Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa
File:                     ceda3ed4-49e5-373f-b1c9-7344fce724af.roa (raw, json)
Hash identifier:          RoCaPXMa2kCkDlTHwb4rRbYqzo0lofgmFr9SUSJq+tg=
Subject key identifier:   71:BD:1C:5F:9D:8C:FE:43:DC:29:AB:9F:B7:D3:60:58:42:0E:AB:6F
Certificate issuer:       /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
Certificate serial:       010D0C9F43285849C4D4C6852DF868321B41A880
Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     46539
IP address blocks:        2605:cb40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c6:85:2d:f8:68:32:1b:41:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=dde533a0-f703-4221-9afb-ed910fc934b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:84:bd:3b:01:3f:f9:4c:c2:60:9d:7a:4c:
                    ee:af:86:d3:47:88:76:f7:a9:93:77:dc:1c:48:8a:
                    3b:17:39:d9:63:6d:13:7e:4b:b0:76:62:92:ef:65:
                    80:63:d4:19:f2:8a:36:65:14:34:87:52:78:6b:09:
                    17:62:de:d9:f8:25:99:68:c7:af:ec:0d:2f:4a:be:
                    3c:35:c0:96:f5:f0:9f:06:a9:1b:2d:97:65:5b:cf:
                    72:bd:42:80:98:6a:a3:56:db:88:1f:61:a5:24:b4:
                    52:ac:3a:ee:02:1d:a9:83:f1:60:52:94:6d:d4:c2:
                    49:61:11:83:63:14:e6:04:8a:00:67:23:3c:51:09:
                    70:e9:fe:8e:e9:90:30:77:85:27:c0:f7:f3:10:fb:
                    e8:9c:31:70:20:80:1b:8e:b0:bb:10:ca:97:13:06:
                    ac:70:6f:39:83:40:a6:30:55:27:7f:71:28:b6:9d:
                    eb:78:60:21:43:69:03:a7:2f:8f:c3:0c:57:04:3e:
                    a9:ba:f6:51:9f:da:80:9c:8b:69:66:00:67:01:3f:
                    3d:bf:f1:5a:56:71:78:60:3a:84:67:fb:70:fb:00:
                    aa:1a:6d:17:00:c0:6d:b1:f9:eb:45:4b:81:76:1c:
                    69:28:5b:a2:93:ed:82:db:6d:d0:25:25:b0:7f:13:
                    06:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BD:1C:5F:9D:8C:FE:43:DC:29:AB:9F:B7:D3:60:58:42:0E:AB:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl

            X509v3 Authority Key Identifier:
                keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:cb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:49:d4:aa:7b:18:3e:6a:29:bc:3b:ad:7e:ce:38:b2:a9:c0:
         84:b2:6c:d9:b2:c7:68:78:c4:0a:e8:6e:79:37:a7:81:46:dd:
         14:a8:ce:d8:d3:b0:b8:b8:e9:11:e4:40:bd:81:34:f9:b8:d0:
         18:de:ee:e9:b4:d0:28:13:9c:94:d0:4f:df:07:27:2b:51:9d:
         d6:e4:b6:14:e4:41:a3:cb:14:35:02:91:14:26:0b:50:c2:84:
         59:97:f2:ca:a6:77:48:7a:b0:55:fa:1f:22:d6:a8:08:32:fa:
         09:42:49:0e:99:bd:78:1a:80:ba:c3:10:07:7b:c0:f7:c0:c4:
         f8:08:10:5c:0c:73:3d:b5:e4:71:cc:17:4a:b9:bf:59:5f:b4:
         76:70:8e:60:f7:83:cd:15:12:02:ab:1a:6a:c2:af:53:9b:12:
         2e:1b:80:05:3e:0c:95:1f:b0:f8:65:59:95:ad:1a:3f:39:5b:
         72:55:aa:91:75:d2:c3:38:a8:ca:d1:68:ef:f2:b8:7e:b0:69:
         ed:69:13:1b:86:04:63:c8:10:8a:f9:f7:fb:ef:d9:bc:bb:8c:
         b9:1c:a9:c1:24:e8:8f:ca:2a:8b:03:88:ca:91:d7:3c:19:fc:
         a7:d1:76:73:ec:6d:46:aa:44:6b:04:d3:b7:9d:0c:62:3a:e5:
         59:89:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:23:14 2025 by rpki-client