Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/79b74f89-30ff-3963-ad01-726333c4ea9d.roa
File:                     79b74f89-30ff-3963-ad01-726333c4ea9d.roa (raw, json)
Hash identifier:          i1irOAnLQiYr5dyxNeGzl3YCaGeaGNE/54m1XxWEFZQ=
Subject key identifier:   AE:5F:76:D1:DE:7F:3C:5F:A3:A7:5D:24:AD:D1:6A:89:E0:DE:B4:DE
Certificate issuer:       /CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f
Certificate serial:       010D0C9F4328584A0D6A8D71EA0A8A8F05905440
Authority key identifier: 54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/79b74f89-30ff-3963-ad01-726333c4ea9d.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     1742
IP address blocks:        2607:fb60:2400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:8d:71:ea:0a:8a:8f:05:90:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=3e633676-cae6-4985-a42b-06f662a2c7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:9f:43:53:21:ba:fc:8f:04:0f:b4:5a:8d:
                    1e:84:ef:ad:62:59:40:90:d0:fd:ff:11:fa:38:ea:
                    af:d2:f3:e0:bf:72:cd:cc:0a:ec:37:b7:10:c8:90:
                    f8:0d:f4:77:aa:2d:11:d8:fd:63:e7:e2:5a:2b:7a:
                    50:7d:94:c2:1d:c7:a8:75:7f:8c:f5:0d:d7:df:20:
                    d2:ab:82:14:d0:f8:b7:15:4d:3c:a8:0a:9e:e8:60:
                    d8:d0:49:fa:4f:21:3a:9d:45:12:95:e4:5f:00:ed:
                    6f:00:49:8c:76:aa:d8:84:00:f7:74:e5:89:8c:61:
                    02:b7:01:dc:5c:11:1f:d2:db:10:c9:ab:d7:83:86:
                    df:da:9a:6d:1d:6a:be:0b:a8:71:8b:a1:c8:85:97:
                    54:ed:90:dc:ef:27:f5:03:67:7a:9a:3c:3d:dd:82:
                    2c:dc:86:75:a8:0d:cf:84:1c:f6:a1:7d:f0:fe:53:
                    0f:5a:15:c4:a9:72:b8:03:63:41:a5:60:b8:08:a8:
                    2c:01:13:35:2e:97:60:3c:5e:35:e5:d6:be:a1:30:
                    b2:a0:ba:4d:07:e2:9e:c2:14:17:34:18:ee:30:12:
                    92:c4:ea:4b:a1:89:3b:64:ec:af:47:4e:44:6c:f9:
                    1e:72:3e:d7:df:29:79:28:9a:0d:bc:fc:98:b4:f7:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5F:76:D1:DE:7F:3C:5F:A3:A7:5D:24:AD:D1:6A:89:E0:DE:B4:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/79b74f89-30ff-3963-ad01-726333c4ea9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.crl

            X509v3 Authority Key Identifier:
                keyid:54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb60:2400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2b:07:bd:d3:96:d8:87:52:42:67:2b:5f:6d:1c:db:80:b8:
         b4:bb:01:1d:02:b5:de:7a:93:d9:d0:39:d9:e8:3f:13:ee:c3:
         a3:13:c3:25:2f:74:8b:f6:11:21:63:c3:9d:02:10:dd:15:71:
         ab:9a:85:a1:1f:f5:79:86:6d:02:6f:bf:d2:54:f0:50:16:17:
         6a:81:a7:9b:e6:40:1e:60:44:2b:05:95:98:b1:08:b8:ea:e0:
         a3:0e:01:38:a5:ed:5a:3c:50:04:4b:e9:f2:4f:ce:a7:c9:7f:
         44:4f:b3:21:35:4a:32:20:3b:77:61:94:60:ce:ca:64:0c:ec:
         0a:3c:e5:22:a5:db:ad:36:dd:b3:3e:11:ae:0f:58:59:ec:ee:
         6d:61:66:33:28:6f:13:10:64:54:89:e6:54:ed:6b:2c:ac:8e:
         bb:1c:e0:64:24:cd:7e:60:44:d3:87:c6:1e:ab:47:e4:f1:eb:
         cf:3e:6f:fc:40:12:61:c4:4e:44:16:93:6b:c3:16:e2:31:40:
         21:bc:4d:0e:28:22:72:b1:b2:55:5b:85:95:45:ed:2b:37:b1:
         a2:01:c4:ed:2a:a4:33:63:db:6a:a3:b6:e4:b6:09:54:f6:94:
         a4:52:46:9e:a4:ab:b7:7b:de:03:81:78:e5:ee:34:dd:21:07:
         c7:a8:e0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:18:01 2025 by rpki-client