Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/7e78094b-5975-3917-802d-0c9f6b97e478.roa
File:                     7e78094b-5975-3917-802d-0c9f6b97e478.roa (raw, json)
Hash identifier:          KXdVnTYPgHmArBmtpVSTBm30cKjsnIersB6jBWyp33I=
Subject key identifier:   4E:13:AB:52:B7:B8:71:C5:ED:79:6E:DC:9D:83:7E:4D:58:79:AC:F8
Certificate issuer:       /CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
Certificate serial:       010D0C9F4328584A1E2AACC46C6DC1FF0E984E40
Authority key identifier: 32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/7e78094b-5975-3917-802d-0c9f6b97e478.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     55194
IP address blocks:        2604:5480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:ac:c4:6c:6d:c1:ff:0e:98:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a7fad8-dd78-48ee-b80f-33c16bd717de
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=2731fc05-2ea7-4a12-b26f-d285f508b42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:77:5e:7b:a3:01:16:c4:b0:8e:3f:39:e7:
                    ac:a2:51:8f:97:2f:51:1b:88:ad:e9:7e:c3:69:c5:
                    07:27:83:86:72:83:06:f3:13:7d:d9:50:86:2d:8a:
                    13:2d:ff:5b:18:2a:37:d7:58:da:4a:cb:8a:69:e7:
                    85:a2:df:93:30:92:29:cc:0f:13:f0:bb:ac:e8:86:
                    6f:0c:1c:b2:c2:c9:9f:de:bb:98:dd:72:b6:40:e1:
                    ce:a1:0d:57:b6:c5:73:d2:0e:03:2e:b9:bd:be:93:
                    95:d2:54:68:29:af:a3:0a:c7:62:46:88:e8:b9:22:
                    33:fd:e0:c9:f3:b4:16:3a:75:7f:15:33:e4:9f:b2:
                    8a:ce:34:4d:96:c4:ea:42:8d:4f:1c:54:54:dc:da:
                    d3:9f:1f:c9:d3:9d:69:59:f6:b2:13:b8:79:eb:6c:
                    5b:27:61:c9:b7:64:27:78:dc:57:a1:bc:98:f7:8a:
                    e6:b7:e4:56:b2:13:f1:2b:f0:72:6a:ee:3d:d2:e2:
                    26:06:92:3e:42:b5:13:e1:87:08:6a:25:41:3e:19:
                    48:93:e6:ec:1c:1b:03:91:d2:b6:75:66:7f:13:e4:
                    4d:7e:32:28:b6:a7:c1:fe:d3:d1:99:03:3e:e4:42:
                    f2:49:fd:9d:cb:3a:74:68:bf:88:61:93:8c:3a:df:
                    cd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:13:AB:52:B7:B8:71:C5:ED:79:6E:DC:9D:83:7E:4D:58:79:AC:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/7e78094b-5975-3917-802d-0c9f6b97e478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de/74a7fad8-dd78-48ee-b80f-33c16bd717de.crl

            X509v3 Authority Key Identifier:
                keyid:32:83:79:E9:5E:97:FC:E4:82:97:20:3B:F0:D7:1D:C2:34:93:AF:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/74a7fad8-dd78-48ee-b80f-33c16bd717de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:cb:ff:3a:f5:68:a1:78:b5:8e:c2:e8:7c:2f:3b:a6:24:2a:
         d2:ca:ec:28:ec:1d:27:81:6b:15:40:27:44:4c:28:5c:bb:47:
         c9:5a:67:98:f2:43:3a:60:0b:68:48:51:25:c0:40:95:f4:a8:
         21:8d:21:79:70:0a:f5:08:0e:00:7d:d7:3f:28:1d:b7:fb:33:
         ae:5c:21:74:27:ac:25:54:4b:b6:a5:8b:e7:29:0d:b0:2b:ed:
         6d:ea:51:d8:1f:72:56:bc:79:8e:c9:24:88:b8:28:14:61:a3:
         52:01:fd:14:8d:67:73:5a:2e:b3:e4:d9:aa:90:2a:78:58:a9:
         10:a2:1b:b6:5a:63:17:c7:b5:2d:76:cd:d7:b9:19:ec:64:e1:
         bc:34:31:0e:9a:04:23:40:bb:16:98:d3:1b:36:0d:48:f5:52:
         c2:64:9b:80:09:fe:c0:82:b8:09:1c:88:0a:2a:c1:72:e3:cc:
         5b:1a:5b:b8:01:b6:b5:e4:47:56:8e:2e:2a:e5:88:30:ea:3e:
         4b:83:24:33:5c:85:3e:47:e5:f1:4e:f1:4f:33:3e:7e:ea:07:
         95:13:2e:32:bb:e5:d0:57:a1:4b:ae:99:6b:bb:dc:51:70:99:
         22:80:d5:5b:57:99:fa:01:ad:00:e3:8b:1e:24:91:54:00:20:
         b4:50:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:39 2025 by rpki-client