Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/cb11550e-799e-3edd-b45e-f62709cebf21.roa
File:                     cb11550e-799e-3edd-b45e-f62709cebf21.roa (raw, json)
Hash identifier:          Cp5xgY9Pw+7uURLp4+dY5coIyeHvuAJKqEEhmpgUUOw=
Subject key identifier:   9B:C0:A1:00:5A:C5:21:56:1D:B2:2A:D3:20:4D:7A:EC:F3:0E:2F:EA
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285848EC9685A09BCB9A29A8BEA700
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/cb11550e-799e-3edd-b45e-f62709cebf21.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     4181
IP address blocks:        2610:1f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:85:a0:9b:cb:9a:29:a8:be:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=40dc9e82-ca70-4626-a399-f35e4fe1de28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:b2:83:bd:ee:fd:d5:e7:db:64:9d:02:2a:
                    d6:05:80:f8:46:d4:0f:04:b1:5d:6e:d7:b0:58:78:
                    79:10:02:0f:e6:f9:a2:dc:82:cb:58:f9:e3:1e:ea:
                    a4:99:b2:c6:cc:72:b7:4d:a7:76:0d:7c:30:ef:01:
                    09:bd:62:ca:7f:45:6c:aa:08:ed:b3:a2:81:db:22:
                    f7:ed:a9:f5:b6:fb:00:89:eb:6d:03:59:e5:86:c1:
                    04:81:da:da:36:f9:da:4d:10:42:14:ac:94:7a:0d:
                    12:b7:80:84:b6:77:2b:84:66:fc:82:77:a5:98:e9:
                    98:c0:d5:49:b1:31:82:a6:77:8e:b7:7a:12:aa:44:
                    8f:be:63:f2:fa:2c:4b:25:0b:02:11:f0:fa:c4:76:
                    56:c0:92:c5:d6:05:89:5c:b5:f4:0d:49:ce:d6:ca:
                    b1:38:02:0f:88:1f:1c:b8:83:52:27:c8:e0:13:23:
                    cd:6d:38:38:5f:71:42:be:c3:6b:6b:a5:a8:d2:93:
                    53:aa:9e:c1:33:44:18:ba:71:56:b4:45:93:5b:70:
                    f8:58:85:2e:e5:a1:07:98:c3:37:ae:59:04:1a:ac:
                    a1:c3:fc:3f:c9:b6:4b:0d:74:fc:15:36:8f:f2:79:
                    04:72:6f:22:61:6f:de:e6:1e:af:4f:75:fe:eb:76:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C0:A1:00:5A:C5:21:56:1D:B2:2A:D3:20:4D:7A:EC:F3:0E:2F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/cb11550e-799e-3edd-b45e-f62709cebf21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:1f0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:23:47:a1:37:5c:c5:54:27:25:74:10:99:f5:ba:0d:e7:af:
         ae:b0:9a:8e:0a:25:b7:dd:a3:7b:08:9c:ef:43:2c:21:4e:3f:
         9b:7c:7a:42:4b:cc:d2:e9:22:4a:de:2a:a0:7f:61:f0:f0:67:
         94:79:b9:de:93:67:10:fc:c3:70:50:3f:6f:a9:11:e0:8e:d4:
         96:53:d7:7b:f4:4b:8a:87:95:b8:bc:a3:bf:1d:23:62:f9:47:
         0c:08:35:49:92:13:7b:1d:0e:7e:ca:7e:15:9e:12:aa:d7:3d:
         8f:02:81:58:55:13:64:f6:8d:fc:ae:eb:ae:cf:5a:1e:64:03:
         8f:95:c0:cc:e3:e8:ec:26:77:cd:1f:3c:d3:17:9d:b5:d1:63:
         b1:7f:0f:7c:76:04:ee:c2:2c:d2:f9:c0:dc:11:2f:64:81:23:
         ed:29:d2:7f:e8:17:9c:d2:3e:a6:e2:7f:26:75:52:af:9e:ca:
         98:34:0c:36:a7:37:ee:75:f7:c7:97:a4:d1:f5:99:b7:c4:e6:
         ae:f1:2a:30:27:83:45:b1:3b:70:35:dc:42:a5:3c:c8:50:c8:
         42:bb:19:3c:6a:d5:ca:84:00:ab:ca:90:2f:0f:c0:94:dd:8b:
         8d:df:5f:86:fb:69:4b:cd:ed:9a:99:6a:74:9a:60:42:b3:7a:
         ac:f7:89:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:46:19 2025 by rpki-client