Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa
File:                     de7bd649-b19a-3283-9c2c-13c94d00554e.roa (raw, json)
Hash identifier:          Qx0LGy43D74PdekXK6XWsAAaLntMVnVaHWWbIiN7/CM=
Subject key identifier:   F7:98:4A:8B:15:BD:FD:06:A1:6E:58:14:AF:A5:07:CD:80:04:A7:EB
Certificate issuer:       /CN=3d318897-eed6-4fd9-a18c-91026968b3e2
Certificate serial:       010D0C9F4328584988CF26E608E8982007992A00
Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     800
IP address blocks:        2604:fdc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:26:e6:08:e8:98:20:07:99:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=429cb700-bc26-44b4-a50b-e4f069fa9f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3c:cc:9d:ad:d9:c0:fb:a0:f9:05:d4:9a:2d:
                    29:e4:07:8d:5b:d9:bb:e7:97:d9:4d:5a:0d:26:37:
                    b1:b0:84:c1:dc:1b:7e:4e:32:87:b2:bf:4d:a2:e9:
                    64:a7:5e:55:6e:7b:fa:83:25:c9:13:d8:d9:d1:e5:
                    7b:63:38:a0:ad:22:f7:41:93:0b:53:4c:93:2f:62:
                    41:af:cc:d4:17:60:f2:4c:72:eb:00:20:17:13:0b:
                    2f:59:ee:58:2a:23:c9:4e:cd:7b:20:01:ce:0d:a3:
                    fb:50:e4:26:6f:02:5f:49:df:74:3b:d8:26:4d:02:
                    a2:fe:d5:58:c6:6d:f5:18:b5:49:54:82:58:52:2c:
                    7d:92:dc:c4:8f:45:ce:2b:0c:a4:ad:1d:5a:55:37:
                    0f:1a:e7:8a:43:58:03:05:31:dc:35:3a:9b:ef:ee:
                    ce:23:3c:17:2d:94:e3:01:c9:5f:cf:26:8f:fe:9c:
                    00:94:eb:90:60:84:f5:37:d0:f4:17:fc:47:61:4d:
                    fc:40:38:e0:6c:81:43:e1:94:31:73:d7:1c:fa:fb:
                    cc:9e:ae:e4:60:61:9f:5a:0e:36:1f:19:3d:3e:df:
                    d8:37:86:7f:3d:17:a0:9a:31:f1:c4:9b:96:da:d7:
                    ff:d1:36:87:4d:75:75:ef:98:a9:5c:ac:3e:30:ae:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:98:4A:8B:15:BD:FD:06:A1:6E:58:14:AF:A5:07:CD:80:04:A7:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/de7bd649-b19a-3283-9c2c-13c94d00554e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl

            X509v3 Authority Key Identifier:
                keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:41:44:8b:2a:7a:8d:c0:aa:24:ee:94:3e:36:3e:ad:28:94:
         41:16:b7:6f:7f:be:5f:91:13:e4:dd:e0:3b:84:03:30:3a:f3:
         93:0a:24:76:be:c0:74:c6:b9:ef:15:0f:e5:6b:d5:2a:ea:b2:
         ba:a3:08:27:52:b5:ef:c4:eb:74:4d:51:27:76:ac:21:31:bd:
         03:f7:05:85:fb:3d:1e:a9:e6:97:b3:a5:4c:78:00:63:4c:d9:
         df:0b:65:50:a7:7f:c1:19:bd:a9:90:41:b0:1b:e7:4a:80:18:
         8f:6d:9a:84:63:fd:e8:39:79:26:81:46:a7:18:e4:94:c9:45:
         0e:3c:7a:52:7c:27:da:a8:4b:38:23:7c:58:ee:54:a3:d5:9d:
         27:8b:45:7f:f8:6a:dd:0e:3a:68:e3:15:9f:5c:0e:ad:7a:64:
         0b:17:e2:4b:ea:1d:d3:78:c3:61:ec:59:61:5d:a3:d8:d9:42:
         dd:75:1c:ee:64:57:3b:c2:80:76:2e:3e:dc:05:2a:08:cb:1d:
         d0:67:4b:b2:6a:99:cc:7f:c8:ac:7d:77:b0:6c:b8:2c:3f:a2:
         04:08:a7:67:2a:ce:f7:a1:a2:24:6a:23:ab:7d:2b:0a:55:e7:
         f2:89:22:3b:00:81:68:64:d2:50:d5:29:0b:2b:85:51:98:dc:
         c4:5f:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:51:08 2025 by rpki-client