:16:82:76:21:2e:9f:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:6C:70:68:87:A6:E1:58:DE:39:D5:DA:59:5D:22:01:E6:67:40:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/7819596c-8a59-37cf-a9a1-ea5443d388cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:77:57:c9:c0:d1:37:5b:3f:7c:dd:ae:03:28:58:9a:cb:b2:
         22:0e:9d:e4:70:a4:9c:3d:d3:77:4e:02:41:7c:7e:ce:2f:f3:
         ec:c3:ba:f5:10:13:4f:cd:72:74:9b:59:3e:b9:7a:bc:84:73:
         f2:4f:28:56:01:f5:8a:1f:3e:ec:bb:4d:93:51:0f:6f:05:bf:
         79:05:62:d9:38:90:0c:18:3b:4e:1a:bd:19:ca:16:25:1a:c4:
         0a:54:dc:e5:00:bf:ce:d6:1d:cf:6e:e5:b4:ba:2d:81:88:40:
         6c:74:c6:24:03:6f:19:06:8d:fd:fd:d9:18:68:bb:93:50:8f:
         7c:26:9e:aa:fe:15:1d:ca:fe:d6:26:f9:64:25:db:7d:ed:ee:
         8a:00:3a:86:24:31:a2:0c:cd:33:85:e9:1b:9c:5c:b7:f4:34:
         04:f8:e8:21:9b:39:25:51:2c:a6:58:40:67:e4:6b:e7:63:9f:
         a4:08:4b:61:ab:25:e2:42:f6:cb:8f:2d:b3:9f:10:f6:09:0b:
         c9:cb:90:9f:2a:68:71:d1:6a:44:65:dd:46:42:39:5a:96:bb:
         f8:c7:d2:c7:82:57:63:38:01:98:c6:ea:6c:79:ae:4d:cf:88:
         7f:2f:f9:c8:d3:59:16:a4:0f:e5:d1:bd:e5:4c:2f:0a:de:fb:
         a9:23:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:47:06 2025 by rpki-client