Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa
File:                     bc8c1de0-49b5-38df-838b-beb87cad869e.roa (raw, json)
Hash identifier:          8i5atxZtlEbsLNFB/BevrYmnGT8PziWS7cL9XI2o/J0=
Subject key identifier:   46:1A:4F:17:71:92:88:47:9B:4E:17:29:D8:70:55:2E:1B:EF:46:39
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285849A4BA4CA92F71D78A8871F280
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     2734
IP address blocks:        2605:6c00:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4c:a9:2f:71:d7:8a:88:71:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=91ee1c2a-4cc6-4d80-be64-9c0a87fd99b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:c5:b2:90:5f:68:f4:2a:44:fa:f4:b6:41:
                    3c:d6:eb:07:0d:60:cc:c4:4c:a1:80:66:12:ab:4b:
                    c1:7d:fa:6c:64:08:a0:93:04:8e:11:f1:18:00:ee:
                    09:90:09:b3:5a:64:12:ae:c8:ae:40:e3:c5:bf:a2:
                    7b:34:f1:71:8e:e4:fc:52:cc:7d:bb:de:0a:27:5a:
                    bc:4f:70:85:27:0b:d1:1f:26:8b:d9:f1:17:7b:43:
                    86:8c:cf:1d:53:ee:4c:b1:48:13:d8:98:b9:78:d0:
                    fc:b0:da:90:51:e9:9b:f1:fa:66:22:2b:44:9c:eb:
                    0f:88:4e:ff:5d:3b:89:46:30:c5:6f:50:4e:00:57:
                    49:00:22:f4:33:e1:4e:4b:c1:8a:89:d2:8c:f3:d0:
                    08:4e:09:ba:fe:3b:38:91:e3:6f:38:64:80:77:c5:
                    ac:5d:50:8e:6b:d5:23:ec:f4:18:5b:ca:40:f7:cc:
                    26:9d:3e:85:7e:bf:7e:0a:0f:55:94:90:12:13:cf:
                    98:b7:bd:d9:d2:38:ec:98:95:f6:6a:b9:d6:8d:a3:
                    16:30:dc:90:1f:fe:7e:78:64:28:65:b6:09:c5:08:
                    61:ab:ed:e4:ba:93:4a:92:f8:a6:cc:0f:25:ff:53:
                    cc:34:63:65:32:11:c5:54:b4:13:4c:ed:8e:56:e4:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1A:4F:17:71:92:88:47:9B:4E:17:29:D8:70:55:2E:1B:EF:46:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/bc8c1de0-49b5-38df-838b-beb87cad869e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:34:ee:00:14:98:92:dd:24:72:fd:89:46:23:99:c9:26:c9:
         7b:7e:ee:9b:1a:72:aa:d0:0d:fd:da:63:38:1a:8c:fe:35:ef:
         53:54:7e:99:bd:3c:0e:02:50:c3:ec:da:5e:7e:c1:69:84:21:
         b9:72:1d:9d:ff:16:de:f7:86:d2:ca:ba:a3:1a:49:3f:3b:9d:
         88:8a:24:e1:3f:ce:d6:1e:1d:f7:f9:07:cf:56:ee:87:0d:24:
         bc:22:05:c3:cf:dd:dc:f7:c3:04:68:d4:f7:03:55:80:33:68:
         59:53:c8:e5:d9:fb:ec:df:10:6a:bb:c3:86:01:78:39:16:75:
         5c:11:07:b6:d6:4c:ce:ec:b0:22:1d:59:6b:95:ac:e0:7a:82:
         38:97:76:c8:2d:c5:b7:fe:ab:ef:85:09:fc:88:2e:64:5f:55:
         30:cc:d3:6a:c1:11:39:77:e5:ef:ed:71:a5:a1:31:18:99:94:
         9e:fe:de:89:d8:ac:1e:67:95:4e:12:1a:39:45:e5:5d:ec:28:
         6d:93:06:cb:f6:87:1d:d2:c4:69:f6:59:9e:b6:ba:6d:f8:8e:
         66:15:ee:3f:60:17:f5:07:4f:04:94:91:54:ce:29:c6:ac:4b:
         65:d8:91:21:3a:75:04:e6:7c:bc:41:01:31:c4:84:2d:0e:f7:
         52:30:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:42:29 2025 by rpki-client