Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa
File:                     e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa (raw, json)
Hash identifier:          edAQMk14pjlIrYQdVAIXlfsTNyvQIlbVVY+09ewJs2M=
Subject key identifier:   C8:8E:F6:E0:A4:90:1B:5B:AE:AA:45:A3:B8:62:58:FF:57:15:4A:43
Certificate issuer:       /CN=219560ff-1a32-4424-9e54-f95df54ecc84
Certificate serial:       010D0C9F43285849CA0756C5A231A1704591C3C0
Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa
Signing time:             Thu 08 May 2025 21:41:54 +0000
ROA not before:           Thu 08 May 2025 21:41:54 +0000
ROA not after:            Wed 06 Aug 2025 21:41:54 +0000
asID:                     5739
IP address blocks:        2607:f5f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:07:56:c5:a2:31:a1:70:45:91:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84
        Validity
            Not Before: May  8 21:41:54 2025 GMT
            Not After : Aug  6 21:41:54 2025 GMT
        Subject: CN=d1d5fcb2-9f18-4e2e-b8ed-b48866977116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:52:13:16:65:62:ee:a4:c1:a0:70:68:1a:d3:
                    ae:1c:08:3c:84:61:95:65:26:5d:cc:2b:67:5a:57:
                    74:56:1c:61:60:2a:23:ad:38:48:24:7f:39:d0:38:
                    ce:94:64:bd:7d:40:6f:f5:1c:9a:a2:54:c4:35:64:
                    08:0e:14:46:80:12:ae:21:cf:f0:ca:29:c7:33:47:
                    a4:f0:17:02:ba:c5:28:6e:10:c5:b1:23:cb:f6:c1:
                    eb:0a:b3:fd:6f:79:d8:21:e8:a3:da:4a:79:e3:ca:
                    f5:5a:e1:91:6a:ac:7e:4a:7f:2e:bc:e9:2b:bf:10:
                    27:06:8a:97:84:b7:aa:54:7d:44:ef:a6:3e:0b:62:
                    2e:e5:f4:9a:62:11:90:68:d8:00:42:3f:9d:c0:3a:
                    96:f5:99:0c:8f:5f:ad:fd:c3:d7:e9:5b:a7:86:cf:
                    5b:cf:de:53:45:33:c1:28:5a:00:88:12:70:e4:41:
                    a7:29:e2:4c:36:81:77:c1:06:ac:1f:3e:1c:7b:21:
                    c5:d1:93:8b:8a:34:23:48:70:ea:f4:ac:cb:18:dc:
                    90:81:ae:d1:de:20:83:7e:de:c1:c2:13:3c:76:82:
                    1d:e5:c4:ff:7e:59:aa:be:75:1f:06:1c:58:a6:14:
                    e0:ae:7d:f2:c1:42:b3:89:af:67:21:bb:79:d6:99:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8E:F6:E0:A4:90:1B:5B:AE:AA:45:A3:B8:62:58:FF:57:15:4A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/e7ce82fa-a1e6-3b25-bc32-8e6cd8da4457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl

            X509v3 Authority Key Identifier:
                keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5f0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ee:ed:02:0b:e3:98:05:49:09:63:0a:6c:e4:1e:26:bd:37:
         6e:ca:49:11:f9:14:2f:df:09:97:74:ab:da:eb:e3:aa:dc:6e:
         e3:3e:6c:8f:1e:f6:a2:82:b3:38:ab:68:1e:0e:e1:aa:cd:6b:
         da:0a:6d:e3:82:69:32:12:e8:08:06:ac:de:1f:12:6c:93:ba:
         36:13:ec:01:87:09:d3:0a:f0:c3:a6:d0:16:56:0c:d1:90:bf:
         6e:d7:fa:91:5e:17:85:94:72:fa:cc:57:26:bc:45:7b:85:5f:
         c4:00:c3:34:0c:77:8d:78:9e:5d:df:0d:79:e9:1d:52:2d:a7:
         7a:88:d2:c7:47:bd:ef:2b:d5:ed:31:ea:ee:84:f9:3e:79:b2:
         56:96:d1:63:de:43:ff:70:e7:be:8b:e6:2f:97:ac:7f:66:0f:
         6c:26:f0:8e:bd:e7:38:84:5e:41:ab:fd:06:a7:ff:4f:af:0b:
         59:80:e1:2e:81:d0:17:ae:f1:d5:c2:0f:39:e7:3c:2b:11:c2:
         44:8f:57:14:1d:b1:e7:77:e3:4e:4e:4c:7d:75:fe:da:b1:6e:
         9c:b2:14:08:ca:6c:6c:f6:52:f0:70:50:ed:fc:26:99:41:d2:
         9b:78:88:eb:58:82:3d:cf:a0:4b:37:ac:de:8f:f0:6a:8f:24:
         3b:1f:2d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:43:10 2025 by rpki-client