Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa
File:                     4d505fff-f719-381b-b822-2695a2e94aeb.roa (raw, json)
Hash identifier:          Rt1ZKrXF/8R1IIcW3LDTZRF4AJNvKfLyHhssMreblZA=
Subject key identifier:   1A:7A:35:A9:85:A7:D9:B3:FE:73:AC:57:A8:D9:2B:33:75:53:97:77
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F432858498CFF149FC27EA7D39560D148
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     400196
IP address blocks:        2607:8240:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:14:9f:c2:7e:a7:d3:95:60:d1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=2edb0f7f-8ccf-403c-b802-62dfdc2099d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fc:c2:75:15:3e:d6:17:7b:07:0a:a5:f5:2a:
                    56:48:b1:f9:73:bb:84:ee:41:fa:1b:e7:50:b5:5d:
                    ea:bd:14:b9:3d:d0:de:e3:6b:3c:bc:6c:00:d5:81:
                    30:8b:24:e2:cc:09:20:59:26:00:42:34:ce:c0:28:
                    53:95:c6:fb:a9:68:18:82:60:dd:0e:fe:a3:fe:33:
                    6d:04:bf:ac:9b:6b:0f:63:81:27:1a:6e:69:cb:96:
                    f9:48:e2:38:9f:9b:c9:3c:51:b6:ed:69:0f:60:49:
                    7c:91:61:3c:ce:bc:66:b1:84:0f:b4:d3:04:87:88:
                    8e:57:23:fe:d3:fa:c8:ab:31:d3:eb:9d:21:ad:54:
                    d4:a9:a6:05:3d:b5:14:e6:78:4c:de:bd:a9:0d:c1:
                    25:64:40:d9:f2:bc:65:4e:5b:70:f3:60:6e:95:37:
                    26:b3:2d:01:85:6b:4d:47:cb:30:ac:e2:26:b6:8d:
                    aa:59:dc:d0:0d:e9:4a:c4:dd:81:ee:76:94:d7:a6:
                    e4:84:d4:a3:23:43:12:f9:85:d2:45:45:aa:13:de:
                    27:8e:c4:75:17:93:df:ec:12:9a:48:d6:15:39:e9:
                    8a:88:08:8b:c6:a1:c0:a2:e3:e8:24:17:cb:88:07:
                    3f:ef:ae:75:94:5d:95:59:e5:56:08:2a:40:2a:b6:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7A:35:A9:85:A7:D9:B3:FE:73:AC:57:A8:D9:2B:33:75:53:97:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d9:f8:30:93:d0:e2:cb:09:b0:85:2d:01:e4:82:f3:63:52:
         8c:e9:0c:0e:cb:a8:9b:be:f2:2f:a3:00:c0:ec:e0:84:6a:fc:
         81:0c:b4:90:e3:0a:c8:22:cd:3b:bb:ce:d3:e4:2a:89:a5:22:
         c9:d2:08:3c:e6:df:13:5f:f6:8c:08:1e:dd:bf:ba:bd:11:b1:
         9e:1c:3d:e3:ea:f7:dd:d4:b2:9a:d6:ae:d9:88:b1:1e:5d:d0:
         28:e7:c4:84:ff:b9:a4:bf:b9:1f:d0:36:da:96:29:ca:78:38:
         24:bd:36:49:12:6b:63:4d:d3:34:0a:cc:bb:a3:2f:a0:3f:da:
         34:61:9f:e9:55:73:2c:92:f7:97:17:0b:3a:50:d4:1e:f6:fc:
         40:79:d2:e2:80:0d:ec:1a:c3:ef:5b:b7:b7:c3:bc:1a:c9:95:
         16:12:6e:b6:e0:f2:90:52:64:84:8f:9e:29:fb:1c:2a:97:27:
         c9:59:f9:0f:39:95:a3:12:ae:00:c8:9b:87:aa:38:4d:27:34:
         58:c4:40:95:c4:e0:1c:8e:bf:01:cf:09:a6:e7:9f:4d:6e:20:
         47:02:42:e4:74:cf:7e:d6:dd:37:5b:25:3a:de:5d:3d:00:46:
         1c:99:ba:42:0f:25:19:65:75:44:6e:59:16:84:42:87:f5:da:
         c7:a4:13:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:07:53 2025 by rpki-client