Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/22eb0f31-08e4-3cac-9916-99505e16517c.roa
File:                     22eb0f31-08e4-3cac-9916-99505e16517c.roa (raw, json)
Hash identifier:          3SXDv3P9hABQxkJh3UY9W+GUSQnFWJWa4ThQ5pum6Pg=
Subject key identifier:   DD:3E:8B:97:6B:7A:F5:9C:5C:68:3A:13:43:3F:2A:4B:AC:ED:3C:26
Certificate issuer:       /CN=9b1ca75e-4539-4223-b200-925398eb3409
Certificate serial:       010D0C9F432858490F7BFCDF947AEEAB9CF2AE80
Authority key identifier: DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/22eb0f31-08e4-3cac-9916-99505e16517c.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        2607:a940:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:fc:df:94:7a:ee:ab:9c:f2:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1ca75e-4539-4223-b200-925398eb3409
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=520b0a03-fe2c-495f-944b-84595b01f7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:39:70:00:fe:0f:b2:05:34:d2:3d:9c:fd:
                    e3:89:e8:a8:55:0f:eb:7c:26:7a:d6:e1:0f:ad:ae:
                    39:d6:19:1d:db:2d:4b:21:d6:b7:7a:1e:92:5b:15:
                    92:41:98:7c:96:cf:e0:07:4a:20:7a:8a:c1:1c:53:
                    9d:9b:49:1f:af:ba:9c:f8:8a:31:a0:11:aa:9c:19:
                    bb:f9:64:ee:e9:06:ba:8d:81:c1:1e:09:43:4d:ad:
                    6b:4c:e6:6a:89:39:70:a6:40:b0:06:79:dc:ae:ad:
                    63:09:40:1c:9b:df:f9:a3:7a:bb:59:79:19:51:27:
                    b5:6f:24:70:57:81:9c:42:d5:03:7b:e6:2f:b7:e3:
                    74:72:99:53:0b:18:dc:67:dc:c9:c7:5a:f5:d2:e6:
                    9e:11:ea:89:f5:2e:53:86:5d:fa:69:ab:99:db:86:
                    2e:31:24:01:5d:47:5a:5d:13:0a:36:dd:aa:d0:f4:
                    2c:b5:28:fd:3f:00:1b:2a:f6:e4:be:3f:45:6e:b4:
                    77:48:87:42:43:40:91:73:53:7a:c1:a4:db:95:f4:
                    cb:59:5d:d0:ab:6a:b9:d1:ed:03:87:45:17:77:60:
                    be:5e:5e:e0:ad:c7:0d:04:2d:f9:79:18:2f:af:9d:
                    3e:29:df:87:51:9f:93:f3:d8:d1:ea:11:05:f7:31:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3E:8B:97:6B:7A:F5:9C:5C:68:3A:13:43:3F:2A:4B:AC:ED:3C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/22eb0f31-08e4-3cac-9916-99505e16517c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409/9b1ca75e-4539-4223-b200-925398eb3409.crl

            X509v3 Authority Key Identifier:
                keyid:DD:74:9D:1A:2F:AF:94:47:44:4E:AA:33:8B:1B:60:1C:CA:04:0E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9b1ca75e-4539-4223-b200-925398eb3409.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a940:c000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:95:1f:8d:d1:0d:97:00:4a:01:8d:33:ce:dc:04:af:e6:
         dd:12:c0:31:a5:bc:65:37:a2:13:14:de:0f:43:14:85:47:dc:
         ac:e6:74:8c:22:b2:0b:90:ba:77:36:0c:8f:ce:26:f8:ef:44:
         3c:7f:bb:b8:13:d2:07:91:30:c2:e8:af:d2:b0:b8:cb:88:11:
         f4:6a:fd:25:4f:8c:c8:69:6d:6d:64:67:b7:c6:66:bc:c0:4c:
         53:50:b9:0c:fe:d0:9e:f6:70:9b:df:5e:0c:d1:41:3f:70:3d:
         1c:13:2a:44:68:ca:24:bf:0c:f9:b9:37:0d:14:0b:26:ab:51:
         e4:39:01:b8:db:d3:87:ab:bc:50:2a:c0:c3:e5:b5:fb:c7:a6:
         6b:38:99:31:4f:c9:48:9e:3a:64:bd:2f:35:7f:f8:44:d1:db:
         11:9d:77:f7:04:91:05:8f:21:5e:71:df:f5:55:7f:86:b9:89:
         42:9e:ab:d9:1d:eb:94:82:9d:42:25:5f:fd:79:5b:cc:4f:46:
         47:76:e8:e6:43:5b:db:d5:bd:8c:03:3c:87:ae:bd:30:c7:1a:
         cf:0c:86:4d:3b:69:f1:6b:96:2d:e6:0d:6f:53:fe:a2:45:d1:
         23:ed:f3:19:f3:f6:fe:f3:f8:b3:12:5f:2c:d4:6d:98:b9:30:
         f2:1e:97:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:42:30 2025 by rpki-client