Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02cb9083-1790-3b86-9870-2e69d7095b6c.roa
File:                     02cb9083-1790-3b86-9870-2e69d7095b6c.roa (raw, json)
Hash identifier:          q/wqwqR3RwoqcymVCG3eVlOSycUjLoQs6d43coxOcIU=
Subject key identifier:   29:4C:D8:45:A8:5C:B3:82:28:8C:53:87:F5:9B:61:80:33:E0:E4:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849194199F0084CE45E5D17A500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02cb9083-1790-3b86-9870-2e69d7095b6c.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        64.6.72.7/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:99:f0:08:4c:e4:5e:5d:17:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=5eb9b30d-b9b4-4ebb-9ce9-a57981b3819c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:c2:28:a1:3e:cb:83:10:cf:c8:ea:ef:67:
                    f5:46:eb:47:34:80:f2:59:ce:e3:83:17:78:83:7c:
                    13:e1:4e:60:c2:d8:ee:c2:bd:6d:7f:a4:c4:09:cd:
                    e0:3c:65:ed:99:60:c6:3d:75:01:4f:4b:50:7b:31:
                    7a:cd:86:dd:11:95:a5:8c:e3:e6:02:f5:1a:75:b3:
                    cc:56:aa:d6:86:bc:76:1d:b2:89:f5:22:04:a9:ea:
                    90:e9:21:e9:06:cf:85:2e:5b:4a:41:c1:9d:e6:b0:
                    8a:a5:6d:dc:02:e1:d8:67:47:aa:9b:51:66:00:1a:
                    3c:9d:38:05:ec:c4:2e:50:56:ae:8b:62:44:cd:ac:
                    31:69:27:53:4a:41:be:05:91:9f:41:a7:8d:8d:23:
                    d9:8e:f6:79:58:74:7b:8b:74:9a:3d:8b:94:4e:90:
                    87:1b:1f:32:2d:ec:46:8d:f6:94:b4:b5:2f:e0:fe:
                    97:5e:71:aa:bd:5e:6c:af:36:06:94:c8:4f:6f:4c:
                    fb:59:8a:b8:cf:a7:c2:fd:e2:36:27:69:75:a3:23:
                    d1:7c:fc:22:0b:6f:b1:23:f2:3d:83:04:6c:38:d4:
                    4b:ea:29:ae:6a:99:71:79:a6:a0:4b:1a:eb:72:55:
                    06:8e:d5:4f:66:70:58:25:81:b0:92:e7:54:33:df:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4C:D8:45:A8:5C:B3:82:28:8C:53:87:F5:9B:61:80:33:E0:E4:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02cb9083-1790-3b86-9870-2e69d7095b6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.72.7/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0d:c7:f1:41:d2:13:19:9e:b0:24:4d:d4:56:cb:20:1c:49:
         78:cf:68:2e:d3:0b:dc:51:2d:44:2f:04:a0:52:15:fa:e9:aa:
         79:52:b6:c1:f5:0f:f5:44:d6:27:ac:c3:83:2c:06:24:82:01:
         a7:89:eb:ca:30:93:55:7e:8b:9f:de:89:b0:ba:8b:53:cd:83:
         45:68:83:76:7d:61:bd:9e:56:c6:b1:19:20:00:7d:c9:af:22:
         86:7f:34:50:b8:f8:dd:94:d5:08:01:76:21:eb:02:72:48:15:
         e2:79:e2:21:52:d7:c0:47:1f:34:aa:4b:e3:c7:5e:42:01:43:
         5e:4c:42:1a:db:b8:b4:df:da:5c:6a:55:54:ef:ae:d5:a0:6e:
         71:d0:34:c3:46:ac:0d:c8:8f:6e:ed:7a:c0:d0:74:7a:ca:4d:
         55:0e:1c:43:bf:13:4d:9f:4b:4c:36:05:2d:32:98:3c:b8:b3:
         90:2b:e3:13:63:19:32:92:0a:a0:53:ce:02:5b:b1:a3:b5:fc:
         98:e9:d1:27:45:8b:c7:87:5f:26:0b:6f:99:d6:aa:73:97:9e:
         a7:0e:ae:de:53:57:3d:8e:fe:15:b9:87:da:a9:c6:1c:57:5b:
         ea:8d:3b:15:68:5d:c1:2f:32:6f:dd:23:fe:30:df:bc:ba:64:
         24:d6:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:14 2025 by rpki-client