Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/750f5913-c728-3830-931e-bc607abd8f3c.roa
File:                     750f5913-c728-3830-931e-bc607abd8f3c.roa (raw, json)
Hash identifier:          flm079iEA7SeN3Y4YjEw3URNKj4uKBo6lRL7swlp4ww=
Subject key identifier:   63:14:45:A7:B7:E0:CB:DB:DC:AC:46:B4:BE:C3:5F:8E:84:AF:91:6B
Certificate issuer:       /CN=1d7e3237-b117-456b-b736-2b3c2300bcfe
Certificate serial:       010D0C9F43285849350EA4EB75FD8D8E4F697C40
Authority key identifier: 15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/750f5913-c728-3830-931e-bc607abd8f3c.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     395033
IP address blocks:        2602:ff19::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a4:eb:75:fd:8d:8e:4f:69:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d7e3237-b117-456b-b736-2b3c2300bcfe
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=74ed5e5c-09de-41b8-bc18-d2a31a266790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:cd:54:77:74:5d:82:d5:16:fc:02:4c:d0:
                    fa:1d:51:9e:a4:a5:25:2c:17:57:b4:83:37:d1:43:
                    92:de:8a:91:63:6e:8d:ba:ba:fa:d8:ff:8c:46:14:
                    93:95:6c:e3:20:e0:52:2e:17:b9:14:47:2c:24:e4:
                    57:b9:0b:48:35:0b:e1:8b:39:b4:f1:af:87:55:19:
                    b7:ca:46:48:34:0f:a5:c6:3a:85:20:b3:a0:91:89:
                    04:f3:a1:43:99:09:c4:a5:a2:1d:66:4e:f1:2b:08:
                    cb:1a:3c:c8:0a:c3:e5:51:91:05:6f:9c:ac:06:cb:
                    7d:d5:29:80:23:d8:4b:e4:50:70:36:c8:ef:87:18:
                    f9:de:1f:ff:f3:ca:97:fd:bd:0b:cd:c8:f8:83:f5:
                    97:ac:d3:fa:ae:3e:44:97:25:88:49:94:78:3c:c3:
                    be:1c:9f:e0:a8:8b:dd:e6:bd:f4:ec:e6:d9:17:84:
                    8a:2e:3d:ab:32:e2:81:fe:8c:af:53:3d:4a:a6:42:
                    09:1e:c0:9e:c7:4f:bc:f8:6e:58:56:a1:e9:5f:66:
                    14:2f:14:db:da:a6:af:56:12:43:2c:b6:f3:6a:55:
                    e0:91:2a:9f:59:58:33:14:4d:02:52:bd:1c:94:02:
                    0f:51:24:45:f1:67:26:59:9b:a1:d9:58:7b:a3:df:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:14:45:A7:B7:E0:CB:DB:DC:AC:46:B4:BE:C3:5F:8E:84:AF:91:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/750f5913-c728-3830-931e-bc607abd8f3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl

            X509v3 Authority Key Identifier:
                keyid:15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff19::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:c1:91:85:79:c5:39:69:10:34:16:77:70:0d:93:8b:af:
         f4:ac:40:79:3f:83:72:03:bf:69:b4:15:b4:35:ee:be:b6:a5:
         1a:ec:92:c0:c4:5c:a5:38:6b:68:c9:1b:84:2a:fa:f7:8a:b0:
         fd:8f:bb:30:75:1a:4e:bf:54:00:8e:a6:02:53:c1:c6:a1:dc:
         43:f4:de:f2:36:d2:69:4f:18:3d:4f:b9:e8:85:50:86:cd:02:
         0b:54:8a:a8:2f:bc:5b:6b:42:59:ff:14:05:73:27:f1:2c:00:
         29:22:6c:85:1b:16:d7:b3:7b:78:92:0b:79:92:f6:c8:e7:20:
         40:e8:53:db:b8:65:3b:4d:7b:1b:b6:c8:07:33:dd:a8:71:cf:
         04:ca:ae:2a:a9:9c:0a:8f:7e:82:93:7f:a2:ef:b2:18:d9:f6:
         34:98:30:13:48:d1:ae:d4:bc:8e:c6:2d:08:62:86:ec:82:ea:
         e3:4a:38:2d:7b:a5:01:44:f1:3a:d2:b4:3c:8b:ad:32:49:a4:
         45:e1:ba:86:56:f1:28:da:72:47:4d:af:54:f2:7c:51:96:41:
         30:95:2b:01:df:1c:ae:5f:15:9f:98:b6:a6:5a:e9:af:3b:fc:
         93:21:ff:81:9a:b1:5f:25:c0:80:d9:b3:38:10:77:14:b4:e5:
         7e:eb:e7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:34:58 2025 by rpki-client