Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/0352cfbd-ddc7-3127-aeba-78c04ae4f6b7.roa
File:                     0352cfbd-ddc7-3127-aeba-78c04ae4f6b7.roa (raw, json)
Hash identifier:          8e60evXtIQwR0Ojp8kgRKVtmt7RvKFl1Q3iwJBUYvHI=
Subject key identifier:   E3:50:E5:0D:35:33:55:D8:82:BE:5E:2C:A8:FC:B2:1C:49:D1:2F:82
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F43285849A089D0118715083DE012AE80
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/0352cfbd-ddc7-3127-aeba-78c04ae4f6b7.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     50131
IP address blocks:        2604:9cc0:2400::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d0:11:87:15:08:3d:e0:12:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=50baa1a9-1b74-4035-875a-19f04f0e59a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fc:b4:75:31:53:7f:e6:56:2c:f0:23:bd:60:
                    8c:14:95:db:49:1a:10:a8:b4:6b:24:fa:cb:7f:3c:
                    a3:43:8c:82:0a:f5:75:f4:af:18:1b:69:7d:59:e0:
                    24:64:3f:8a:db:61:6d:59:28:d8:2e:d6:d3:35:63:
                    13:4c:d6:70:09:18:9b:0a:6d:9d:bb:42:98:0f:1d:
                    0e:3e:34:76:d0:49:ab:b1:1c:dc:65:b3:78:e7:27:
                    fe:1c:d8:1c:ec:5d:14:da:9c:df:4e:5a:a4:f2:81:
                    2e:c7:4b:e0:60:72:fc:ed:34:8d:d5:ce:c4:d6:38:
                    c0:1a:a2:2f:d0:3f:59:f1:a1:92:68:c7:a0:b7:23:
                    40:0d:98:39:ea:66:8d:33:8a:eb:e3:51:b5:2a:34:
                    39:de:40:61:0b:fc:49:ff:10:24:ba:4f:63:82:d3:
                    77:6d:13:2a:a2:2b:f0:70:02:7a:ad:e2:fe:fb:34:
                    b8:6b:58:e9:50:fd:6a:37:5f:a7:26:36:72:e8:a1:
                    85:35:61:50:6e:53:82:86:1a:41:c7:66:ce:7c:12:
                    ca:bf:ab:df:6c:72:bb:3f:aa:b7:ba:e8:6a:cc:ac:
                    01:14:e3:e0:2e:8b:21:4b:be:7d:48:72:8d:fb:e6:
                    0b:df:54:dc:db:58:44:57:0a:b6:b9:e2:68:bc:db:
                    ed:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:50:E5:0D:35:33:55:D8:82:BE:5E:2C:A8:FC:B2:1C:49:D1:2F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/0352cfbd-ddc7-3127-aeba-78c04ae4f6b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:2400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b8:84:0c:c9:78:30:cc:bc:84:18:be:27:49:51:d7:e3:fd:
         c1:8c:38:09:02:99:a2:70:3f:0e:fb:6b:9e:ff:30:a7:fa:5f:
         46:70:83:f1:22:12:9a:d3:12:06:92:54:2b:1f:c3:31:3d:92:
         2e:ff:6c:de:65:d0:ff:80:41:c1:42:fc:64:ef:f2:af:d4:a2:
         90:a9:67:59:12:30:57:8e:da:28:f5:66:7e:01:0d:5b:da:fa:
         23:11:0b:a6:3d:c5:de:b3:68:03:85:6c:ff:28:1c:86:ea:92:
         e3:e3:d6:34:9d:fe:9e:d5:86:63:e3:0a:98:31:c1:50:6d:11:
         a3:1a:e1:59:e1:9a:26:08:60:a3:9e:69:52:72:ad:14:61:f9:
         bc:98:44:66:2c:9b:7d:cc:30:4a:55:9d:37:f3:f2:19:a2:06:
         93:9d:2d:8e:3f:f3:7a:92:21:da:00:77:af:a4:87:c4:6a:d3:
         85:1e:ac:81:1a:97:64:f0:54:63:98:0f:e9:f5:73:c7:f7:c6:
         6e:ff:77:94:73:de:96:8a:b5:f3:76:8d:06:0f:3a:be:b2:90:
         09:52:ff:b4:53:16:ff:4d:51:be:a3:d8:89:f0:12:61:85:a9:
         d9:63:18:94:a7:73:af:d1:6e:d6:98:db:30:02:38:bd:b7:30:
         62:a7:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:07:52 2025 by rpki-client