Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa
File:                     856571e3-0844-3aaf-b208-47df360ac0b7.roa (raw, json)
Hash identifier:          FvO13LE4YF3JvcGgULzGV2G5F93P1mt3rALXEE1x708=
Subject key identifier:   46:61:EC:A2:7A:5A:9D:6A:87:2A:60:70:62:7D:45:60:1B:43:C3:4E
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F432858498769AAD2934E9DA3159BDEC0
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     54874
IP address blocks:        2605:f440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:aa:d2:93:4e:9d:a3:15:9b:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=c1bf9318-1b3d-42e5-a2cb-f7b00a5ab871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8b:44:b2:43:f5:41:4b:b3:57:c2:eb:75:2d:
                    e4:bf:f3:c0:a1:81:6c:5d:74:ca:22:a0:26:5d:65:
                    c2:ad:9d:59:45:19:a4:ab:3b:7e:9f:ae:0c:f9:38:
                    1d:a1:0c:64:da:22:ed:53:6b:2e:ff:f6:1e:77:8c:
                    d4:90:0b:3f:75:89:99:2a:c0:8b:1e:44:89:2f:8d:
                    fd:d5:2b:76:dc:27:b3:ac:f0:99:09:bc:5b:5f:11:
                    ee:36:54:ca:d3:6b:60:33:bb:a7:52:ad:df:e4:eb:
                    d3:27:a4:31:82:8d:54:2f:a5:28:71:1a:60:b0:92:
                    f0:ce:a1:cb:42:b2:28:8c:51:92:34:21:0a:e8:76:
                    2c:52:37:c2:f3:0a:e9:a6:d2:40:12:a7:39:eb:e2:
                    2d:18:98:03:fe:2d:b6:09:14:67:2d:be:4b:7f:56:
                    f8:24:0c:5c:d1:6e:0d:cf:f2:42:cb:e0:bc:3b:86:
                    11:12:a5:dc:47:9f:4b:e2:42:97:81:67:4a:f0:bf:
                    98:de:f2:17:f0:56:25:78:d2:2f:b1:06:7a:61:8a:
                    4f:dd:22:c5:4c:0b:d6:ed:87:b7:53:45:bd:ce:61:
                    6a:f4:a6:1d:e5:52:f4:32:13:f8:bf:0c:b1:71:b3:
                    94:7b:cd:d6:04:8f:35:0e:a6:87:b4:5a:36:50:4e:
                    62:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:61:EC:A2:7A:5A:9D:6A:87:2A:60:70:62:7D:45:60:1B:43:C3:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9c:59:05:eb:ff:1c:3c:0e:cc:da:77:61:ba:52:8f:46:0e:
         42:f0:fc:7e:6e:67:f1:7e:fd:11:a4:d8:b7:b7:e3:5a:10:90:
         a4:09:c5:56:01:8c:22:35:eb:8c:cd:2b:1a:71:23:92:ae:6f:
         35:6c:7a:62:42:ba:db:4d:bf:23:a7:ad:57:57:b8:e4:c6:02:
         47:18:1c:b4:0e:b8:b3:89:e0:b6:46:54:83:48:f0:12:98:e7:
         21:8a:61:3b:30:73:19:31:52:10:15:82:ca:79:f4:92:00:27:
         f1:e3:c5:11:3d:b8:41:f7:55:f1:a9:77:80:83:f0:fe:45:e8:
         5c:b0:82:fd:53:0d:ea:43:7c:d8:97:bf:8d:26:ae:c9:ab:b1:
         ee:f4:b7:c5:81:14:cd:6e:85:b1:69:e3:2b:10:60:ef:60:24:
         2d:81:b7:6f:47:fe:a8:a1:88:1b:78:24:e1:64:c2:f4:c9:d1:
         df:bb:20:64:1a:d4:d1:ee:ce:75:30:72:10:32:46:d4:c8:23:
         b3:75:b2:01:d2:9c:4d:63:6c:a5:57:e5:a9:6c:61:ee:0b:99:
         cd:3b:da:5d:81:0f:05:77:06:23:2c:bd:f6:2d:00:67:e2:1e:
         f2:6d:59:d5:e8:49:6e:7a:b4:bb:d3:95:8f:ab:75:5d:1f:9d:
         83:8b:a6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:16 2025 by rpki-client