Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/89541c3b-c5aa-36f1-bb60-8d16d9e27e86.roa
File:                     89541c3b-c5aa-36f1-bb60-8d16d9e27e86.roa (raw, json)
Hash identifier:          cAnzIOVCcUGUNOc711yv4JXxCZ/celcxRhQIY5wzeOs=
Subject key identifier:   7B:6B:97:A6:DE:65:C5:E0:A0:19:AB:82:66:CC:8A:5B:09:12:27:49
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F43285849B9AA04B3534D3D01321E7340
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/89541c3b-c5aa-36f1-bb60-8d16d9e27e86.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     19651
IP address blocks:        2602:f9ec:cb::/48 maxlen: 48
                          2602:f9ec:cc::/48 maxlen: 48
                          2602:f9ec:cd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:04:b3:53:4d:3d:01:32:1e:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=b9a7a61c-c715-49d8-91cb-4ebcfd66f94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:0a:36:19:c9:e6:70:c8:8f:e2:bb:8f:5b:
                    e0:45:51:a9:5f:4b:f0:4a:3d:c5:d6:8f:05:0f:92:
                    c2:11:5e:6e:d9:07:e9:c2:f2:c5:36:d7:f6:23:cb:
                    02:de:6b:b6:61:4b:90:16:74:5f:b6:94:08:97:e6:
                    51:77:f7:c3:35:e1:4d:24:68:1d:3a:c4:da:ca:f9:
                    1a:f7:ee:2e:3b:06:f0:83:55:d1:ee:30:e8:3d:6d:
                    ea:f0:a3:e2:81:af:bd:9d:6d:c1:09:88:3c:af:02:
                    50:7f:21:dd:db:b3:37:c6:78:f5:67:95:b0:3b:89:
                    39:f2:57:34:20:1a:16:95:87:1d:77:15:2c:86:75:
                    1e:9f:95:72:16:85:ff:6f:2a:c5:0c:b5:4d:70:54:
                    66:b2:f8:39:85:4c:75:b0:1b:9b:68:ab:82:7f:b7:
                    3a:79:d3:79:50:71:3e:9f:00:9f:ea:54:74:2a:c5:
                    56:9e:99:5d:bd:ea:76:7e:4a:56:21:9e:b7:f9:53:
                    72:02:83:66:3a:83:b3:52:56:3e:66:09:09:bc:61:
                    38:58:24:11:ec:b0:1d:7f:f5:99:08:83:e3:9b:8f:
                    9c:eb:40:5e:d1:c5:d3:58:b7:cf:ca:20:73:ad:0d:
                    62:ed:41:6f:8f:84:46:86:ce:46:68:33:01:58:0f:
                    88:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6B:97:A6:DE:65:C5:E0:A0:19:AB:82:66:CC:8A:5B:09:12:27:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/89541c3b-c5aa-36f1-bb60-8d16d9e27e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:cb::-2602:f9ec:cd:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:22:f7:dd:14:e1:01:0a:89:17:5b:12:43:e9:f1:40:19:84:
         20:23:fa:81:ef:16:8a:ff:f2:17:9a:62:df:e5:66:15:40:bc:
         89:b8:e8:2b:59:9c:62:e7:8e:ed:55:1c:7e:a0:cd:b6:a8:2e:
         39:bc:93:2b:e1:3e:d1:1a:57:26:a3:f2:f8:7b:61:92:95:1a:
         94:d9:88:d6:51:06:fc:d7:a2:cd:a1:87:ea:2f:64:af:53:64:
         59:d2:cd:c7:e0:70:e9:91:da:9f:27:07:af:5b:f2:0d:48:2e:
         cd:78:8d:ff:66:83:e2:d7:c0:c5:dc:68:0b:51:24:d9:93:c5:
         1f:3d:77:37:b1:1f:91:20:3a:b5:b2:33:b8:e2:17:25:d0:05:
         06:da:58:23:b9:4d:46:0a:36:94:9d:55:07:9b:40:f2:44:3b:
         da:03:0a:d6:4c:a7:da:f8:fc:b6:ce:1d:19:ce:82:fb:ab:a2:
         d7:95:f6:44:5d:a8:5c:1e:ac:4a:78:d1:17:02:4a:0a:a0:58:
         2c:09:8e:6a:02:79:fb:34:db:55:1e:2f:46:b3:42:7c:fe:ea:
         93:69:0c:20:9e:26:cc:f5:f6:6e:29:8c:c2:b2:fc:84:a2:11:
         58:02:7b:1e:fc:77:70:7f:b5:d1:9e:7f:88:e1:49:14:4c:97:
         0e:77:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:36:05 2025 by rpki-client