Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/edfc5ae2-c158-30b1-85a5-7f294dd4cbf8.roa
File:                     edfc5ae2-c158-30b1-85a5-7f294dd4cbf8.roa (raw, json)
Hash identifier:          jdnSxufhZODtfhJ41etUMBqzBfLZFjQBfrQyyOw4Fg0=
Subject key identifier:   7B:B0:D8:A7:6B:57:10:29:DF:BB:EA:94:81:E5:9A:29:54:80:43:1E
Certificate issuer:       /CN=910396e7-2d32-4040-a73d-ad686b8445b3
Certificate serial:       010D0C9F43285849EA851FCCD0082E5E19E2E4C0
Authority key identifier: 4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/edfc5ae2-c158-30b1-85a5-7f294dd4cbf8.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     63127
IP address blocks:        2607:6ac0:e100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:1f:cc:d0:08:2e:5e:19:e2:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910396e7-2d32-4040-a73d-ad686b8445b3
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=e2a3a167-4180-44e6-8803-c22ef931db90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:43:fa:49:bb:74:13:84:e2:8e:5d:a8:cc:
                    85:6d:79:86:81:28:53:dc:6b:ba:35:7a:6a:f6:1b:
                    87:14:57:7b:5c:ec:c5:dd:d4:da:30:e5:48:88:c6:
                    3e:46:f0:26:4a:d8:cd:21:41:34:27:2a:c5:2b:32:
                    66:66:50:bb:35:57:f3:28:2e:0d:fd:c1:36:ba:4a:
                    7a:f6:a2:2b:4b:7d:ae:1a:e5:3d:d6:59:57:1d:9c:
                    17:47:12:b4:dc:d5:51:81:b7:9f:9b:ab:11:67:71:
                    bb:3e:d1:d9:5f:23:32:e0:3b:07:a2:ba:c8:ef:d3:
                    c6:71:13:55:97:8f:cb:37:b9:a4:29:1b:b9:31:4c:
                    cc:2e:c0:0c:68:35:3e:14:8c:1c:5a:e2:1f:1b:be:
                    9b:05:07:07:cf:6b:0e:83:84:cc:8d:0c:93:ec:6e:
                    8d:1b:b7:97:15:d5:49:93:fd:e6:40:8e:f8:9e:23:
                    20:ee:c0:7a:66:2d:4b:fc:50:0d:5b:fe:03:4c:89:
                    62:74:4c:3e:88:15:3f:09:2f:d0:f5:4e:3d:bb:f8:
                    e0:5a:93:c4:fb:92:06:11:a4:8f:1b:f4:6e:9e:e2:
                    d4:38:76:de:44:ee:30:8a:85:58:a5:ac:56:df:93:
                    39:d4:b0:35:cb:31:50:08:16:30:d2:84:cd:dc:fc:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B0:D8:A7:6B:57:10:29:DF:BB:EA:94:81:E5:9A:29:54:80:43:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/edfc5ae2-c158-30b1-85a5-7f294dd4cbf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6ac0:e100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:07:c0:7c:c2:28:d2:f9:61:3a:3d:3e:63:6a:ea:2c:e7:
         d3:72:d3:d3:d7:2a:dd:c3:7c:c3:46:af:f2:a5:d6:10:f3:e7:
         c6:29:6c:c2:65:53:ed:4d:2c:2c:70:45:02:48:a2:d2:08:99:
         5c:46:2a:89:53:ea:36:aa:22:6f:ba:ad:dc:33:52:4d:3e:b7:
         ff:18:56:37:e2:f9:14:f6:bb:09:f0:68:98:26:6c:f9:ba:1d:
         b5:68:cf:73:62:59:f9:d6:8d:04:4c:6d:9c:bf:d8:5e:ab:47:
         ae:36:16:cd:1a:31:52:7c:da:98:d5:42:da:cc:c2:85:b1:ec:
         b2:cd:70:6e:6f:13:c0:9b:75:ee:97:2d:0b:20:cb:14:d5:3c:
         5d:25:6b:8b:33:64:98:4e:9c:7b:be:da:b5:47:7e:92:65:2a:
         75:b1:60:c1:f5:90:06:ff:fd:78:b0:ea:22:3e:6a:c6:cf:c1:
         dc:a2:71:87:df:42:63:3e:0b:3e:79:40:92:0d:96:5a:11:8e:
         54:27:a8:b7:fd:8d:cf:89:81:94:e3:98:4b:49:17:35:eb:b6:
         83:f7:45:fc:c3:43:4b:8d:49:28:34:ea:77:ba:e8:9f:e7:21:
         cb:31:12:ef:0a:19:78:f0:65:18:93:f5:d2:4d:af:0f:16:c5:
         c0:9c:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:27 2025 by rpki-client