Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
File:                     06117935-952b-3adf-88ac-10a942733ca0.roa (raw, json)
Hash identifier:          5KPb37m7XNgYQ/w1qhu5zn6IbWuemxJqgoKzRAT6gBk=
Subject key identifier:   30:E0:14:28:AC:7E:0E:20:C7:43:CA:5B:A1:DC:F5:BB:3A:DE:41:83
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F4328584988CF253B6853111EC7B27B00
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     36850
IP address blocks:        2606:f640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:25:3b:68:53:11:1e:c7:b2:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=1a864cb8-0ede-4c43-bbe7-8bf1a5838ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:16:1f:b7:ab:0b:73:20:a6:12:36:6d:01:4d:
                    d8:b6:44:0e:72:eb:9b:fa:e2:0b:e9:84:17:14:bb:
                    a2:99:48:f9:72:28:c8:70:ae:92:5a:46:71:4c:72:
                    37:f1:e4:bc:2b:70:37:fe:24:e1:62:2b:10:22:e9:
                    69:2b:14:76:47:59:41:5c:8a:5d:43:4b:92:9f:cf:
                    df:8b:79:88:8e:3f:5e:30:57:5d:3a:f4:75:37:ce:
                    a0:24:90:57:3b:78:12:94:44:36:7e:bc:7e:aa:ea:
                    c8:4a:29:77:2d:62:74:b0:f6:f5:fe:fa:3f:e0:ce:
                    ff:02:ef:32:1a:82:1e:8b:17:1c:5f:53:79:aa:0e:
                    eb:79:fc:84:1c:08:4d:a0:88:f9:6b:34:38:a4:0c:
                    b4:01:7a:87:6d:3b:64:cc:43:e3:bc:7a:f6:f0:9e:
                    8c:bf:d4:14:8f:77:bf:12:6c:c7:cc:6c:f7:4a:cd:
                    6e:c1:1e:79:05:21:5f:10:ab:da:94:dd:bf:7e:02:
                    bb:9c:86:54:fc:f0:db:a2:db:94:c0:76:74:62:f2:
                    63:5c:8f:4a:71:e3:18:8e:0e:e3:d5:c8:f1:e3:47:
                    c2:14:ca:70:96:41:03:b2:3e:ba:2f:cf:92:7e:b1:
                    fc:4d:41:6f:da:f0:02:ec:c9:bd:db:28:30:8c:32:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E0:14:28:AC:7E:0E:20:C7:43:CA:5B:A1:DC:F5:BB:3A:DE:41:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/06117935-952b-3adf-88ac-10a942733ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:e8:ad:21:83:46:42:40:11:a1:0c:82:05:17:00:c4:54:32:
         6f:48:5a:4c:81:7c:76:eb:8c:3d:61:ba:26:47:4f:4b:c1:67:
         f3:f1:ed:ce:7c:2d:93:7d:b7:cc:e2:3e:1a:0d:8f:2b:38:3f:
         c3:79:90:97:63:58:c4:be:dd:0e:09:d0:60:02:bd:3c:ea:77:
         15:10:0d:75:32:51:88:ce:06:08:f7:ca:ed:61:b1:03:4b:ff:
         26:92:0c:c6:a3:59:29:cc:86:62:25:ff:9f:7c:fe:6e:5b:60:
         90:ad:cc:87:cf:ef:9b:82:11:0a:bc:cb:b0:c7:1a:c8:af:5d:
         58:0c:bf:31:54:1c:9c:94:1f:7c:6e:18:9d:1d:7e:63:f0:b5:
         39:da:eb:75:60:3c:c1:21:b2:21:3c:60:42:a2:bd:e4:42:99:
         85:60:b4:67:9c:94:ca:6a:05:ae:61:77:b9:b6:a5:67:ae:e5:
         9f:63:4c:bb:43:cd:b7:3b:95:45:95:74:a2:7e:c4:17:f0:0c:
         93:c6:13:4a:b1:2c:97:fa:b0:de:4a:3e:f5:44:e2:f8:7c:77:
         24:e3:aa:b0:e0:2f:d8:73:0d:7e:d9:57:38:9f:4b:f4:00:ec:
         1e:7f:05:1c:01:ce:5a:6d:40:3e:05:14:2d:c6:1a:9a:d3:fe:
         bb:2c:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:32:01 2025 by rpki-client