Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/dea88e70-2863-32bb-ba26-6e6bf8f463b9.roa
File:                     dea88e70-2863-32bb-ba26-6e6bf8f463b9.roa (raw, json)
Hash identifier:          17KorYzyQ3VCnG/nH8YHpXqRRZYZVqDnGXhCIoUsuu4=
Subject key identifier:   A5:BF:02:17:B2:FD:86:AE:F9:0A:4F:ED:AC:F2:FD:23:66:CB:E1:F0
Certificate issuer:       /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial:       010D0C9F432858499D4FAE72648B698DD99714C0
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/dea88e70-2863-32bb-ba26-6e6bf8f463b9.roa
Signing time:             Tue 22 Apr 2025 21:16:17 +0000
ROA not before:           Tue 22 Apr 2025 21:16:17 +0000
ROA not after:            Mon 21 Jul 2025 21:16:17 +0000
asID:                     1828
IP address blocks:        2605:f500:8106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:4f:ae:72:64:8b:69:8d:d9:97:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
        Validity
            Not Before: Apr 22 21:16:17 2025 GMT
            Not After : Jul 21 21:16:17 2025 GMT
        Subject: CN=8d15a3b1-b17f-469b-b84f-314c207b8b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d8:b5:6f:19:39:df:26:76:44:f3:9d:10:7d:
                    3b:df:7d:91:2c:5b:6f:2a:19:71:7a:f8:1f:b4:b2:
                    21:d5:31:de:b3:c6:39:4e:74:2a:e8:ca:73:cb:2b:
                    f9:2a:6a:ae:31:9b:60:74:89:0f:2e:68:54:39:13:
                    c1:65:a8:07:be:28:11:0d:b2:b4:29:c8:10:00:85:
                    7f:e7:80:dc:a3:fc:22:87:d0:a3:8f:52:c1:fa:ee:
                    c1:a0:c0:0b:06:d2:27:d1:9f:57:2f:44:49:9d:64:
                    0c:63:84:42:06:44:c2:0e:32:7d:48:8c:f2:02:13:
                    ff:12:12:2d:fd:8f:74:b5:71:5e:56:18:64:b3:c8:
                    12:cf:56:ed:32:fd:87:d9:d5:30:51:9d:f0:d5:7c:
                    49:a9:f8:e8:93:ea:22:3c:da:ff:d1:66:70:84:f7:
                    c1:68:2f:f2:15:a9:ab:46:d0:fa:24:dd:82:b7:56:
                    95:35:28:fe:66:82:57:79:9d:90:29:0b:72:47:59:
                    3e:da:40:f4:38:e4:27:54:96:d5:ff:aa:4e:ce:51:
                    2f:61:0a:90:af:ab:7c:a2:d5:92:09:ca:26:d2:53:
                    42:00:20:cc:9a:40:45:5d:ae:61:ed:e3:10:a0:76:
                    a9:b9:c8:bf:ed:34:a6:22:cc:ca:ce:62:fe:50:65:
                    d1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:02:17:B2:FD:86:AE:F9:0A:4F:ED:AC:F2:FD:23:66:CB:E1:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/dea88e70-2863-32bb-ba26-6e6bf8f463b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f500:8106::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0d:cc:3e:d8:22:eb:b0:9e:85:e9:05:9a:f9:0a:57:d9:46:
         3a:76:f4:d1:56:13:60:46:fa:99:5c:36:b5:cf:de:18:d5:fd:
         87:e2:fe:ad:f4:52:cf:4b:d9:9b:52:64:81:d2:3d:d0:d7:e3:
         57:bd:5e:1c:ab:dc:77:a1:6b:ec:96:75:85:7f:d9:01:17:56:
         85:66:81:3a:90:2b:09:b5:c8:18:1b:dc:7b:89:dd:fd:4c:3c:
         4f:b1:8a:c3:bc:11:8b:08:e1:16:67:83:9a:17:79:82:5f:f6:
         b6:24:47:eb:e6:fe:4c:3e:92:48:82:41:de:d8:93:ab:2a:1c:
         ae:f9:c8:50:53:3e:06:39:c6:1e:04:05:6e:44:05:19:e6:19:
         90:74:15:f2:e5:6b:ae:e2:03:bd:f4:3f:74:11:66:d5:8b:c7:
         69:31:64:01:9b:38:80:bd:d0:36:30:8a:ad:a5:1b:b8:3b:6b:
         7c:5e:55:da:3d:da:9a:45:72:ff:f7:23:5b:e5:7c:b7:c2:32:
         e6:dc:e4:09:a6:db:34:14:90:4e:3e:41:ab:da:7a:71:db:ec:
         eb:1e:94:9c:62:54:fe:0e:5e:56:41:e4:34:69:b4:79:1f:09:
         14:c5:1f:f4:36:c6:d3:fc:04:5a:a7:c8:2e:ed:a0:01:d2:9f:
         71:88:58:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:23:01 2025 by rpki-client