Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/9cf2a228-3dd2-35c6-9915-9b000b0822a4.roa
File:                     9cf2a228-3dd2-35c6-9915-9b000b0822a4.roa (raw, json)
Hash identifier:          tDTi0bXiZMDj3Qj0/iWYpw6XZCh+B/G9MG6HacWBrpc=
Subject key identifier:   54:AC:21:F8:4F:D7:BE:E7:C7:3A:BD:29:9F:19:27:64:F0:29:00:BC
Certificate issuer:       /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial:       010D0C9F432858492CB21F49DD51357E755CB580
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/9cf2a228-3dd2-35c6-9915-9b000b0822a4.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2620:a0:200f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:1f:49:dd:51:35:7e:75:5c:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=5e2b082c-20c2-4312-bdf2-4b69fef25087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:94:dc:f5:d6:5f:b9:14:eb:2c:12:6c:35:53:
                    24:67:80:7c:6c:2e:6f:58:dc:b4:e8:6e:9e:0a:21:
                    f3:7f:13:7a:2c:c3:d0:2e:85:bf:9d:9a:bf:63:39:
                    fc:49:ea:06:84:b9:e2:5b:b2:3a:c3:4f:8d:86:d6:
                    77:5e:9d:f7:59:67:3b:ab:95:d0:93:4c:78:ca:09:
                    b5:f3:d6:8a:0c:3c:28:53:33:7a:2d:5d:97:a0:60:
                    90:d2:1f:2d:a6:59:e7:0c:0f:94:26:68:38:ce:a7:
                    96:ac:c0:66:ce:6a:6f:95:e8:32:0a:8f:66:0d:fe:
                    28:2d:73:b6:71:7c:40:6a:e8:08:e3:bc:f6:f8:0e:
                    4d:c5:6d:c1:67:d9:bb:73:74:52:40:84:b1:e7:91:
                    58:c5:6e:e5:71:1a:ef:8e:29:f8:f6:9d:6c:1d:a9:
                    92:69:53:71:73:b4:a4:e2:39:44:57:53:44:ea:3c:
                    9e:af:97:b1:5a:98:4b:bd:96:cc:6d:f5:a6:0d:68:
                    e9:d7:b4:2e:21:45:a4:c8:7a:35:8c:b6:3a:50:26:
                    98:5f:2f:12:d6:85:64:0f:ff:46:75:16:ad:06:a0:
                    7c:f5:0a:e3:e6:38:f7:4c:ad:40:8b:2a:fb:fc:b2:
                    db:ea:5c:a1:89:92:7f:42:7a:27:62:7e:96:49:35:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:21:F8:4F:D7:BE:E7:C7:3A:BD:29:9F:19:27:64:F0:29:00:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/9cf2a228-3dd2-35c6-9915-9b000b0822a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl

            X509v3 Authority Key Identifier:
                keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a0:200f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:89:e4:80:f6:54:42:ea:2d:95:57:85:e1:33:40:bd:97:41:
         46:92:74:53:2e:e9:53:9c:ae:7f:a0:13:17:99:17:96:33:28:
         ee:56:26:a2:ee:9b:de:43:3a:2c:47:0c:6b:b7:3f:53:f8:d0:
         fc:64:3a:22:aa:b1:26:a7:8b:6e:8a:79:6a:c1:81:08:a9:a8:
         c3:42:f6:8f:48:a5:4d:ee:28:e6:c0:7d:43:03:22:8c:86:23:
         32:43:df:e5:12:8a:f2:52:05:99:7d:2b:02:8c:b3:b9:ff:c3:
         7f:0d:70:79:da:66:ae:e1:52:1a:e6:84:00:72:ac:cb:fc:c7:
         e1:92:23:60:3c:fa:d7:c3:d4:e3:0a:a7:02:72:4f:8f:d1:da:
         84:51:fa:6d:47:e1:f7:a2:d3:23:23:c9:11:99:ce:1e:86:f1:
         ba:ef:19:28:26:27:9a:c3:27:17:0c:98:eb:8f:96:59:74:d3:
         ba:cd:25:65:fb:88:9e:ee:57:cf:77:7d:85:08:fb:8f:29:1c:
         cc:1b:23:d0:88:bd:e2:a5:85:29:b4:51:64:ff:5e:6c:93:b6:
         f5:94:7e:4f:5b:77:9e:58:ca:b6:1d:ac:39:84:26:54:0c:25:
         62:dd:8c:50:a0:31:ab:8a:2f:e0:8d:94:8a:30:40:a7:4a:40:
         bd:73:e8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:50:21 2025 by rpki-client