Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/39673ca6-7a2a-39a0-8f57-61b941ecf145.roa
File:                     39673ca6-7a2a-39a0-8f57-61b941ecf145.roa (raw, json)
Hash identifier:          XrccLFvOCT7E3FMRWhLK+7HQqy2xBfqde3vnD7PnNss=
Subject key identifier:   D1:0D:2D:D5:6F:35:1B:5D:50:E8:7A:73:34:C0:5E:FF:27:72:FC:A3
Certificate issuer:       /CN=059e9b3f-205b-4b5d-b677-52e2bf626fc6
Certificate serial:       010D0C9F43285849912F28083CA37EE7CFCD9A00
Authority key identifier: 2D:48:3D:B3:8A:0D:5C:1C:DE:B0:90:B7:CA:5A:F3:A2:B7:D6:A8:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/39673ca6-7a2a-39a0-8f57-61b941ecf145.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     26
IP address blocks:        2620:110:d000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/059e9b3f-205b-4b5d-b677-52e2bf626fc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/059e9b3f-205b-4b5d-b677-52e2bf626fc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:28:08:3c:a3:7e:e7:cf:cd:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059e9b3f-205b-4b5d-b677-52e2bf626fc6
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=169b5647-9d59-4a80-a92d-97421eae470d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:16:96:fa:f4:aa:51:e5:23:ef:14:5c:4d:d9:
                    e6:91:8c:22:32:32:b7:c2:2c:75:fa:69:92:b7:82:
                    cf:28:9f:f5:b2:08:80:16:a4:01:e6:14:a9:52:91:
                    ef:a1:6e:6a:8f:81:b4:04:8a:1b:b6:95:13:33:69:
                    2a:1a:ad:88:57:10:50:9f:c9:e2:19:1d:2c:cc:89:
                    a7:7b:b6:36:0e:36:06:21:21:04:c4:42:1c:aa:cd:
                    3b:0f:c5:df:91:d0:6f:ed:59:d9:12:26:43:04:64:
                    40:46:f4:8e:88:f4:68:0d:7e:93:44:2d:79:b4:b4:
                    a9:f0:9b:1a:c2:bb:09:6a:a3:17:5f:6a:58:da:b5:
                    d2:c9:e4:08:dd:c3:4d:4d:97:56:04:96:59:36:70:
                    7e:63:36:4b:10:79:1e:58:b2:34:c1:49:76:8c:bf:
                    a8:ec:6a:d5:8e:4f:04:50:07:b8:d5:d0:77:77:fa:
                    b3:d3:84:4e:f6:12:16:3e:ce:e1:f9:eb:e4:6b:bd:
                    c1:64:5f:7a:44:5a:18:97:e0:1d:5e:d1:ec:c9:d3:
                    2a:11:e6:0e:36:21:3d:ec:d6:ab:c9:5c:85:0a:4a:
                    bc:4d:6b:e2:77:62:a1:1d:43:67:27:10:1e:59:4b:
                    77:18:11:cd:81:83:5f:1e:e9:92:4f:c7:48:cb:96:
                    69:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0D:2D:D5:6F:35:1B:5D:50:E8:7A:73:34:C0:5E:FF:27:72:FC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/39673ca6-7a2a-39a0-8f57-61b941ecf145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6/059e9b3f-205b-4b5d-b677-52e2bf626fc6.crl

            X509v3 Authority Key Identifier:
                keyid:2D:48:3D:B3:8A:0D:5C:1C:DE:B0:90:B7:CA:5A:F3:A2:B7:D6:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/059e9b3f-205b-4b5d-b677-52e2bf626fc6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:110:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:68:31:fb:e0:86:32:1f:18:db:ab:ad:41:d4:b3:da:30:38:
         88:9d:16:97:84:8e:58:a2:28:7f:e2:0a:81:ba:3d:fc:e6:16:
         4f:4a:1b:43:a6:90:92:4e:ef:9d:58:25:19:0f:f2:90:f5:a2:
         c4:65:fb:93:da:e4:24:b4:75:29:e4:6c:81:9c:a4:6a:95:8c:
         f5:cc:f2:a2:2c:8e:83:21:3f:72:77:4a:64:76:21:29:53:f2:
         d7:df:f2:9a:75:15:89:a1:d2:ff:f4:27:20:11:1b:cc:43:3a:
         7f:6c:17:8c:7d:87:73:53:32:99:6b:50:4e:b0:1c:d1:9d:17:
         32:78:6b:bb:d3:07:c8:bf:4c:6f:3f:16:ed:f4:6f:13:9e:be:
         e6:e2:16:79:80:64:95:2f:18:38:8e:4a:96:76:24:cf:f6:05:
         ab:c9:36:2c:ae:09:4c:0b:d6:9d:60:60:2b:fa:e4:7f:2e:a8:
         64:12:9d:8c:3e:5d:29:03:18:81:3d:79:21:da:26:6a:c4:2b:
         c9:a1:f8:23:16:e2:8f:63:8d:cd:d6:3f:69:c1:b8:28:7d:fc:
         a4:d7:05:57:da:c3:4e:8d:f4:99:5c:59:8a:05:70:bb:df:29:
         9d:e9:f3:4d:9d:58:80:0f:67:36:ca:77:93:0a:6f:ab:2b:c1:
         36:30:05:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:11:48 2025 by rpki-client