Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa
File:                     a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa (raw, json)
Hash identifier:          nZPh+c4hbdDtUxYB86N7Tr7m/cS06mlx9qqwKf3wr1c=
Subject key identifier:   12:34:C3:79:CF:62:8C:0A:F7:44:F5:2B:5A:18:1E:9D:E3:9B:5F:73
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849912F4AC10A7D6E58CF2D4D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     7922
IP address blocks:        2601:ac0::/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:4a:c1:0a:7d:6e:58:cf:2d:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=d703b5e5-b171-4bf6-9cf6-81e08930b055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:ae:b4:94:90:ff:39:e5:00:5a:17:50:74:
                    0e:ea:b5:cf:95:0c:f9:6f:9a:ff:45:6f:1f:3a:0b:
                    27:67:5a:4e:f9:9a:25:ab:a1:50:7d:fa:49:f7:f4:
                    20:a7:e5:6b:1b:47:a7:8c:17:8d:c7:a6:4d:11:d3:
                    b1:ac:c5:fb:92:b4:09:38:5b:c1:92:d9:34:aa:90:
                    b4:d6:9a:98:86:13:31:95:94:03:6c:ca:4e:dc:4f:
                    a0:09:82:81:9a:ff:0d:22:36:6f:99:91:dc:e3:52:
                    8c:6a:fc:67:c0:a6:ec:fc:5d:f5:15:ec:3a:1b:0b:
                    00:85:32:3c:cd:44:4d:32:c4:1f:1b:5e:72:d2:40:
                    21:80:9a:c3:c5:fe:ba:fc:b8:42:98:b4:e9:b3:50:
                    49:ae:67:84:43:2d:6f:aa:91:f1:c1:4e:d6:d5:47:
                    16:8e:25:ef:bf:bc:1f:3e:a0:9d:4c:5d:37:8b:04:
                    83:bf:3e:2a:c1:72:3e:60:4b:e4:38:7b:0b:37:8c:
                    d0:2d:24:0a:55:d8:6f:c9:96:f9:e1:9f:26:36:e8:
                    81:36:f3:89:0b:d2:26:e9:9c:0e:bc:4a:1e:4e:cb:
                    4e:7b:63:2d:6a:f6:e9:eb:ba:ae:07:30:58:4e:6d:
                    b8:82:81:7f:2a:9c:88:6a:5f:69:b5:de:9f:3c:db:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:34:C3:79:CF:62:8C:0A:F7:44:F5:2B:5A:18:1E:9D:E3:9B:5F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1efd0d4-f845-32ab-842d-76c2b9ef1eeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:ac0::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fb:c5:c7:55:ee:33:d7:b5:af:33:28:3b:5c:66:fe:76:ab:
         00:22:3d:37:5a:0d:ca:b0:e2:f3:1a:6b:9a:fc:4f:57:f4:c0:
         06:35:5e:3e:8b:10:02:19:0a:ac:6a:48:83:97:23:dd:f8:04:
         e3:b8:2b:31:43:7c:f3:b6:6b:c1:34:89:70:75:cd:1b:33:00:
         9d:37:72:0c:20:90:d3:6b:32:a7:80:42:af:5c:dd:ad:68:4c:
         66:54:e0:29:96:33:5c:8d:e7:8e:a9:95:b8:4c:cc:a5:2e:9e:
         5b:82:16:dd:de:c4:bb:16:35:0a:61:fc:19:03:d4:22:71:0f:
         21:f6:74:b1:24:ac:d0:16:46:ff:64:38:58:3c:38:13:fc:d7:
         0a:2e:64:95:07:76:04:b8:c3:8e:86:12:7d:99:18:4d:32:89:
         89:fa:c2:e6:02:98:7e:08:57:12:56:41:77:05:70:37:cc:79:
         4f:3c:a6:34:eb:ad:8e:82:e7:b5:38:f8:10:56:9b:d7:bb:42:
         e8:bf:c0:94:25:2f:25:24:2f:cd:85:9d:42:dd:e3:ae:cf:59:
         58:65:ca:1e:56:ce:ff:7c:d4:b6:46:b7:8f:f0:3b:72:61:db:
         81:bc:7c:86:e0:c8:ab:8d:68:56:1a:bb:ec:5f:5f:95:09:7a:
         f2:a6:04:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:50 2025 by rpki-client