Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
File:                     a546cbb8-2a70-392d-873e-3968c05e710f.roa (raw, json)
Hash identifier:          fzy0W0j+LYy8NbXhN2zjkpihlaYltaHiZGcmf8Z7udc=
Subject key identifier:   46:CA:45:CC:93:2A:80:08:3E:69:4A:82:FD:9F:56:DF:59:D9:64:BE
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F43285849A61F45DC1A37E2F2296DCC80
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     393397
IP address blocks:        2607:8c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:45:dc:1a:37:e2:f2:29:6d:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=fa98c8f4-02fb-4bba-8e1f-8cdcf87a8aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:0f:38:77:a0:6a:dd:46:2a:a2:aa:fe:01:
                    6e:b7:c2:73:b5:69:9c:bb:49:05:8c:12:a0:3e:52:
                    7c:45:dc:ef:54:be:b1:e4:45:c4:56:bf:bb:c7:72:
                    80:62:a5:4f:61:ef:66:9a:69:67:88:2f:2f:47:2d:
                    5b:a8:72:2b:a0:3d:62:92:85:64:0f:ff:e9:52:4a:
                    a5:a6:1e:8f:d8:1a:fb:bc:b8:1f:5d:1b:35:61:9b:
                    6e:f1:1b:65:03:11:7f:12:c9:ea:21:c7:39:37:2c:
                    0a:9e:08:69:06:86:d0:04:7e:72:63:16:c6:03:ea:
                    7b:9f:99:57:77:83:b3:24:5b:1e:be:e5:90:64:26:
                    79:74:6e:eb:8d:b9:b8:fe:f4:fa:b6:fb:52:26:cb:
                    02:16:32:6e:69:36:5c:d7:97:a6:c5:1b:30:61:01:
                    3b:fd:ad:30:98:bb:02:45:3d:fb:ba:02:cf:58:8f:
                    ea:a1:6d:fe:f1:c3:ff:ce:2b:73:90:67:60:5b:3e:
                    85:41:b1:e3:d8:e9:dd:81:b4:23:21:a5:6f:63:6d:
                    ce:70:91:3d:e6:22:2d:16:07:f4:a6:00:85:25:3e:
                    a1:68:2f:b6:aa:7d:67:78:fb:35:e1:68:8c:be:0e:
                    7d:1a:1e:05:94:80:7f:c3:52:e3:94:ce:8e:98:f0:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CA:45:CC:93:2A:80:08:3E:69:4A:82:FD:9F:56:DF:59:D9:64:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:91:1d:bc:79:ca:3f:a1:e5:2d:43:88:b8:ca:bc:4b:03:9f:
         88:33:43:c4:cc:96:81:2c:42:27:07:e0:3a:f6:bd:bf:19:60:
         29:4f:3f:94:ab:28:26:f1:cd:d3:35:f8:65:6d:ff:5e:56:88:
         76:35:51:40:3f:9c:31:60:fb:59:89:73:c7:c1:5c:b9:5c:97:
         56:d1:dc:d6:c4:bd:fc:80:43:f7:1d:a6:ae:67:9b:60:e1:77:
         79:75:49:a5:97:b9:24:a2:8a:4c:1c:d0:42:6e:38:d2:eb:29:
         c0:d6:58:fe:ef:5c:79:1a:bf:40:c2:32:d2:dc:2e:1c:ba:f2:
         95:28:4b:e5:4b:dc:1a:2d:2a:b2:24:25:c7:0e:ef:83:9c:a5:
         12:60:22:5f:0b:e1:ab:97:f5:eb:6c:f2:fa:e3:9b:21:a8:d3:
         c8:1a:16:5f:82:97:2e:fa:67:22:b7:c2:87:f5:19:bd:73:c5:
         15:6a:2e:6d:eb:02:ab:b7:4b:90:49:29:52:a0:51:60:15:d8:
         27:fc:b4:21:15:f2:ea:90:9b:62:ad:44:6f:89:29:a2:15:41:
         a3:52:50:bb:d1:ec:be:59:8d:20:b4:be:24:a6:42:b4:d1:c1:
         5e:66:a9:e8:fb:9c:82:14:0e:33:20:06:2b:0d:7b:74:d9:44:
         99:2e:12:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:51:16 2025 by rpki-client