Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
File:                     970b7e04-01f1-3927-90a0-79d7a904fce7.roa (raw, json)
Hash identifier:          jB+F3Oxm/fBDzr7y51nGoZrSZrHbsfvlPv8zldruOGw=
Subject key identifier:   7A:FE:C1:3C:17:9C:0E:45:8B:67:2C:3E:4C:FF:1E:C7:D2:48:20:78
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285849AA4F68FEB884FB53AB91E600
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     10390
IP address blocks:        2620:10f:400e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:68:fe:b8:84:fb:53:ab:91:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=405b7bb8-ecd4-490a-b952-2b941fd4f565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:e7:6b:55:33:b2:af:b2:9e:d9:65:a0:ef:
                    a1:41:05:36:9d:1e:78:94:fe:e5:fa:d0:93:95:3b:
                    64:49:40:06:a6:11:57:4f:61:4a:15:41:90:cc:33:
                    20:77:22:7f:0b:3b:de:b1:9c:af:2d:39:d1:e1:8e:
                    33:48:e1:52:9a:1f:7a:68:22:a7:29:1c:87:c8:bf:
                    60:1c:1f:0a:02:66:4d:52:03:3e:9d:3f:23:9f:43:
                    a4:7b:59:5b:de:8f:e7:15:40:c1:47:fd:da:c9:0d:
                    42:f7:c6:58:91:b5:b4:e7:c5:29:ae:07:e3:c0:a6:
                    b5:13:55:7b:c0:3b:8e:96:34:38:18:21:40:d0:ae:
                    5c:84:8b:6d:2d:9f:6f:a3:ae:14:f0:e4:64:4c:57:
                    57:1d:a1:ae:b0:41:b6:6b:aa:f3:e2:30:f4:cf:dc:
                    07:77:92:6a:1e:4f:fb:e1:cc:33:27:8c:b9:df:11:
                    9e:54:5d:81:11:3b:6d:b3:d5:71:7d:a1:86:98:84:
                    d6:e4:4c:bf:ec:aa:d4:22:00:e1:fe:8e:44:39:27:
                    de:a1:2d:95:cb:91:c2:94:71:c7:fb:17:d2:d7:c4:
                    05:0b:f2:bf:68:75:fc:86:f5:29:9d:b6:8e:f9:bf:
                    7b:2e:ad:06:44:6d:64:3e:a7:e4:57:8d:b2:e9:57:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FE:C1:3C:17:9C:0E:45:8B:67:2C:3E:4C:FF:1E:C7:D2:48:20:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/970b7e04-01f1-3927-90a0-79d7a904fce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:400e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b9:90:0c:d5:35:60:4a:29:56:91:4f:de:7b:1e:de:ff:12:
         f7:c9:dd:84:e0:0e:30:56:fb:b1:ce:c0:43:34:c4:af:a3:27:
         06:98:e9:76:be:2f:b3:16:69:1c:a3:d2:0c:98:dd:f8:b2:8a:
         bf:fa:2e:22:cc:06:33:af:03:dc:cc:08:ff:90:4a:71:8b:7c:
         e4:11:21:7a:3b:07:89:dd:8f:57:49:d0:1f:89:c4:e9:31:98:
         77:c1:31:37:39:cf:6d:de:5c:e5:b7:10:84:20:01:20:d2:29:
         07:be:fb:a9:b1:9e:e3:39:3f:0a:76:a0:5a:0a:9d:92:63:d6:
         ff:ae:81:d6:d5:0b:b5:67:22:09:58:2d:42:bc:44:c4:80:2e:
         19:2b:fe:26:4c:7d:f1:a7:a4:ff:55:41:ee:32:d1:19:bc:ab:
         4d:8a:db:06:e6:01:b3:df:c2:fd:9c:0a:6f:72:cc:c7:a9:59:
         89:28:5d:47:bf:82:a1:f1:67:bd:bf:bb:8f:17:79:a7:70:4e:
         f6:61:b5:63:56:ec:11:07:b8:ff:f5:ae:60:fa:ae:0b:b1:a7:
         96:ae:f5:2b:5a:8f:3e:0f:05:b2:a4:c0:3d:6f:85:9d:c8:73:
         91:66:76:8d:64:6e:85:06:5c:b9:02:d4:2e:d0:7d:fe:e0:69:
         be:a3:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:05:00 2025 by rpki-client