Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa
File:                     f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa (raw, json)
Hash identifier:          xgVxxjnAXcKqf58+pclFR/c1fnecuqjM+ofFnYKwGyE=
Subject key identifier:   FC:5D:08:BE:91:F4:E0:B1:21:C4:74:CC:D6:45:6B:FF:FC:02:55:0C
Certificate issuer:       /CN=a04b5188-7d31-4ad3-8474-090b809c8408
Certificate serial:       010D0C9F43285849BB0F7322902EE26546026580
Authority key identifier: B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     54235
IP address blocks:        2604:d980::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:73:22:90:2e:e2:65:46:02:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04b5188-7d31-4ad3-8474-090b809c8408
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=b7ec10e0-1920-40c8-b7e6-e7d9b0bbb678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b5:2b:90:ae:20:83:1f:54:7b:81:72:89:27:
                    79:55:89:36:96:fd:ac:9f:da:2e:1d:75:17:bc:5f:
                    d1:80:be:73:6c:15:34:5b:39:28:ea:2f:4f:2a:8d:
                    d0:9b:9c:7f:53:f8:0e:c9:41:b9:2f:90:f8:60:04:
                    00:ec:e1:88:b0:06:0c:9d:15:ac:f9:2f:7e:c1:6d:
                    e7:e4:3b:ba:26:46:4c:4c:6b:ea:43:62:f1:67:77:
                    c3:3f:b0:4f:45:12:27:d8:31:c5:f0:7f:db:98:8d:
                    0d:78:07:59:8c:13:5a:27:77:e3:8f:23:61:3d:e7:
                    8d:62:f9:34:44:b0:aa:f2:11:ff:b3:e3:57:d6:b6:
                    25:ab:ff:1b:5d:9c:da:38:4e:15:5c:84:d9:bb:eb:
                    5b:e1:7c:9b:a0:1b:68:ee:ac:08:be:02:fc:ec:74:
                    78:42:b8:fa:85:16:39:fe:cb:0e:b1:c1:c4:02:78:
                    1c:94:cf:67:30:9b:cd:2d:af:27:4e:87:d5:91:13:
                    05:7d:2f:82:da:2d:13:91:5e:bf:11:5c:71:e4:6e:
                    43:9f:64:03:00:1a:98:1f:48:fb:f8:c8:5e:24:32:
                    62:82:75:c3:a3:c2:76:43:ca:7b:5d:25:2f:b0:a8:
                    fa:50:56:ba:bd:0d:a2:69:17:ed:6d:42:be:77:54:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5D:08:BE:91:F4:E0:B1:21:C4:74:CC:D6:45:6B:FF:FC:02:55:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl

            X509v3 Authority Key Identifier:
                keyid:B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ce:3f:f9:fb:a2:2e:d0:4f:dd:fc:3c:c9:f2:9a:26:26:2f:
         3d:a3:35:3a:9c:b7:6a:83:84:71:50:61:fe:9d:c1:5f:5a:e9:
         df:ba:28:a8:cd:a5:6a:13:26:d4:14:c7:bc:89:5c:ef:44:a9:
         8e:dc:be:cf:84:32:77:d2:73:e6:00:02:38:6b:08:d4:5c:29:
         dd:19:65:5e:e3:91:a3:b0:3b:d6:a4:4c:d9:df:09:c0:9c:98:
         d5:c4:d2:53:ce:80:9b:63:74:6b:e0:0b:12:75:07:bc:a8:70:
         af:5c:32:f0:ef:34:87:a1:46:03:94:0b:c7:7e:96:fd:bf:b5:
         f4:f1:5b:10:77:13:01:7b:d0:5f:1f:cf:8d:dc:54:a3:58:c6:
         2f:2c:8f:66:f4:4f:32:85:b1:25:66:d2:ac:72:1f:72:29:8a:
         3b:bd:b9:20:c1:98:1d:29:11:31:47:61:da:2d:32:a5:02:81:
         47:39:23:75:da:7d:d5:8f:9f:af:e6:8b:d2:71:b5:36:bc:4e:
         43:54:fb:cf:17:81:d6:dc:13:e4:cf:43:1e:24:f1:68:20:74:
         c9:c6:ce:d7:73:e0:99:16:cd:1d:40:52:24:2b:9f:0c:a3:6a:
         35:52:9b:9c:50:e5:c4:c4:50:01:1e:26:5e:0d:00:e2:ed:ac:
         62:25:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:43:42 2025 by rpki-client