Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/72168295-8ea7-3c44-9003-58938d256c37.roa
File:                     72168295-8ea7-3c44-9003-58938d256c37.roa (raw, json)
Hash identifier:          VBQAQ4CFb2YyYjowdnGL2T8SNPd1tE9a+X4C8BNfC7c=
Subject key identifier:   38:EB:C4:9A:94:95:68:60:59:54:AE:2B:4E:1C:F6:76:30:C7:0C:96
Certificate issuer:       /CN=24d6cba8-85d8-4359-a10e-8e9ab867266a
Certificate serial:       010D0C9F432858498A34646439B0C9095F184920
Authority key identifier: 75:23:3A:57:80:8C:E7:C1:7F:3E:ED:23:59:A2:C1:0A:00:40:8E:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/72168295-8ea7-3c44-9003-58938d256c37.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     21738
IP address blocks:        2607:c2c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/24d6cba8-85d8-4359-a10e-8e9ab867266a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/24d6cba8-85d8-4359-a10e-8e9ab867266a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:64:64:39:b0:c9:09:5f:18:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d6cba8-85d8-4359-a10e-8e9ab867266a
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=65bb6cc5-07a7-4f71-bd6f-619527c81441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5f:71:c2:a1:fc:9b:20:3b:ab:84:a4:5f:c5:
                    1c:19:e0:c1:8a:7f:66:e3:a4:bf:96:2e:b2:ef:77:
                    c3:5d:9d:bd:77:6d:75:80:69:61:7f:44:48:66:e2:
                    70:8f:41:f3:61:3b:67:80:cd:fc:7b:2e:3d:eb:96:
                    74:21:c6:47:8e:97:51:27:14:63:e3:a6:d2:56:66:
                    c7:02:92:05:36:23:61:b8:de:e3:69:8f:91:e7:ce:
                    2e:22:75:4b:d4:fb:5c:b2:ba:58:d3:09:56:0b:24:
                    30:b9:e8:16:22:bc:13:79:41:24:2f:e8:70:21:e7:
                    a5:99:bb:74:81:38:b6:9f:ac:45:03:e0:87:da:32:
                    fe:0f:aa:23:6f:12:0b:29:b0:a6:aa:fa:ee:75:9c:
                    f8:9d:e7:a2:7e:f9:04:8a:85:87:0a:8d:f3:f0:05:
                    2c:f2:a9:65:2b:68:30:08:80:ed:c8:9b:d5:38:bd:
                    9b:cb:fb:40:94:85:76:e3:ce:fa:07:5c:fb:51:71:
                    e6:36:c6:d4:34:67:bb:09:6f:61:10:0d:01:85:f9:
                    f9:35:1c:38:f3:63:b6:bb:ed:bd:f2:73:65:e0:63:
                    5f:8c:17:13:05:c2:9a:a7:04:f7:9a:00:5b:04:92:
                    20:d1:69:0c:1e:af:c0:4e:5c:6f:41:f5:b9:2e:cc:
                    00:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EB:C4:9A:94:95:68:60:59:54:AE:2B:4E:1C:F6:76:30:C7:0C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/72168295-8ea7-3c44-9003-58938d256c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a/24d6cba8-85d8-4359-a10e-8e9ab867266a.crl

            X509v3 Authority Key Identifier:
                keyid:75:23:3A:57:80:8C:E7:C1:7F:3E:ED:23:59:A2:C1:0A:00:40:8E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/24d6cba8-85d8-4359-a10e-8e9ab867266a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:7d:1e:3c:d9:f6:ff:d1:06:a5:a5:8b:f1:b4:00:24:d3:
         43:71:a6:81:32:e0:67:ba:0e:85:6a:88:41:3e:06:f6:62:fa:
         14:1e:48:3f:c8:af:65:6f:16:c3:23:4e:51:3f:08:1c:81:a5:
         a8:ec:14:6b:13:19:dc:e9:65:2c:85:5b:9b:b0:12:93:60:b0:
         96:5d:eb:7b:28:70:07:cd:53:22:51:95:4d:42:80:5e:8f:c8:
         ff:e2:11:02:06:77:06:62:40:e4:37:e0:49:52:0e:0e:88:2b:
         39:3b:e5:5b:b5:4e:2a:ab:6e:87:70:95:b8:09:3e:e1:c5:b2:
         ec:72:11:63:9a:45:c9:98:1d:da:17:bc:78:98:7d:81:26:c8:
         4c:b6:21:8b:0b:8d:4e:06:f6:ef:63:a3:ac:66:25:d4:e6:58:
         ce:03:15:22:4b:b7:e3:a5:f5:10:70:89:13:d5:cc:99:13:e3:
         f3:a4:8c:c8:4f:db:12:15:3f:ca:a1:d4:fe:b7:a6:79:6f:6a:
         b4:42:e7:76:e8:52:af:d3:9d:69:9d:96:27:b0:dc:3a:0e:df:
         b1:be:c8:a7:08:3b:ab:dc:c2:b8:cc:40:c3:59:ef:93:59:ce:
         49:9e:5f:69:d0:04:7d:07:71:92:5a:09:8a:ce:a1:73:0b:d5:
         e4:12:bf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:37:40 2025 by rpki-client