Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa
File:                     866cb69c-61bb-348f-b43f-d2139e02ac3e.roa (raw, json)
Hash identifier:          J2cx8FrazSocvuGAx0H1kO9F5w6TNnZgjvJfRozO98Y=
Subject key identifier:   24:3F:72:0F:EA:94:91:27:C0:28:15:C2:61:EC:EB:AF:D3:B7:31:09
Certificate issuer:       /CN=17ca7b45-83e1-4a1c-8713-317adea0e270
Certificate serial:       010D0C9F4328584973DEE27F3DE5AB5FFD126290
Authority key identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        2607:b40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e2:7f:3d:e5:ab:5f:fd:12:62:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ca7b45-83e1-4a1c-8713-317adea0e270
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=26e26f3a-452c-4f74-aff9-d44f67430ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a3:3a:f8:2a:1c:62:67:65:52:82:56:f4:15:
                    d2:44:1b:76:4e:7a:7c:7d:fa:49:78:d7:c0:51:4f:
                    9c:33:e9:6a:9b:5f:05:8d:c2:0b:be:f1:cc:c1:a2:
                    37:28:fa:07:2a:b0:02:93:68:8c:db:cf:a8:fa:d7:
                    65:f7:8a:97:7b:40:76:94:5b:6a:29:de:e6:51:91:
                    2b:ff:2b:35:b9:73:0b:08:36:ca:be:a4:96:cf:35:
                    1f:60:c4:f5:9f:25:45:d3:91:fa:5b:54:b6:94:b4:
                    37:f5:c3:31:df:58:0b:f0:e7:17:e1:b8:72:cc:74:
                    a6:ff:f5:32:37:9b:62:0d:33:6d:9a:ab:65:f3:09:
                    4e:32:55:75:f7:60:e3:22:9e:bc:12:38:e1:3d:26:
                    18:06:e2:f0:c7:02:e0:e4:f5:2f:27:13:5d:c0:67:
                    31:47:44:7e:36:32:c9:63:67:98:5f:a5:aa:b0:40:
                    0e:51:91:be:08:d1:56:b8:ff:59:95:38:f7:f1:2e:
                    6c:a2:14:59:16:73:f8:14:14:a4:3d:50:6d:17:81:
                    43:a6:d6:3e:28:05:a1:9c:a7:6e:15:ea:89:5a:6f:
                    36:78:b1:2d:f9:80:91:26:61:07:bf:6a:5e:64:f6:
                    bd:ef:de:cf:6b:b2:4e:ab:18:61:4a:99:b2:a8:78:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3F:72:0F:EA:94:91:27:C0:28:15:C2:61:EC:EB:AF:D3:B7:31:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl

            X509v3 Authority Key Identifier:
                keyid:5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:89:3b:c5:64:68:51:9d:60:14:51:13:80:0f:07:69:99:a6:
         d7:6c:ff:07:51:cb:ea:bc:66:59:53:ad:da:05:f6:ec:1a:cb:
         cb:df:18:4b:b2:7e:90:18:be:3e:69:4c:24:17:25:6c:59:2f:
         71:cd:66:e7:88:14:35:3b:53:57:a6:c5:1f:e7:95:e1:de:39:
         9a:54:b0:1a:69:1b:cb:e5:13:39:04:00:23:30:52:ca:7e:3c:
         49:d9:87:8c:42:da:b7:b6:7a:0a:c7:c9:d4:14:df:25:3d:0f:
         64:c5:a4:17:aa:74:96:8e:77:4c:06:3c:da:9d:77:1e:38:5a:
         4e:30:ac:92:25:f8:f2:53:a6:67:4b:03:99:97:2f:71:4b:17:
         a0:b6:a1:a8:7e:68:2b:1d:53:7a:21:27:5b:5c:28:10:7c:76:
         9d:36:22:f3:a9:df:f3:03:87:56:40:59:bc:f0:51:7e:4d:a5:
         16:67:e9:61:c6:8c:74:68:8f:01:b2:d7:dd:3e:ef:87:43:ba:
         10:69:5d:d5:bc:82:f4:3d:77:9a:a2:38:87:b2:1e:b8:15:fc:
         78:2a:20:9f:a2:06:e7:6f:b8:4e:12:d7:8a:54:a7:7f:17:56:
         fb:cc:a6:e2:10:0b:df:03:f2:34:8b:88:11:60:27:f1:45:08:
         54:4a:89:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:05 2025 by rpki-client