Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa
File:                     c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa (raw, json)
Hash identifier:          +wCGKvaoVxb5UouIEqsNgd45oRO+MAzaLED5fJodYEE=
Subject key identifier:   33:DC:C5:A3:C3:74:6B:5E:DE:37:9D:97:C8:68:C9:3B:00:4E:1F:3A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499DBF267CB49F52F73D086DC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     852
IP address blocks:        2001:569:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:26:7c:b4:9f:52:f7:3d:08:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=edb7292e-6e09-4101-ba64-1570addf2c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:72:38:c5:9b:2e:d0:ed:b3:4e:aa:54:4d:
                    7c:a3:a3:96:27:ea:22:88:96:83:c9:ed:0b:88:ba:
                    95:b5:f1:13:c9:c3:93:c9:f2:80:e7:ad:0d:96:d5:
                    76:09:64:1d:c6:5d:ae:da:be:fe:28:a5:16:5f:82:
                    b2:0a:b3:17:98:45:b1:65:3e:03:3a:77:5d:ea:3e:
                    88:b6:6f:48:6c:2c:9f:00:30:b2:23:32:ae:4a:44:
                    20:aa:7c:bb:64:aa:10:df:be:88:cd:27:a4:43:f5:
                    39:4b:67:09:67:f7:6c:63:3d:a9:fd:5d:0f:51:80:
                    8b:20:36:8b:3c:db:00:37:14:29:7c:7a:68:9c:0a:
                    a5:ad:33:c6:10:98:2a:91:6f:40:4d:e7:e7:2d:74:
                    7f:e0:a4:95:d3:a8:c3:3c:73:8b:db:9f:0d:31:b8:
                    a5:2b:10:b0:dc:71:4a:23:83:1f:4c:a0:77:58:02:
                    9c:4e:6d:2d:f9:be:44:cc:67:1f:00:6d:3b:81:8c:
                    5d:da:9f:1c:04:3f:cf:66:cd:33:17:5e:f0:13:56:
                    d5:90:91:28:31:dd:9e:fa:de:1a:8e:88:f0:e5:39:
                    53:fe:dd:23:d3:8e:19:08:12:7f:96:62:dc:47:05:
                    61:dc:96:71:8c:51:36:7e:b4:00:46:2d:8c:fc:69:
                    a5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DC:C5:A3:C3:74:6B:5E:DE:37:9D:97:C8:68:C9:3B:00:4E:1F:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c1dc27a0-dbc2-37f9-bab7-e33c1e7a660a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f0:d4:0b:f2:43:37:5a:81:2d:a2:70:db:73:90:19:9d:15:ef:
         6a:2b:98:c8:db:eb:e6:74:2e:be:b9:da:a2:c2:80:ac:cc:6d:
         94:7a:7a:15:4b:c2:3d:73:a0:46:1a:c9:ae:80:39:59:7a:b1:
         a0:76:a5:84:d9:8a:9d:96:a8:54:21:b2:19:94:86:54:04:c5:
         37:52:32:1c:19:ff:d9:d5:2b:4d:ed:7f:b9:bb:83:25:72:bd:
         38:75:f5:c1:01:a0:47:ff:11:93:42:08:e8:fd:eb:23:b8:c1:
         e8:8d:24:ea:93:93:85:25:41:01:39:26:23:16:9d:2b:8d:8d:
         69:3c:cc:e9:25:57:4b:42:ab:79:e5:99:33:21:81:4c:62:39:
         d9:ad:3b:91:97:26:0e:8a:e2:6a:47:a3:9e:21:30:4f:4d:c6:
         cb:40:00:15:fe:70:27:a9:36:b4:ea:0a:d2:01:53:b6:e9:b7:
         b8:3b:a5:32:4e:51:22:d4:8d:cf:e2:8f:0d:77:1f:e7:49:ac:
         82:31:5e:b7:83:e6:31:82:28:f2:35:ae:27:f6:7a:04:0d:c8:
         4f:7d:68:c9:ba:42:46:ab:60:8c:9a:66:08:3d:97:9b:a8:e1:
         ef:b2:ca:12:33:03:74:60:84:52:b2:df:8b:38:39:49:d1:8a:
         12:58:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:51:09 2025 by rpki-client