Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/dc8d8721-e59b-3a75-982c-6fe3ca0f4cea.roa
File:                     dc8d8721-e59b-3a75-982c-6fe3ca0f4cea.roa (raw, json)
Hash identifier:          jNYPEiRQKTLqYnMRytgTUVJKFEK2ImPrq4LyvcAMa0o=
Subject key identifier:   6E:C6:FE:3F:29:3F:E4:A1:7D:B2:20:79:14:B3:5B:54:B2:C4:8D:30
Certificate issuer:       /CN=9bfe0eb0-0689-4c02-9a46-078ee028d631
Certificate serial:       010D0C9F43285849B6DF5A58AFF4F6F03E3D6C80
Authority key identifier: 17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/dc8d8721-e59b-3a75-982c-6fe3ca0f4cea.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     3851
IP address blocks:        2607:fe78::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:5a:58:af:f4:f6:f0:3e:3d:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bfe0eb0-0689-4c02-9a46-078ee028d631
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=698cbf8b-eb79-4b34-9298-22aa7a53022c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a3:e6:84:11:08:20:52:be:6e:64:4f:83:03:
                    26:a1:44:08:01:bd:f8:e0:6c:d3:83:7d:68:22:06:
                    d4:e8:85:fc:e5:db:66:62:4f:f8:21:c5:a0:2e:32:
                    f4:5f:40:be:19:ce:dc:48:d0:7d:54:f4:e1:2e:f4:
                    e9:d4:0f:9f:f0:ff:0e:0f:25:ea:10:4e:5d:c9:9f:
                    50:d3:a9:6b:b8:da:59:70:f9:b1:b7:4a:e9:62:16:
                    cb:c3:ec:10:bb:fa:6d:cb:56:ac:ab:76:6b:56:b7:
                    ea:7d:26:0f:19:71:b1:ab:cf:30:65:b3:38:ee:c1:
                    53:32:ef:77:d6:a9:e7:c4:2f:1f:8c:a7:7c:75:5b:
                    9e:de:95:08:07:2d:8a:11:f9:12:f7:ca:a1:09:5e:
                    e2:51:38:45:94:e0:8b:ff:e7:41:28:4c:db:0c:78:
                    11:06:24:cb:ce:f1:6c:40:f6:00:da:8d:4a:4c:82:
                    41:75:8b:15:8b:d4:cf:7b:18:38:63:54:a5:74:95:
                    87:cf:ef:cc:34:94:dd:2e:df:5b:b8:d8:5a:79:f9:
                    24:cb:1f:5f:96:b1:53:4a:f5:16:a1:a5:5a:b1:4e:
                    2b:54:61:3a:12:30:2e:b7:f0:b0:c2:8a:1b:13:31:
                    9a:c5:03:8f:ec:50:bf:3b:d2:70:44:75:d3:99:ab:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C6:FE:3F:29:3F:E4:A1:7D:B2:20:79:14:B3:5B:54:B2:C4:8D:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/dc8d8721-e59b-3a75-982c-6fe3ca0f4cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.crl

            X509v3 Authority Key Identifier:
                keyid:17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe78::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:0e:af:2a:54:e6:e3:31:5a:a7:b5:f2:36:ef:98:43:f6:f5:
         44:1a:dd:58:ab:58:45:93:a9:49:87:07:f3:00:1f:48:8d:8c:
         32:68:1a:e6:c8:5e:77:89:f4:55:82:14:f2:6c:19:83:5c:bd:
         c1:bc:2b:cb:90:c7:72:f6:d6:dc:62:0a:c6:5b:83:04:11:22:
         8d:0b:e9:d0:83:1a:92:9f:38:21:67:45:b5:30:bc:c8:aa:cb:
         bb:be:08:da:61:81:32:0a:82:4a:a1:ad:ad:19:3b:64:45:99:
         34:8d:d7:2f:94:30:5c:80:f1:d2:76:4a:ec:6e:f3:14:d2:d5:
         90:74:1f:c8:61:f0:46:4b:92:50:92:76:48:c8:ef:1c:7a:f1:
         f4:25:bf:56:26:f2:e1:5c:88:ca:e8:2d:95:c4:ab:9f:81:e4:
         7a:c8:18:cd:6f:41:f3:63:e2:94:fd:b7:5d:1d:5b:e7:df:f0:
         b7:31:10:1b:1e:b2:7e:a7:43:02:e5:b3:9b:9d:53:51:81:fc:
         85:d0:97:2f:35:25:bf:73:40:39:6d:3a:6e:e5:2b:ff:69:c0:
         0c:aa:44:de:90:cd:ff:5c:c3:36:69:92:ea:04:b4:be:a5:2e:
         e7:8a:a3:8a:bf:b4:a5:f1:85:c8:05:95:f9:e8:65:42:40:0d:
         66:30:70:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 01:09:34 2025 by rpki-client