Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5b33bf37-d11a-32be-9139-01c4b805f5ed.roa
File:                     5b33bf37-d11a-32be-9139-01c4b805f5ed.roa (raw, json)
Hash identifier:          E1MHd4eE7ufBXeOaKRHvwG8w1DGJWso6SuvnYj8TmvQ=
Subject key identifier:   11:D7:89:D9:13:0B:25:BC:06:69:EE:4D:50:8C:E8:00:05:23:C2:26
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858498FC9BB112EAC613F6FD50A00
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5b33bf37-d11a-32be-9139-01c4b805f5ed.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     54198
IP address blocks:        2605:d6c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:bb:11:2e:ac:61:3f:6f:d5:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=01048d34-13dc-4bd6-9db4-037a3a5dfcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:11:20:82:b7:d7:77:a5:4e:8b:8f:e0:af:0c:
                    2e:c5:49:0c:8c:f4:89:5e:a8:c6:68:a5:e8:64:6b:
                    fd:4b:bd:20:f7:14:0d:d3:c4:e2:51:b5:7d:90:3f:
                    b8:6f:13:44:85:e2:64:80:17:69:6f:2f:7c:8d:37:
                    76:ef:c4:fd:b8:ba:00:6e:05:60:15:0b:a9:e4:38:
                    6e:08:5d:f0:5a:33:41:e2:35:13:a5:9e:a6:45:88:
                    bc:d9:76:92:77:32:e1:bd:d5:e9:e8:bd:7f:a8:ed:
                    11:8d:14:99:be:ae:15:d5:5c:7d:a1:26:39:55:4b:
                    87:f0:cd:b7:44:10:e4:65:37:08:c3:d5:f2:55:59:
                    cb:cf:98:4f:1d:dc:30:7b:99:e4:48:71:a0:19:dc:
                    79:68:95:76:8f:1a:0e:2e:ad:b3:d4:0f:99:02:72:
                    49:34:f3:2b:b7:a3:b0:0c:9f:18:ea:10:0b:ac:36:
                    05:13:3e:cd:8e:05:98:f3:3e:cd:91:6b:3a:84:58:
                    3c:f6:94:a9:ed:5e:d1:12:20:4b:8e:34:9d:bb:3c:
                    dc:c4:cb:f3:d6:41:f2:04:c9:5e:1c:48:22:c9:35:
                    c3:72:66:76:47:2a:09:64:f9:15:cc:64:56:ee:98:
                    ea:9f:60:53:43:a5:fc:aa:c0:e4:15:82:eb:d9:6f:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D7:89:D9:13:0B:25:BC:06:69:EE:4D:50:8C:E8:00:05:23:C2:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5b33bf37-d11a-32be-9139-01c4b805f5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:07:ad:3b:f8:1b:79:f1:5d:10:8e:a3:12:df:26:0d:f0:df:
         02:33:0a:f6:bc:b3:ef:3d:15:34:88:93:c5:e7:fb:d0:be:cd:
         8d:ce:eb:d1:9b:b1:fb:95:79:b4:9e:4b:b2:e0:c8:4f:16:7c:
         57:33:f9:f4:48:1d:70:dc:a8:de:98:62:62:d1:69:09:92:cc:
         b0:0d:a4:ab:80:aa:ef:bb:1f:fe:98:76:3e:8f:b7:0c:33:7e:
         b8:ea:ee:3f:94:36:1e:99:bf:bb:df:09:f7:b8:9b:fc:4e:1a:
         2a:41:aa:31:42:5e:96:46:66:3d:c6:6e:e7:e9:59:3b:b2:6f:
         31:3a:68:39:9a:01:80:ea:4b:3d:35:ff:af:b6:96:e9:c3:f0:
         d9:65:c4:57:a2:66:31:5f:a9:90:be:f9:f4:e0:20:16:f4:b7:
         8f:aa:04:4c:97:b7:6a:d5:e8:33:29:94:8f:c4:cc:c2:d4:99:
         86:04:40:2d:00:23:ba:0a:7a:14:e6:ff:fd:23:18:c8:e5:35:
         0c:e4:fb:9b:c0:a2:a2:d9:97:d5:19:7c:14:74:a5:42:58:7e:
         2e:b9:15:44:2f:7c:4a:20:d9:f1:d2:68:2c:8a:52:e0:7a:20:
         4f:8e:f6:72:15:48:3e:e3:fa:de:b1:7e:26:24:93:0b:6b:86:
         7e:6a:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:10:29 2025 by rpki-client