Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/2b015a4d-c526-3743-b151-49b3a927738c.roa
File:                     2b015a4d-c526-3743-b151-49b3a927738c.roa (raw, json)
Hash identifier:          m0e4VjrUKuOrwn8EsgW7su5o+qUJvSSpa2zz0GOnucI=
Subject key identifier:   B0:2E:B8:B5:76:47:CD:58:FC:C1:3C:9B:7C:95:B2:1D:82:A5:8F:B8
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F432858494CC950ADED259E4334CAB1C0
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/2b015a4d-c526-3743-b151-49b3a927738c.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     46407
IP address blocks:        2001:19f0:a06::/48 maxlen: 48
                          2001:19f0:a07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:50:ad:ed:25:9e:43:34:ca:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=ece1a1b1-3076-4920-a8fc-51bc78b19bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ec:59:41:0d:39:39:0e:90:0e:90:62:dd:d8:
                    96:66:0c:fb:a8:dc:62:6b:03:5c:d0:bd:7a:a2:e6:
                    39:8f:23:ab:7a:3a:ef:d4:7d:cf:49:5e:f5:c8:9f:
                    c2:fa:85:f9:d0:e5:1b:fb:e3:a2:e7:ab:90:84:12:
                    22:c1:95:05:b5:84:97:4f:75:26:ba:f3:4d:02:3d:
                    e6:3d:96:44:3f:97:40:6b:64:f0:37:77:cc:24:a4:
                    02:7a:22:3e:aa:93:8d:e9:0a:43:b8:d6:40:b2:bc:
                    a9:6c:e6:2a:e0:1d:d4:ed:40:8c:92:e3:42:0d:28:
                    f4:78:1f:9a:6b:e4:2b:a6:3c:6b:39:cc:4a:de:b1:
                    3e:3d:44:b0:f6:29:6d:b4:d6:90:0b:c6:ac:c6:13:
                    61:55:a8:42:8a:99:e7:f5:29:7b:c2:81:c4:71:27:
                    62:35:45:e0:3a:66:79:15:68:1c:dc:ca:0b:07:d6:
                    96:48:52:e8:3b:cf:7c:77:b9:3d:65:4d:49:53:57:
                    3a:93:22:2d:7e:c7:1f:6f:08:72:3d:f6:f9:24:24:
                    48:1d:d4:3c:11:55:f8:61:41:54:e5:f9:78:ce:16:
                    27:ef:14:d7:d0:53:9c:a3:cd:16:00:f1:99:8b:23:
                    d3:36:0c:eb:c6:a8:c8:46:36:10:1b:5d:8a:a9:41:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2E:B8:B5:76:47:CD:58:FC:C1:3C:9B:7C:95:B2:1D:82:A5:8F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/2b015a4d-c526-3743-b151-49b3a927738c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19f0:a06::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:2c:bd:61:cd:9e:cf:da:d8:f3:0c:ec:a5:1d:fc:fa:21:33:
         cc:7d:95:62:a3:16:fd:cc:9c:32:01:27:ef:c5:19:77:ea:ac:
         6d:bc:6e:f5:31:66:19:2c:b2:d0:d1:6d:88:de:6f:63:ae:6f:
         f2:11:c8:9e:86:12:a2:e5:c6:17:96:83:32:68:df:67:31:7e:
         2e:32:68:2f:09:84:6d:c9:9d:67:ef:19:05:c5:b2:ef:45:a8:
         78:c8:d0:16:1f:23:98:df:03:e7:be:99:f0:51:a1:cb:c6:ff:
         cd:8c:1a:0a:a4:8d:16:1b:84:5e:92:37:5d:d7:32:e5:d1:0c:
         21:fb:fa:0e:03:b2:d5:56:9c:58:72:18:19:20:da:5b:e6:f4:
         f3:63:cc:3c:cd:b3:e2:96:50:71:db:bb:2f:97:5a:a4:fb:a0:
         fd:6e:e8:de:f8:05:9d:44:2e:6c:bd:4f:83:b3:3b:cb:44:59:
         87:4d:7a:a0:f7:c2:59:24:6f:26:2c:cc:87:ce:7e:34:64:92:
         1e:de:40:12:1e:dd:df:09:78:6d:1c:79:d7:5d:ba:03:05:2b:
         4e:d6:b6:85:84:6e:25:92:56:d2:75:02:0a:42:7b:8d:87:3a:
         02:96:ea:2b:71:2b:43:21:cc:76:56:18:ab:90:48:08:b2:3e:
         34:85:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:54:55 2025 by rpki-client