Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d75e4c60-ec33-3d4b-901d-f6d08f860eac.roa
File:                     d75e4c60-ec33-3d4b-901d-f6d08f860eac.roa (raw, json)
Hash identifier:          8GyV/CvWdxL7ywJx8U/k6J+P1mXSl/ipcSUjvVq9akU=
Subject key identifier:   5A:5C:5C:88:8E:80:2C:D6:5A:3E:2D:8E:0E:6F:2C:9C:C6:47:68:5F
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F432858498769AB6FC90B7CA3F8AC1B00
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d75e4c60-ec33-3d4b-901d-f6d08f860eac.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     57439
IP address blocks:        2605:f440:5353::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:ab:6f:c9:0b:7c:a3:f8:ac:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=af37478f-e864-4b2f-bda4-f506a4abfefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2a:63:fc:9a:46:6f:94:96:f5:ac:6e:2d:44:
                    71:61:bc:cc:1e:6c:e9:46:ac:32:0b:fa:9c:65:79:
                    55:2e:e9:90:de:31:3a:ec:14:d2:fa:b1:44:22:84:
                    b4:0c:24:c6:3d:a8:72:09:49:7c:b6:6c:61:04:96:
                    dd:96:3c:d8:38:90:c6:60:1c:88:9a:78:67:1d:04:
                    ce:95:ef:ae:20:2b:4c:7c:09:ad:ef:b4:f6:45:ca:
                    d2:ae:2a:4e:b4:bf:69:5d:51:0b:63:59:73:91:85:
                    f5:3b:a4:ae:0e:1a:d6:fc:05:f7:5c:6a:86:ef:8e:
                    76:f2:cd:83:bc:7a:cf:1f:f1:3e:4b:9c:a9:ed:a9:
                    10:90:b8:40:a9:49:81:6f:8d:1a:c8:30:48:2c:ad:
                    ec:39:5e:12:fe:46:db:fc:49:94:a6:bf:15:bb:1e:
                    d7:1d:d2:47:e6:48:74:f3:7c:7a:cd:cd:a7:de:e0:
                    b5:3e:83:83:b6:4e:f0:58:4d:d1:54:7e:34:13:af:
                    52:85:e3:8f:f6:74:cc:7a:7f:05:67:37:b2:ce:05:
                    b8:3a:97:88:69:ea:fb:e7:46:8d:66:c2:4a:94:0d:
                    df:48:4c:93:0e:aa:e5:ca:59:25:7a:33:b7:2d:43:
                    37:ff:d7:90:5c:75:82:1b:1a:b4:10:70:e5:00:26:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5C:5C:88:8E:80:2C:D6:5A:3E:2D:8E:0E:6F:2C:9C:C6:47:68:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d75e4c60-ec33-3d4b-901d-f6d08f860eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5353::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:02:19:37:1c:43:be:8e:2a:1f:c3:e3:8f:ec:a6:f7:b0:c9:
         62:99:f0:85:2a:4f:40:cf:42:f5:5a:86:e3:36:4a:e1:c1:5a:
         e6:5b:6c:8e:ff:17:9d:40:44:21:5f:c2:d5:ac:09:1f:72:a2:
         8b:39:f0:ca:76:62:a1:66:85:77:82:22:ee:d5:4e:f7:cf:4f:
         fd:15:f1:b3:b1:85:c3:8a:f8:7e:5b:7d:bd:c4:b8:7c:92:97:
         cc:c1:20:79:6f:31:e4:c6:8d:ea:7d:30:5c:2b:02:05:97:47:
         5f:18:24:6e:c7:d6:6e:1c:62:d0:3e:2f:e3:e5:ac:92:32:4e:
         27:a3:67:b4:65:a5:a1:27:be:68:f1:96:18:8c:67:93:fd:c7:
         c9:83:d3:0e:59:2f:11:c0:2b:51:3b:d5:45:96:4f:92:a2:52:
         38:64:bf:74:53:e8:5f:79:40:91:5d:8c:15:28:46:ac:16:8a:
         16:bc:db:e4:63:61:1c:ae:09:e9:1b:02:41:c1:64:6e:c5:58:
         3d:a3:45:f9:c7:b0:f6:10:b9:94:17:c9:c1:ab:f0:3d:00:66:
         50:8b:6a:ba:63:5d:bc:ac:ca:6c:ee:cd:ec:65:f5:69:05:77:
         04:58:8a:8a:3c:7c:50:97:8d:9d:a1:c1:8a:06:cc:30:80:cf:
         a6:b0:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:07:22 2025 by rpki-client