Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/f84550fa-09d1-3b5d-96a7-925c421561fa.roa
File:                     f84550fa-09d1-3b5d-96a7-925c421561fa.roa (raw, json)
Hash identifier:          Ln9lHcjW79lMQyj3iTh6/DteBhpqFc1gh2/xkvOx6CA=
Subject key identifier:   6E:2B:86:92:6A:9D:20:1A:6C:44:95:74:44:2D:95:24:98:9E:D9:4A
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F43285848E9CBE3B7D4BF6E509CD4C780
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/f84550fa-09d1-3b5d-96a7-925c421561fa.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     203283
IP address blocks:        2602:2db:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:e3:b7:d4:bf:6e:50:9c:d4:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=883582b6-d1f5-4789-8651-b0beb924447c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:3a:ba:3f:b7:01:02:88:e1:54:9c:b9:61:
                    29:80:02:53:1f:c9:f6:92:9c:3c:4a:94:72:51:f0:
                    7f:94:52:36:af:e4:8e:9d:62:11:71:26:fe:03:b8:
                    20:64:8c:19:8f:61:76:a7:4b:27:57:82:e7:e0:c2:
                    1a:b2:d5:3c:e7:dd:41:01:b0:a9:b7:7b:fa:0b:a7:
                    52:f3:95:2c:44:15:ff:e9:16:10:9a:b8:86:e3:cf:
                    a7:eb:cc:c8:fd:7e:67:08:43:5c:37:43:d8:f1:70:
                    a8:c0:b5:60:b0:be:d4:ca:0c:a6:47:c8:ca:c1:fd:
                    14:0a:1a:ea:bb:fe:4a:99:bc:05:bd:f7:e7:8c:1a:
                    b3:11:97:eb:9e:5c:da:05:c5:87:92:13:f7:34:eb:
                    ad:68:60:9d:36:36:82:b8:d1:59:26:e0:0e:df:7a:
                    90:5b:e6:25:1b:82:5e:d0:41:f0:ae:3b:4c:13:12:
                    65:c0:d2:4b:ea:81:66:a1:b0:e0:30:bf:6c:51:4f:
                    67:bb:c8:00:f8:2a:8d:9f:76:7b:6f:06:54:16:22:
                    54:34:f4:c7:59:42:60:06:b0:ca:4a:9d:5c:db:30:
                    c7:cf:bb:e9:15:95:35:e2:5a:12:82:b0:f3:34:df:
                    19:58:d6:40:3a:9b:c0:2d:71:88:eb:4d:9d:35:ef:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2B:86:92:6A:9D:20:1A:6C:44:95:74:44:2D:95:24:98:9E:D9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/f84550fa-09d1-3b5d-96a7-925c421561fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:ec:eb:98:e9:d1:1d:52:68:48:5a:9c:25:83:88:22:af:
         df:01:c0:88:17:27:50:2e:d2:90:9e:66:22:30:88:c4:88:72:
         91:64:40:ea:6f:c6:a1:73:d2:2b:af:54:6a:32:a4:af:3a:9c:
         88:c1:99:1b:b1:c4:51:07:ba:d8:06:00:0f:c6:a0:ff:14:de:
         be:3e:bc:1c:be:c6:9c:e6:3e:26:5c:de:57:94:43:0c:6e:53:
         75:40:8d:3a:67:38:4c:27:75:a5:7e:4a:93:56:62:a3:99:44:
         c0:ae:4d:4a:4b:7d:47:0a:c4:18:d1:c8:a4:40:03:3a:39:79:
         b1:76:ed:ed:38:38:ae:69:f7:11:36:36:8e:33:a3:58:2e:d7:
         a6:15:7a:02:c3:7d:c4:a3:86:d1:76:68:77:bd:41:ab:2a:fd:
         49:94:6b:da:11:52:21:2e:c3:19:28:90:2d:db:9c:e5:c4:61:
         59:9b:34:a2:02:27:34:a3:d7:fa:25:e1:72:85:fd:3d:40:cf:
         36:bc:4b:29:d7:cd:81:8b:1b:47:3d:ad:ef:9e:84:a2:5b:fc:
         63:2d:f0:ac:a5:92:06:1a:4d:c6:c7:b3:78:bf:5b:d3:a6:17:
         0d:8b:4a:86:7b:43:59:51:29:f4:25:bf:0f:06:55:60:f9:f1:
         b9:02:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:55:14 2025 by rpki-client