Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e604844e-6771-382e-9607-2068e2fe75d0.roa
File:                     e604844e-6771-382e-9607-2068e2fe75d0.roa (raw, json)
Hash identifier:          AkSe+6JJxp1iPn6JhWMwPLPDi74xI9/ABPSRZbNlRug=
Subject key identifier:   EC:FD:A6:69:42:DF:FD:5D:EC:2B:09:C9:B7:C4:48:CF:0C:33:57:7B
Certificate issuer:       /CN=3cd40041-6571-4f30-b76a-4746a4c2d957
Certificate serial:       010D0C9F43285849C4D4BEDE06CEA0FC4A2A0000
Authority key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e604844e-6771-382e-9607-2068e2fe75d0.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     206885
IP address blocks:        2620:13e:5000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:be:de:06:ce:a0:fc:4a:2a:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd40041-6571-4f30-b76a-4746a4c2d957
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=f1ec158f-113e-4153-9310-9da1e10ee507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7c:18:9e:d2:89:3f:2b:5d:1d:1b:84:40:3f:
                    e3:96:2d:15:dc:5c:43:76:8c:0c:c3:54:e2:1e:5b:
                    36:dc:76:2b:92:29:02:f0:87:04:b5:3b:25:a2:38:
                    e0:be:4a:0b:94:9b:9a:1c:85:d6:ff:a1:12:9d:8a:
                    23:ce:33:89:21:45:26:f7:e5:0a:71:13:10:dc:e0:
                    d8:ad:31:2f:ce:25:a5:20:2e:4b:6b:70:66:e2:31:
                    ef:2d:b5:e3:1c:42:4d:de:b3:cb:b9:25:ee:16:af:
                    af:f0:7d:ef:a0:0c:b0:e5:d1:5f:58:7d:01:ee:23:
                    29:42:95:82:ca:78:77:23:9c:a6:ca:f9:cf:38:81:
                    9c:f1:65:e9:4f:54:af:61:be:31:cc:0a:97:12:58:
                    9a:c8:82:91:93:8c:e7:54:02:a7:2c:09:21:84:be:
                    72:cf:e3:e0:62:a3:f3:c5:2d:72:05:5a:0c:7b:94:
                    91:c1:67:06:45:05:d7:d2:fb:4b:99:e5:76:63:b9:
                    25:ba:21:01:10:01:25:b5:ab:b2:da:b1:bd:88:48:
                    ac:c8:f2:7c:b5:f0:9d:85:b1:38:0a:82:ae:62:5a:
                    38:20:bf:87:57:5f:f9:fc:c1:4a:d6:9c:0c:17:a4:
                    13:33:92:7f:fd:34:3d:60:72:29:0f:4b:9a:31:cf:
                    bc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FD:A6:69:42:DF:FD:5D:EC:2B:09:C9:B7:C4:48:CF:0C:33:57:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/e604844e-6771-382e-9607-2068e2fe75d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13e:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:fa:e4:9d:7c:b5:63:0d:32:58:25:3a:cb:78:f8:da:40:17:
         ea:f2:bf:21:38:a1:4f:ee:77:19:b4:1f:69:72:b0:98:0a:34:
         00:52:b6:1b:61:6d:ca:42:2d:54:0f:15:bd:2e:1c:a4:7b:7a:
         12:ed:da:92:fc:d8:cd:17:4f:1a:2e:a1:25:b6:31:c5:6c:43:
         b4:45:e9:80:bd:26:79:5b:1f:e7:eb:43:c4:1d:7a:53:7b:53:
         dc:e7:2a:60:d9:ea:17:75:e4:2f:ea:7a:54:a0:0b:2f:44:ed:
         cb:7f:e4:c8:b3:77:f1:12:d8:e1:b6:ec:1f:98:dd:b6:6e:8d:
         a7:50:d2:fd:10:16:0d:78:c6:84:6e:ca:52:07:00:13:c2:68:
         f4:d1:6d:ee:a3:35:d6:3f:cc:97:22:dc:7f:7d:9f:81:28:3d:
         7f:a6:f3:05:27:c4:93:4c:53:cb:e3:57:df:08:ac:01:f6:f2:
         ea:aa:9e:fe:df:d0:33:23:4f:e0:72:42:81:15:ca:32:57:12:
         bb:31:4c:6f:95:46:62:45:6f:94:14:65:c6:16:c7:09:72:bf:
         b8:f0:10:d1:83:3b:6a:d8:d3:fe:c0:4e:a8:c9:92:00:3a:65:
         6f:82:e2:b7:39:38:ad:d7:14:f8:5c:bf:5b:c4:eb:42:3c:fd:
         e6:45:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:48:35 2025 by rpki-client