Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa
File:                     bfc8160e-ea00-31d5-a587-02c976b74661.roa (raw, json)
Hash identifier:          oHGfeROlox4dTy+T/gxuMq7Ff/Xxeh+i7Zrw0MNCFHo=
Subject key identifier:   7F:F0:C5:8E:69:51:FC:58:B5:A5:DF:4E:E4:7F:6A:C6:7A:1A:B9:32
Certificate issuer:       /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial:       010D0C9F4328584981D4521510DD7B51CD002628
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     16509
IP address blocks:        2607:e740::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:52:15:10:dd:7b:51:cd:00:26:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=d07883d4-8aae-45d6-9465-c7ecfed3c5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:cd:5c:a8:ea:1c:5c:33:0b:c1:0f:0f:bf:
                    7a:35:5b:63:c2:37:ef:9e:10:60:c0:52:f5:42:ea:
                    8d:e8:6b:23:a3:d7:bc:3a:f1:72:a0:2c:7d:5d:de:
                    77:ce:8e:aa:cf:a1:5b:42:85:3a:f0:fd:64:c2:82:
                    21:9a:41:30:28:a3:15:34:bf:79:f7:a8:fd:20:ce:
                    ba:f3:3a:cd:bb:c2:dc:e9:20:7e:a9:f7:7b:fd:b0:
                    34:82:29:eb:bc:fb:a0:db:c7:bc:85:61:30:3c:3b:
                    0c:bb:83:22:8e:59:ed:4f:25:67:4a:34:e3:d4:cf:
                    73:3c:3f:26:f1:55:ff:5d:e7:b0:3d:8f:22:7a:0b:
                    8f:fe:15:b4:9e:70:44:a1:59:be:b0:ba:fe:e9:aa:
                    0f:35:9f:6c:43:82:74:5e:44:72:db:2a:01:2b:c0:
                    0c:1c:b7:50:ed:2e:86:98:2a:88:a4:14:34:4c:b3:
                    ae:2d:d8:25:db:41:29:bf:4f:3f:b6:ca:e9:72:c0:
                    09:ba:07:ab:ce:dd:39:8e:03:99:38:0d:7d:d4:60:
                    0b:81:e1:90:e5:84:a7:95:61:7d:17:8c:9e:45:d1:
                    3d:05:b3:c5:a5:ac:21:88:1e:83:1d:a1:b4:ab:7c:
                    75:71:03:12:0e:b9:1f:20:ba:df:1d:0a:9b:7a:d5:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F0:C5:8E:69:51:FC:58:B5:A5:DF:4E:E4:7F:6A:C6:7A:1A:B9:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bfc8160e-ea00-31d5-a587-02c976b74661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:f0:22:85:ea:17:5c:bf:c8:96:01:1e:ef:b9:32:37:4c:
         12:06:e1:86:f0:c8:30:10:0f:d4:8c:aa:99:01:29:ba:c8:a7:
         a7:b7:f1:20:94:33:ee:74:71:c0:37:29:91:e5:a2:35:cb:ff:
         cd:41:12:8b:45:d7:2a:ad:1f:1b:a4:90:37:2f:8a:aa:68:87:
         2e:da:0c:d4:8a:6d:23:84:52:a6:e8:08:f4:9a:ad:11:91:4c:
         5a:c5:3b:99:2b:46:3b:25:3e:1a:13:ea:78:a5:e9:8a:65:95:
         3f:07:f2:4f:9b:e3:1a:5c:7f:e0:99:1c:89:a9:a8:75:24:d8:
         c9:02:44:8b:4a:d3:16:7f:9b:8a:ec:03:57:44:e4:09:6f:6b:
         8e:62:44:5d:ea:d8:16:e8:22:18:9c:96:e0:c2:98:fa:e7:4c:
         b7:84:0d:a3:15:0f:77:bd:93:c9:6d:3b:99:37:f7:c0:d4:84:
         5b:c5:35:d2:b7:dd:53:28:a9:db:bd:81:99:00:e5:62:03:3c:
         01:8f:57:5d:a1:fd:eb:bf:49:a4:f6:d4:ff:35:8e:0a:c3:0c:
         a2:a3:e7:db:a9:4a:93:08:9c:45:c9:5e:d2:85:7d:f5:cc:f0:
         00:f4:f8:11:e6:4c:9c:16:1a:09:76:78:a4:ea:e7:7b:30:30:
         3c:36:45:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:26:09 2025 by rpki-client