Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/18758d38-3281-3407-8983-bbb4ff49eba0.roa
File:                     18758d38-3281-3407-8983-bbb4ff49eba0.roa (raw, json)
Hash identifier:          fdlThzGB5aGSo9BZ0dzEshTS+zjCFvRJF1muJIcHQeE=
Subject key identifier:   37:4B:44:95:2C:5B:48:18:1C:E2:01:7A:AD:88:9F:77:B8:E8:46:4C
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F43285849277C0DEDEB8C7B0D45775400
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/18758d38-3281-3407-8983-bbb4ff49eba0.roa
Signing time:             Tue 11 Mar 2025 16:20:18 +0000
ROA not before:           Tue 11 Mar 2025 16:20:18 +0000
ROA not after:            Mon 09 Jun 2025 16:20:18 +0000
asID:                     400400
IP address blocks:        2607:c880::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:27:7c:0d:ed:eb:8c:7b:0d:45:77:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Mar 11 16:20:18 2025 GMT
            Not After : Jun  9 16:20:18 2025 GMT
        Subject: CN=6b2eba2c-ff81-446b-8d2f-3d7eebffcd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:43:98:96:c4:1c:90:ce:7e:9a:9b:f7:db:
                    42:df:2f:23:a0:03:6b:b0:22:cd:c2:bf:c7:3f:3b:
                    7c:95:c9:29:fa:5c:b4:26:ab:7b:e9:ad:2a:8e:37:
                    eb:4c:05:53:bc:df:79:0f:00:e1:9d:71:0c:c7:d8:
                    d3:93:34:67:76:97:22:f9:e3:ae:9d:56:14:b6:18:
                    3d:70:81:25:fc:05:12:ce:de:57:f6:0a:0f:85:1b:
                    d4:46:c6:42:84:5b:bd:2c:ca:6d:25:b7:83:cc:15:
                    9c:00:e5:93:6f:37:31:42:da:92:f0:8e:34:9e:2a:
                    dd:4f:06:90:f6:e2:6c:ee:86:5e:a6:4c:5c:9f:8e:
                    34:34:c2:6a:d0:09:72:ca:83:75:36:50:70:6e:64:
                    71:21:ec:55:fe:b2:9f:fb:4d:e8:69:02:48:61:7e:
                    53:62:25:9b:87:61:0f:e0:2e:2d:84:44:a7:ae:a7:
                    1d:71:c0:eb:2e:cc:4d:71:a9:62:83:67:de:56:fd:
                    0d:94:98:5c:ef:98:cd:46:9c:07:dd:ce:51:29:06:
                    30:f5:8b:1d:20:ab:2b:e7:c4:9d:f9:ef:22:16:8d:
                    01:a1:b5:4a:1d:20:26:69:b7:12:fb:d1:b2:20:14:
                    71:91:90:56:7e:96:4d:f7:d9:21:5b:c1:08:b8:08:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4B:44:95:2C:5B:48:18:1C:E2:01:7A:AD:88:9F:77:B8:E8:46:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/18758d38-3281-3407-8983-bbb4ff49eba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c880::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:64:b9:09:21:4f:43:e4:2a:3c:14:67:9d:38:44:f4:ee:c0:
         d2:96:bc:18:09:97:8a:7b:e2:a2:f9:6a:5f:e2:67:18:8a:01:
         65:aa:de:80:c5:26:ed:bd:fa:a4:46:0f:29:28:e4:a8:aa:ad:
         b9:cc:38:82:11:53:15:99:25:86:c7:a9:e0:83:1d:68:21:95:
         80:40:de:53:99:e7:87:01:8a:40:60:b7:e3:a2:d4:c2:6c:9d:
         dd:c1:3b:50:0e:5d:b0:d1:ee:b9:0e:ee:29:97:a5:cb:4a:29:
         9b:99:98:c2:c0:c1:6c:28:57:3a:7a:63:23:08:92:7c:ac:70:
         38:c0:68:74:a9:ee:76:6c:1f:29:18:1b:ed:f4:4a:9e:0a:a1:
         0a:58:7b:74:54:75:2a:b6:0a:ae:c2:ad:e9:50:37:8c:a8:0d:
         1b:3a:c6:f6:a6:f5:d8:82:7b:7d:ea:db:07:23:ce:78:d6:8c:
         4e:59:51:2d:a1:a0:fb:af:13:6c:17:0f:44:ec:b5:07:a0:b6:
         f8:0f:b4:f1:2c:15:5e:d6:08:11:d0:74:fe:8b:2e:1d:8f:79:
         f1:c9:ec:fe:ab:a3:6d:ac:cf:3f:87:11:f4:d0:9e:e8:c9:66:
         6e:46:3f:d2:68:fe:ca:bd:15:fb:81:04:ce:c5:19:ed:5c:6c:
         6f:c6:6e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:43 2025 by rpki-client