Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/047e6206-71ba-3e6e-b73b-d50215b24061.roa
File:                     047e6206-71ba-3e6e-b73b-d50215b24061.roa (raw, json)
Hash identifier:          rivD5wFj6x3Iyz9nGOc+he7xRyDFajKS8TOrwfbKOws=
Subject key identifier:   CF:85:92:01:BC:5A:84:D1:A1:05:67:97:BB:CA:C6:8D:BA:FE:C8:BD
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F43285849B9AA08759504FC60A1E24400
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/047e6206-71ba-3e6e-b73b-d50215b24061.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     5645
IP address blocks:        2607:f2c0::/32 maxlen: 32
                          2607:f2c0:9900::/40 maxlen: 40
                          2607:f2c0:9a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:08:75:95:04:fc:60:a1:e2:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=a7e08d1c-d762-4a07-8ef7-24e894a90526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:65:2d:aa:06:a2:66:1b:ad:12:fe:57:59:
                    c7:e2:dc:91:2e:ed:b7:cd:8b:c3:9e:36:38:51:b5:
                    ea:f8:c5:1e:0f:45:50:56:99:92:19:85:be:95:90:
                    54:05:39:04:dc:24:4e:18:55:de:21:ba:5c:87:58:
                    df:6e:85:57:11:a8:f8:d1:ec:5e:39:65:a4:65:fa:
                    7d:a7:31:fd:20:5e:41:63:15:fe:04:f1:f7:c9:1c:
                    0c:49:e2:90:32:7e:fa:68:64:1d:92:35:22:ae:6b:
                    3c:ae:e2:83:08:96:63:8f:ef:23:ed:62:b9:a3:e8:
                    dd:19:09:ae:83:08:0b:f8:98:45:e0:41:80:ae:c3:
                    9c:cf:a1:c0:14:76:f5:80:34:50:46:bf:f7:fe:82:
                    32:ba:ee:da:bc:7a:06:71:9d:e4:33:08:5d:c7:a6:
                    2c:e1:d0:a5:ed:f2:d0:7d:38:d3:e8:99:be:8c:08:
                    c5:7b:eb:60:c6:d9:9b:18:ba:a7:15:07:66:3a:b8:
                    93:ce:62:76:b9:54:1c:d4:58:70:eb:77:18:2e:84:
                    3d:a0:20:c4:a5:d8:58:5a:66:a8:b5:dd:af:8b:77:
                    9d:70:b1:27:81:ce:69:ff:4b:35:59:52:cb:11:4b:
                    b7:70:a0:9d:a4:f8:29:39:07:6c:3f:b9:f1:a3:7c:
                    64:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:85:92:01:BC:5A:84:D1:A1:05:67:97:BB:CA:C6:8D:BA:FE:C8:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/047e6206-71ba-3e6e-b73b-d50215b24061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:3c:2f:a9:6e:e0:5e:bd:a2:42:84:a8:a2:46:ec:a2:5d:
         9b:25:00:4f:51:03:65:e8:88:bc:f0:13:b8:b6:35:d6:47:ff:
         42:0f:df:31:89:5d:e0:67:8c:7b:bb:6f:da:5f:0c:af:48:01:
         d4:42:b4:93:2b:84:82:e5:11:e0:38:35:c7:71:2b:f3:ce:86:
         58:21:19:ab:6f:fb:aa:e8:43:d8:53:bb:9e:aa:a0:78:27:22:
         91:69:60:a1:38:6d:ea:e8:1d:c3:f3:33:da:5e:11:fe:80:43:
         b3:6e:30:4d:a8:97:d2:db:6c:63:d1:c9:13:ac:2d:ef:77:f9:
         68:74:1a:19:7e:9d:09:6b:c0:48:af:31:40:bf:4c:ec:e0:ea:
         b0:f5:8f:0f:e5:bf:a0:8f:18:58:88:4c:62:95:ae:61:a8:cc:
         69:0d:5e:d9:cc:51:28:c8:16:87:9b:57:aa:68:26:1c:ec:ac:
         64:8b:40:3a:55:a5:09:a6:58:5a:9b:09:b2:bf:57:73:56:5f:
         d8:30:84:09:01:3a:e3:15:bc:eb:3a:79:85:8d:86:5b:79:7c:
         73:40:5a:83:18:d4:9e:af:dc:d6:e4:a3:13:43:d7:8f:ac:8f:
         02:20:2b:15:6b:41:f2:af:aa:74:97:a4:80:5e:ce:b1:b0:6e:
         4a:50:f5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:49:31 2025 by rpki-client