Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/18958e14-27fd-3a98-aa4b-fdebb1f21993.roa
File:                     18958e14-27fd-3a98-aa4b-fdebb1f21993.roa (raw, json)
Hash identifier:          aLZX5BX5MmwQnkUx0REgNXAtC7rjXe4yyOxlOe8d7NQ=
Subject key identifier:   C3:4A:7F:8C:93:D9:70:49:8D:81:AD:01:AD:F8:A2:EA:5A:25:C8:92
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F43285848960B5D1392C4A7FED8818880
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/18958e14-27fd-3a98-aa4b-fdebb1f21993.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     51089
IP address blocks:        2602:2db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:5d:13:92:c4:a7:fe:d8:81:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=6ab12994-18ea-4f20-8540-51d960c654fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:ae:f9:18:3d:16:07:d6:c4:54:b4:68:d7:
                    dd:91:58:5b:d6:7d:1e:c6:af:bb:2c:6a:fd:37:6a:
                    7c:1b:02:2a:a4:f2:1b:53:46:13:cb:80:64:12:47:
                    d1:62:0f:6d:6e:16:d9:ea:0d:3e:6a:55:3f:0f:9e:
                    a1:04:67:96:b8:a4:06:25:5d:5c:8f:7c:99:03:96:
                    17:d2:fa:91:b6:bd:93:fc:2e:dd:d9:16:4a:32:ac:
                    cd:4f:fc:23:cc:1e:a0:9e:57:6b:a1:f4:98:9f:c3:
                    07:1d:f8:70:52:b1:b6:6b:3c:03:34:66:48:64:38:
                    b3:b1:47:63:b6:ea:c8:ee:8b:bd:17:bd:f2:82:6e:
                    e5:99:a3:71:f6:78:44:8e:68:43:b6:d3:48:41:cc:
                    9a:a2:9a:d5:74:58:bd:4a:a2:2e:fe:62:92:14:92:
                    76:f0:d8:15:e0:e4:7a:5b:f2:bb:f0:09:80:4f:d2:
                    8f:5b:c7:f9:42:1e:5c:76:33:36:1a:6f:fd:11:c8:
                    42:51:71:e5:98:ed:25:e6:82:f7:30:2c:46:0e:a5:
                    61:26:2a:eb:4b:49:69:a1:b6:1a:1e:33:f8:24:ed:
                    bf:e8:d7:3b:85:7f:c5:1e:62:27:49:30:a1:1b:df:
                    63:7a:a4:f3:66:56:05:9d:6c:95:b8:c5:a3:b2:ef:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4A:7F:8C:93:D9:70:49:8D:81:AD:01:AD:F8:A2:EA:5A:25:C8:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/18958e14-27fd-3a98-aa4b-fdebb1f21993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:56:80:19:bc:ee:7c:ae:f9:e0:c9:20:fa:c1:ee:93:89:63:
         0c:cd:fd:58:18:47:46:6b:86:c4:7c:cf:e6:49:ac:af:08:66:
         b2:8a:98:8e:6b:dc:8b:42:aa:63:67:69:dd:7b:eb:6d:30:f1:
         54:88:08:a2:45:a9:04:03:0c:c9:3e:be:ba:7e:fb:da:ce:d4:
         7c:4b:93:76:b8:72:a6:da:36:26:2e:e3:64:cc:57:86:c9:c4:
         7b:bb:33:71:c7:80:1c:05:c2:33:4e:8a:e7:9a:da:5e:e0:e5:
         08:1b:ae:00:2d:da:37:b8:0e:59:cf:c3:08:62:5b:e2:29:eb:
         c2:d6:22:e8:2f:b5:b2:0a:6c:0b:8b:42:ce:17:e4:df:ea:bf:
         ca:c0:9b:eb:ff:d2:ba:88:6f:a9:c0:8c:08:7e:09:10:fe:9f:
         04:8b:33:63:32:05:70:b4:15:b9:15:9a:9a:2b:3d:db:d7:bd:
         18:53:d2:28:63:2d:a8:52:bc:d6:6e:94:db:86:3a:91:00:b5:
         92:dc:52:a2:5d:1d:6b:49:7b:23:3d:f7:e6:ac:a5:7b:7e:f7:
         27:08:d1:b1:33:ea:39:ef:b5:bb:94:65:fd:8d:3f:53:00:55:
         dd:4d:d3:96:de:f1:92:08:c8:5a:ec:1b:31:24:ae:4e:7f:39:
         24:e2:c7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:24 2025 by rpki-client