Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/8658ef54-416d-3b6d-a9ee-bbb2316eba26.roa
File:                     8658ef54-416d-3b6d-a9ee-bbb2316eba26.roa (raw, json)
Hash identifier:          5CZNYo2p6jmWAN2kWJcHIjLowmzMez8Jh7L4AXV1a0o=
Subject key identifier:   F6:A0:99:97:E4:96:13:BF:D0:DA:AB:96:C6:55:CF:8B:21:C1:B2:72
Certificate issuer:       /CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
Certificate serial:       010D0C9F43285849A3547E4A9C23B6778DFAC900
Authority key identifier: 52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/8658ef54-416d-3b6d-a9ee-bbb2316eba26.roa
Signing time:             Fri 25 Apr 2025 01:00:47 +0000
ROA not before:           Fri 25 Apr 2025 01:00:47 +0000
ROA not after:            Thu 24 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        2620:c7:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a3:54:7e:4a:9c:23:b6:77:8d:fa:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
        Validity
            Not Before: Apr 25 01:00:47 2025 GMT
            Not After : Jul 24 01:00:47 2025 GMT
        Subject: CN=3ee07613-556e-4173-ae45-9d8cf9a24f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:38:e6:41:bb:13:7e:2c:ff:9e:f3:a0:63:
                    62:56:08:e7:7d:57:c4:e7:ac:ca:0c:da:b2:c5:b6:
                    41:8e:45:ab:c3:d5:07:15:ac:db:4b:cd:9b:b4:98:
                    05:92:e1:bd:c4:3a:4a:de:f7:4c:3e:90:c2:50:f4:
                    96:21:5f:2d:c5:55:3a:4f:0c:b0:4f:89:ef:21:e7:
                    87:be:b2:a5:f1:ba:9c:2b:63:4d:90:c0:ec:97:bd:
                    5f:f5:4d:00:cd:79:21:96:c7:8e:6c:34:f1:ae:ac:
                    b7:94:ed:47:bb:89:8f:ff:99:cf:d4:ad:24:ce:a1:
                    b6:22:7a:58:67:bb:65:04:b7:dc:14:07:8e:1b:25:
                    6a:f0:45:ce:f8:eb:a9:e1:83:34:cb:a9:5a:5c:ce:
                    7e:b0:35:17:ac:2c:13:0b:58:cb:f1:e0:db:dc:59:
                    47:15:81:a9:17:6d:c1:d5:39:ad:42:27:0c:ee:28:
                    f0:77:a2:3e:53:ac:cd:bf:d3:b9:6f:8b:79:8c:9b:
                    8e:36:62:9d:4d:6c:3c:35:07:85:4a:ec:f7:54:65:
                    b8:e8:2d:b1:9b:72:c5:2a:3f:0b:d9:ed:ac:1e:03:
                    1e:ae:53:d8:a5:a0:f6:6e:d7:36:74:83:3f:21:40:
                    ae:b1:52:a9:fd:7d:98:22:af:c6:50:be:9a:7b:31:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A0:99:97:E4:96:13:BF:D0:DA:AB:96:C6:55:CF:8B:21:C1:B2:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/8658ef54-416d-3b6d-a9ee-bbb2316eba26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.crl

            X509v3 Authority Key Identifier:
                keyid:52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c7:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:e8:9b:d6:ff:d4:1b:53:f1:75:5f:b5:a0:15:7e:d3:9e:73:
         7a:96:94:81:f3:15:e4:e5:b5:aa:19:58:a7:fc:84:01:6d:3b:
         89:50:95:12:13:9a:67:af:fb:64:d7:c7:68:44:46:0b:43:b6:
         b4:7a:f6:b7:62:13:2e:fc:96:01:9b:23:0a:70:13:da:13:60:
         1d:a0:21:ab:bb:2a:30:71:25:7b:e8:e9:61:5e:4a:5a:41:d2:
         e2:0d:2f:c1:0b:84:19:73:e0:78:1e:0d:48:be:88:43:33:57:
         31:bd:65:3d:a3:22:69:74:15:3c:01:ce:3b:b8:cd:d0:73:3c:
         5d:6e:05:56:a9:6c:ce:dc:76:51:e8:9e:d9:88:02:e2:75:16:
         53:da:9d:ce:bb:52:b6:d3:06:7a:1e:f3:15:83:3b:3d:59:02:
         ec:4e:fd:e0:61:4c:4b:57:32:dd:03:e9:e8:69:16:76:f4:9c:
         8f:ca:0d:cb:4e:cf:9f:6e:d0:41:1e:07:b4:6a:3d:8e:49:86:
         b1:dd:0f:32:a3:ee:f5:fb:cc:89:eb:f0:87:3d:1a:30:72:48:
         8f:64:f4:45:f9:a7:1d:19:8f:c2:a8:1f:4c:d4:b0:ae:f2:15:
         6b:fa:65:39:bd:57:37:65:37:0b:25:a3:0e:b2:aa:08:05:5a:
         70:63:c0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:57:54 2025 by rpki-client