Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa
File:                     7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa (raw, json)
Hash identifier:          L1xKilqKUiTnW6lHfTav3YQHQdf0v/Ttc4WPYqqEVcg=
Subject key identifier:   2E:61:4A:51:16:4C:66:9E:69:54:C7:81:55:C1:B7:AA:62:23:43:52
Certificate issuer:       /CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
Certificate serial:       010D0C9F432858490E16BAF3D4E318CE6C75E380
Authority key identifier: 2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     53667
IP address blocks:        2602:fc41::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:ba:f3:d4:e3:18:ce:6c:75:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=d088be82-1cdc-4af8-86b9-b74345a8f6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:62:ca:4e:29:a4:d9:8e:d6:fc:aa:f8:fb:c2:
                    b5:70:43:38:c3:42:29:c4:9f:f9:24:6f:83:82:a8:
                    96:03:16:6c:aa:9b:c8:f2:3d:14:4c:8b:26:e8:87:
                    31:ee:71:d9:f1:e2:83:b5:34:c4:d5:d3:9c:be:5c:
                    d6:29:cd:48:41:fa:90:58:18:59:4e:e3:b5:d7:f6:
                    9f:e0:82:3e:80:50:70:a8:6e:7d:5a:7d:3c:ae:6d:
                    3e:fc:73:35:9d:dc:f5:1f:8e:0b:d7:c9:99:99:91:
                    6b:bc:30:38:30:7a:55:1c:45:98:3d:c3:c1:22:30:
                    62:f1:5c:1e:19:a3:5e:da:ce:26:63:91:17:6f:e9:
                    a8:9a:56:7e:4d:01:fa:df:97:8c:b4:16:5d:e1:aa:
                    b5:ca:d1:2d:8d:93:5a:8b:45:6a:c8:a9:58:44:df:
                    31:d6:29:d4:05:f7:a9:e4:90:26:d1:fd:33:f7:95:
                    69:77:55:db:dc:58:0a:07:a2:81:bb:e8:c0:4b:e9:
                    e6:69:05:75:ef:3c:5d:ed:b4:01:27:d0:b5:a9:76:
                    3a:ed:36:67:64:6b:be:e5:dc:4f:9a:97:0d:dc:c3:
                    b2:70:35:8a:fd:52:30:21:6a:5c:b8:e1:6c:33:c6:
                    e3:89:c3:49:bf:05:72:72:8a:ab:92:3f:1f:d7:6a:
                    6d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:61:4A:51:16:4C:66:9E:69:54:C7:81:55:C1:B7:AA:62:23:43:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/7ed5ff89-9ce7-33bb-a0f7-8006ef2f17b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl

            X509v3 Authority Key Identifier:
                keyid:2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc41::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5f:d2:63:d0:5d:b1:b3:be:78:a7:f4:9e:b4:50:8c:89:bf:
         ae:64:2a:e6:ff:a6:ce:33:23:ba:31:7e:7c:bc:1d:13:20:0e:
         b8:a9:ed:c1:ed:b3:ca:17:4e:3f:d2:44:db:32:ea:70:bb:6b:
         35:8a:34:1d:cc:a9:eb:5d:3e:37:58:d5:0d:2d:a6:d2:ce:69:
         37:0c:58:81:37:0f:40:65:b2:46:aa:d0:c6:2b:78:a9:8b:83:
         16:ea:65:92:76:6f:27:ec:19:31:e1:d8:8d:e7:ed:d5:aa:57:
         0c:e0:ca:9d:85:27:a8:8c:87:30:b3:2a:c0:1e:ff:f3:57:07:
         1a:41:d2:35:d6:38:b6:e4:89:8e:2c:45:f7:46:c0:ae:50:9e:
         56:45:9f:66:8d:1d:ca:55:a2:86:90:c1:be:8e:cf:a8:1d:0d:
         91:38:25:ed:d6:2b:d1:e6:7e:16:2d:c2:9b:2e:0f:ea:6f:e2:
         c9:41:9b:81:f2:f8:06:29:a7:50:6d:37:92:27:de:f1:5c:4b:
         6c:1e:4b:ff:8b:c4:3c:8e:3a:99:46:e0:18:6d:fa:49:58:1d:
         73:9a:a9:8a:c0:2c:31:ff:cd:fd:18:23:6a:7b:4c:ed:b1:a1:
         7a:2a:47:3f:17:1c:cc:3d:81:86:c6:ce:4d:a7:db:38:20:da:
         4f:01:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:48:58 2025 by rpki-client