Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/261f833a-66e3-3d69-8956-e5ed30513310.roa
File:                     261f833a-66e3-3d69-8956-e5ed30513310.roa (raw, json)
Hash identifier:          xfrscVY0oTUeQWfeGJzlDcwsLb+IgL32sC5eFVZKafE=
Subject key identifier:   D3:B9:FC:70:5C:A8:A7:0B:C1:FB:02:0E:18:12:2F:1A:EF:2C:09:DA
Certificate issuer:       /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
Certificate serial:       010D0C9F43285848E59BC644C05978B73AC75940
Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/261f833a-66e3-3d69-8956-e5ed30513310.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     6327
IP address blocks:        2001:4e8::/32 maxlen: 48
                          2604:3d00::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c6:44:c0:59:78:b7:3a:c7:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=1c0dd91c-d30a-4284-bf62-152fd69f70d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:75:24:cc:b2:68:44:f4:24:bc:59:9d:39:
                    3a:68:c3:1e:d2:7e:52:f5:57:ad:2d:f9:b7:c4:f8:
                    e2:74:c4:ed:b0:03:d8:47:91:13:bf:6b:d3:be:2e:
                    9d:d7:8b:46:ce:bc:d4:22:d4:b5:98:65:7d:a1:ad:
                    a3:c6:a5:ad:cd:de:c3:b2:15:81:60:0b:ab:18:42:
                    33:69:dc:ff:b2:91:7a:98:dc:18:b6:c4:c4:44:be:
                    fb:de:b1:9a:f0:bd:09:b6:6d:bb:48:51:4c:2e:b6:
                    b6:62:68:38:a4:48:c9:55:d7:93:5b:cc:64:b6:c1:
                    21:43:d2:17:a3:55:b0:5a:61:df:6e:94:61:d0:e7:
                    3b:4f:b5:5c:33:f4:e5:cd:74:61:6b:40:50:4f:4e:
                    d4:80:dc:2a:b3:69:06:30:6d:a1:ff:92:cb:c5:4c:
                    9a:12:b6:12:ae:7f:ae:0f:c7:53:e9:c3:a6:b6:da:
                    c0:41:8b:a0:05:82:ed:10:ec:4a:94:a1:9a:9d:ef:
                    1a:3e:ed:c4:27:7e:c3:16:a8:e8:ba:d2:be:2e:67:
                    0f:3e:2b:f9:97:b7:34:81:b6:82:57:8d:70:2f:df:
                    09:a0:ab:7d:c8:16:a2:a0:5b:43:d4:c3:5b:4c:25:
                    49:60:3a:53:ab:0a:56:ee:f8:a8:2f:e9:3f:13:4d:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B9:FC:70:5C:A8:A7:0B:C1:FB:02:0E:18:12:2F:1A:EF:2C:09:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/261f833a-66e3-3d69-8956-e5ed30513310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl

            X509v3 Authority Key Identifier:
                keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e8::/32
                  2604:3d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d0:51:81:77:88:8e:91:66:af:ae:59:fb:0e:a8:09:bf:d8:
         ee:f4:b2:48:2d:9f:98:e9:ef:cc:70:d2:9c:0d:d3:1f:e5:14:
         d6:ca:d0:e7:5b:22:92:ce:52:75:4b:c7:5f:d5:7f:c9:8f:aa:
         28:9d:d3:29:86:68:53:9a:4b:54:9d:f8:e8:14:8d:cc:4a:65:
         35:65:b9:9d:c9:61:f5:e0:c7:07:b3:9a:69:95:86:69:73:3a:
         8a:6b:30:c0:b5:41:3b:4f:b7:c9:c7:ab:b9:eb:5f:8e:35:67:
         91:84:c6:28:77:ce:f3:ce:38:f2:0a:04:67:90:08:15:99:8e:
         88:5e:c1:f8:39:55:6c:9d:7e:3d:fe:97:78:a8:11:e6:b0:65:
         ea:ed:69:56:55:75:6e:e2:2a:83:35:e7:5e:35:74:72:73:94:
         d5:a7:4f:a0:48:a7:29:ac:21:82:a9:59:98:2f:eb:dd:3b:c6:
         25:68:00:22:7e:36:2f:d5:6a:b9:e0:86:2b:c2:a1:66:ed:71:
         8a:b9:d2:dd:03:77:35:af:74:91:f6:d0:94:25:c3:34:b6:0c:
         f6:c7:32:7b:09:76:28:74:1a:00:e5:53:c8:5c:91:b6:5f:c2:
         24:84:2e:57:05:a7:bc:5d:0a:79:37:4f:55:32:7c:8d:c2:a1:
         90:b8:52:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:30 2025 by rpki-client