Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa
File:                     de9871b6-c06a-3910-8be5-7c2c3df1b317.roa (raw, json)
Hash identifier:          NVwymEkPhBStwWvNBSMNJHnseVdP709rgwG/EchO5ms=
Subject key identifier:   6F:2C:0F:AA:F5:57:4E:22:1F:23:1F:EE:3B:4A:9A:BF:97:E3:43:8C
Certificate issuer:       /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial:       010D0C9F43285849BB0F75AC8DF01EBAA1E84480
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     7029
IP address blocks:        2607:340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:75:ac:8d:f0:1e:ba:a1:e8:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=05c83e1b-78cf-44c4-a55c-71c00baba43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:f1:25:21:9e:e1:92:7f:7d:78:3b:f3:32:
                    8f:78:a0:34:a2:fe:00:5c:3d:7c:7f:14:04:ed:5f:
                    91:43:5e:57:94:e2:42:b5:ed:ac:7e:14:c0:0f:a6:
                    a8:79:80:80:81:9d:f3:79:63:71:62:76:76:7e:a5:
                    1a:f6:52:eb:59:a2:91:20:87:97:9e:a7:ad:c2:cd:
                    01:f5:b1:5f:3f:46:92:43:b8:ee:7e:dd:dc:ad:09:
                    84:cd:72:e3:ff:86:38:1e:a2:34:e3:32:e4:84:d4:
                    ff:65:f7:54:3f:88:54:01:8b:35:b1:8c:38:e3:a7:
                    bb:b6:d9:f3:bd:17:6f:4b:72:87:9a:5b:4f:c7:1e:
                    80:e2:be:bf:71:01:b3:0f:19:7b:65:35:74:04:72:
                    52:aa:6c:37:45:67:b2:8b:e9:a9:9d:dd:d6:fd:96:
                    82:38:13:fe:20:21:43:fa:f0:f4:29:45:fe:7c:f2:
                    b4:39:c8:6a:f4:64:5f:8e:7c:30:9e:be:df:f2:51:
                    b7:7f:f3:0c:5a:51:18:ff:b5:d7:a9:84:bf:4e:47:
                    32:ab:d8:f3:e6:68:d5:6a:7a:6c:f3:5b:3c:0f:62:
                    21:4b:5f:80:f9:2f:7b:c3:db:3d:37:cb:a7:ee:ac:
                    ee:b2:60:b8:d4:97:6d:0a:a5:c3:09:b5:a5:10:da:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2C:0F:AA:F5:57:4E:22:1F:23:1F:EE:3B:4A:9A:BF:97:E3:43:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/de9871b6-c06a-3910-8be5-7c2c3df1b317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl

            X509v3 Authority Key Identifier:
                keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:cf:c3:5f:01:b9:13:48:4b:ee:47:3c:d3:4a:9c:0a:13:3d:
         b8:64:a7:eb:2f:ab:b9:0a:d0:cb:00:08:11:8a:f8:e1:d6:6c:
         a4:2e:03:c4:c5:51:f6:95:3c:a6:36:d6:dd:6e:5b:44:24:4e:
         e5:58:73:17:07:5a:13:4d:a2:0d:78:0b:90:4d:a6:b4:0d:26:
         e6:7d:8b:f5:c9:54:51:81:63:ab:ee:4a:9e:68:45:31:81:3b:
         a5:13:10:88:d3:58:58:e8:03:d5:ec:7e:fd:63:a3:08:4d:d1:
         3c:4c:80:c9:da:3e:fc:b3:d0:9a:28:0f:70:27:c1:28:61:29:
         13:12:f7:86:97:0f:f3:5a:0d:03:72:6d:5f:86:a5:09:81:e3:
         70:c0:6d:68:69:da:86:e8:42:19:79:42:24:2a:ca:3b:ac:41:
         ba:fd:f3:2c:8d:62:e0:b0:10:0f:e4:f8:93:96:0d:63:5a:e9:
         65:0d:b2:ea:46:b8:b9:30:91:7d:c1:15:45:c7:0b:fc:9c:c4:
         f3:0a:76:96:e1:61:eb:07:7c:62:7d:8f:8f:a9:03:4b:75:b8:
         4d:ab:b6:96:01:f7:f7:ee:73:a6:8a:ce:86:b7:dd:7f:b6:75:
         21:a3:fd:a0:18:2a:52:94:df:e8:90:fd:55:e2:50:71:c0:57:
         45:31:38:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:41:51 2025 by rpki-client