Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa
File:                     17556c0a-f699-393f-934b-8c8b0db969e9.roa (raw, json)
Hash identifier:          Wffq4qykItuOhH8//KMDywRMqxxsluyVo46X5parihw=
Subject key identifier:   4D:E3:74:E7:55:9E:07:C4:C7:5A:03:81:B9:8A:1B:7A:39:C7:2E:CA
Certificate issuer:       /CN=e9e45e6b-55e8-483f-8afb-10fedd49d809
Certificate serial:       010D0C9F43285849BB0F6A6A380B52FED2040900
Authority key identifier: E5:C4:0A:0A:17:E9:AC:96:7F:BA:29:F5:72:5A:71:54:9E:04:0D:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     18683
IP address blocks:        2604:b680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:6a:6a:38:0b:52:fe:d2:04:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e45e6b-55e8-483f-8afb-10fedd49d809
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=9c7e551d-1edc-4d4f-b939-21fb109fb136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:b5:ad:c4:f5:23:97:26:5a:cf:42:82:18:
                    57:b1:18:aa:74:2d:1b:28:a7:20:ba:a8:10:5b:cf:
                    df:c5:ab:f1:2d:ef:65:f1:f2:90:1b:60:6f:63:69:
                    69:8e:1e:8f:b6:3c:77:41:44:12:19:2e:67:f5:45:
                    7a:18:52:0e:c8:11:49:3d:b4:e8:07:e1:64:f5:1e:
                    f0:08:31:3c:11:df:a7:20:48:1a:2d:56:78:50:8b:
                    12:85:7e:97:5d:53:5b:e9:94:82:c9:96:ac:2d:d2:
                    dd:88:53:14:f4:0c:9b:dc:8b:58:8d:54:f3:e8:f2:
                    da:51:36:57:3d:ad:c1:5d:88:8b:48:10:3f:e2:2e:
                    77:02:27:b5:2d:8d:59:47:b4:8e:6f:87:35:f8:07:
                    de:b7:db:80:e7:bf:e7:6c:9c:63:51:4a:68:2d:79:
                    b0:c4:56:71:12:af:6e:23:97:f9:d4:7a:82:29:dd:
                    db:c6:9d:9d:b3:3c:60:8f:5f:e9:9b:4c:d4:59:2b:
                    d0:22:8d:c0:b6:e4:a9:63:61:6d:13:9d:8b:e2:d0:
                    e9:97:71:99:fa:0a:b3:d1:ea:5b:73:97:4f:99:dd:
                    ac:e7:0b:0f:10:eb:7b:f3:ef:bd:83:c8:6a:db:03:
                    0d:f6:9b:a4:5a:18:35:9d:af:72:84:44:b3:d9:42:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E3:74:E7:55:9E:07:C4:C7:5A:03:81:B9:8A:1B:7A:39:C7:2E:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/17556c0a-f699-393f-934b-8c8b0db969e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809/e9e45e6b-55e8-483f-8afb-10fedd49d809.crl

            X509v3 Authority Key Identifier:
                keyid:E5:C4:0A:0A:17:E9:AC:96:7F:BA:29:F5:72:5A:71:54:9E:04:0D:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9e45e6b-55e8-483f-8afb-10fedd49d809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:eb:16:6a:01:c1:67:a0:1a:39:20:e1:39:29:b7:94:a7:d3:
         23:a6:3b:91:0f:cf:10:49:bf:5c:63:23:4f:0a:75:df:5f:8b:
         c8:a7:35:dc:b0:2a:09:97:9b:aa:98:99:3b:ad:37:ad:8d:16:
         50:07:5b:fe:93:5d:a2:b2:b2:27:e9:7e:fe:3e:95:31:02:a6:
         25:d2:a5:60:d1:9d:bd:3f:f0:27:af:b5:3b:85:01:b2:87:b0:
         7f:a3:32:e5:bd:e7:03:16:6b:07:72:47:24:66:14:72:f3:3f:
         03:e6:58:c8:1e:af:3f:dc:f5:a6:75:6e:cd:72:10:d1:12:61:
         c3:6d:ad:f4:ec:25:0f:9c:1c:9c:08:33:38:80:9e:d5:92:50:
         50:29:4c:46:51:a8:a7:03:33:0b:63:60:95:93:a4:63:fd:b7:
         c5:03:89:e5:40:7d:c3:57:1d:ef:e3:0d:81:c1:48:35:65:bf:
         21:3e:3a:91:3b:ea:e8:03:8b:b5:af:6f:98:c2:94:b7:b7:33:
         a5:15:e3:c5:bf:03:9c:dd:8f:15:4e:de:98:c2:21:38:6c:8f:
         26:57:5d:ab:27:fe:40:26:1f:24:9f:92:65:0b:05:e1:14:14:
         b0:32:b8:86:66:5d:83:4d:cd:70:75:a6:6e:48:ed:75:65:96:
         6f:a3:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:36:39 2025 by rpki-client