Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa
File:                     bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa (raw, json)
Hash identifier:          MQgjrJeMELkaUz2+UvyVFfd9335y7UZeIVKUjK73038=
Subject key identifier:   21:58:E5:F0:68:5C:89:89:C2:88:F6:37:1E:2C:19:A3:B1:38:1F:11
Certificate issuer:       /CN=1380a44d-7851-4eb6-8887-413917dcdc12
Certificate serial:       010D0C9F432858496CE4599B5BDC7BE36C701900
Authority key identifier: 6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     31972
IP address blocks:        2607:8680::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:59:9b:5b:dc:7b:e3:6c:70:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380a44d-7851-4eb6-8887-413917dcdc12
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=d022f339-c1bc-42c7-8ba6-4c2a48d32db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5e:2e:4f:2e:37:c8:52:b9:ba:9f:0a:80:46:
                    b2:46:7a:9d:2c:a9:18:9d:cc:73:60:29:f0:6e:c2:
                    cf:fe:47:f1:87:c6:75:ad:97:6f:1b:94:f2:b3:10:
                    5d:e9:ec:d9:bd:1a:50:8d:06:b5:6f:81:16:98:ba:
                    68:73:f1:c2:ef:9d:37:45:82:cc:cf:f2:6f:dc:e9:
                    63:86:61:71:6a:38:27:6a:98:6d:00:79:7e:32:15:
                    28:bc:9a:f4:74:9d:7f:21:cb:62:04:8d:0c:b6:41:
                    9b:22:4c:08:42:a5:a1:63:1b:15:d5:70:3d:c7:cc:
                    10:bf:eb:fe:0c:dc:c7:bb:86:d1:24:10:1c:3f:81:
                    d4:25:b6:87:6e:ca:4c:23:1f:f4:72:0f:f5:14:cd:
                    63:bc:ff:0f:aa:c7:93:c6:01:a6:b7:cc:cb:c6:2d:
                    d8:6b:9e:2f:10:b7:c3:b9:aa:cd:cb:03:bb:d4:ba:
                    7d:95:01:72:ea:8a:15:24:36:7f:23:91:92:d6:dc:
                    c4:ef:dc:6f:42:9d:ce:17:c5:61:0d:77:4e:a5:b9:
                    c3:7c:9c:9e:eb:f1:ef:94:3f:2e:49:8a:d0:ad:b5:
                    a1:e9:a1:67:56:1c:07:fc:6f:20:82:d3:c0:25:c9:
                    a6:a7:47:ce:f7:7b:49:36:bd:f5:d2:d0:35:20:a4:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:58:E5:F0:68:5C:89:89:C2:88:F6:37:1E:2C:19:A3:B1:38:1F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/bd8bec6f-1a70-3378-91b5-cb21c5533d5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12/1380a44d-7851-4eb6-8887-413917dcdc12.crl

            X509v3 Authority Key Identifier:
                keyid:6C:37:E1:61:68:B4:CF:88:64:11:CB:68:E9:4A:65:72:4A:96:54:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1380a44d-7851-4eb6-8887-413917dcdc12.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:2c:b2:56:30:41:ac:fa:b9:6e:c3:e6:13:0b:c9:97:50:b7:
         3b:4b:71:a6:63:ee:99:81:67:b4:73:d3:f0:5a:3e:f3:9b:5e:
         69:41:08:68:35:7b:d1:ca:fd:aa:f2:52:45:f2:8d:23:31:7f:
         53:14:29:ee:49:a6:92:a4:d2:03:52:d3:29:53:f8:1f:ac:46:
         13:0b:9c:cf:89:17:44:af:06:d1:32:df:66:a1:6b:62:af:2a:
         23:8b:20:21:ba:dd:b8:df:ac:18:99:0f:34:9d:1e:47:f4:e6:
         e5:94:09:89:f8:c5:a4:16:4d:48:a7:6a:ba:4c:40:aa:c2:c6:
         6a:89:3a:a1:5f:b6:15:d7:33:a3:bb:e7:09:58:70:03:50:74:
         1d:8c:a1:fe:27:20:7b:dc:67:4e:d0:15:0a:a5:21:32:33:fd:
         55:64:96:3a:11:04:df:b7:0b:7a:c5:fe:07:c1:f5:0e:20:6a:
         a0:2b:f7:08:42:45:52:bc:b5:4e:d0:24:f6:64:cf:a0:14:1c:
         68:c2:e1:b4:c1:49:0f:2e:55:73:66:f6:e2:08:ca:62:d2:15:
         08:71:3a:26:01:81:ea:42:70:93:93:0b:b4:f8:18:e9:24:94:
         24:85:20:b5:ae:d3:8f:bf:82:fe:8f:21:71:bb:48:a2:2e:65:
         c5:4c:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:23:33 2025 by rpki-client