Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa
File:                     1941cca8-631b-3a22-acab-d02a1b20a72c.roa (raw, json)
Hash identifier:          A19cgpHBVS3vDvgNjxVwdg27mXH/zGuRSZxacGAthAA=
Subject key identifier:   38:B9:62:93:95:EF:F8:07:51:B4:91:2F:4C:A1:74:45:2D:99:2C:CB
Certificate issuer:       /CN=a7bb872d-e597-498e-8bd5-d2efae320554
Certificate serial:       010D0C9F43285849806F1FBBFD03759C0B10FB00
Authority key identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     20473
IP address blocks:        2606:ed40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:1f:bb:fd:03:75:9c:0b:10:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bb872d-e597-498e-8bd5-d2efae320554
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=4db2f4e8-f0d1-4c5c-9472-ff6cb26c72f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:72:29:79:84:f4:d2:ca:7e:ab:11:86:a2:54:
                    01:2b:60:b5:bd:08:db:0b:9c:8f:a0:ed:b4:4a:bd:
                    8b:34:1a:7e:1b:f1:9a:c5:2d:27:e0:62:2c:af:27:
                    72:a7:ec:1f:12:40:38:66:0e:bf:bd:f3:0f:fa:d9:
                    f2:58:7c:58:88:3b:52:ca:d6:c0:e4:1a:b5:48:17:
                    3d:57:4c:bc:fa:75:9c:64:84:ef:1e:a7:13:e4:20:
                    7c:22:c1:b1:a3:ee:76:2d:87:3a:54:2a:82:80:0c:
                    e1:73:26:0f:63:f8:6f:43:41:6d:d1:32:5d:c0:01:
                    0b:b4:93:6d:ea:11:61:06:12:b0:46:01:1e:51:b7:
                    b1:97:c2:c5:08:df:57:d2:1a:59:1a:ef:27:f6:84:
                    a5:8b:09:0e:dc:4b:32:23:9a:66:ef:84:79:0f:19:
                    f4:fe:57:38:d7:8c:6c:a6:09:d2:03:43:9f:e0:a5:
                    74:85:1a:59:b6:ee:e3:23:75:b3:28:74:a7:c5:72:
                    cd:57:f9:75:1c:29:68:0c:51:7f:80:85:2b:bd:82:
                    61:e5:38:d7:3b:d4:6c:a1:71:71:a9:d5:f8:ab:c3:
                    ce:ab:95:b0:e4:fe:ac:3d:72:bd:00:a0:05:66:71:
                    bc:75:35:2a:d7:6d:ec:a2:02:c7:2f:d0:e9:e5:1a:
                    2c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B9:62:93:95:EF:F8:07:51:B4:91:2F:4C:A1:74:45:2D:99:2C:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/1941cca8-631b-3a22-acab-d02a1b20a72c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl

            X509v3 Authority Key Identifier:
                keyid:0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cc:fa:e5:ff:83:de:cc:f8:1a:d9:87:7e:b5:1c:b8:e3:e1:
         3f:0a:4b:3c:e0:a4:db:95:1e:f6:55:94:35:67:55:c9:1d:1d:
         5b:31:19:12:2c:b3:6e:3e:c3:20:ad:a7:58:0c:39:ef:5e:d1:
         27:aa:d4:d5:7d:84:90:56:65:c5:7d:25:a4:f6:76:10:4e:ba:
         8e:41:2f:6a:eb:61:b7:4a:dd:cd:38:9d:69:d0:66:7c:8f:35:
         01:56:9b:c8:26:4c:9f:84:92:04:64:a1:c5:69:a0:9b:a1:5f:
         6f:cf:d4:9c:f2:d0:3f:49:47:08:62:6e:7b:66:9a:20:a1:75:
         10:37:d9:e9:84:3c:a7:89:50:d0:bc:03:97:dc:02:bd:d1:85:
         dd:5d:8f:b4:b7:45:1f:dc:64:d9:03:94:21:2f:95:c5:38:61:
         21:e1:53:c0:a2:a7:62:6f:d8:22:ce:41:b9:cc:72:a9:a2:e4:
         d8:0c:4c:7e:1a:3c:95:cd:66:2c:6d:a0:9c:3e:ba:b0:f9:5d:
         62:6f:49:81:9d:d1:11:71:0d:3f:d5:06:1e:5f:ac:da:82:b0:
         64:9e:87:f6:76:57:b9:f1:1d:b5:30:1b:66:6e:8e:d5:56:9a:
         a5:c7:dd:01:2b:de:81:63:89:8e:38:cd:5d:52:6e:18:c6:c3:
         5e:bd:2b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:09:21 2025 by rpki-client