Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9505f0a3-0703-386f-b4ed-699788414aa7.roa
File:                     9505f0a3-0703-386f-b4ed-699788414aa7.roa (raw, json)
Hash identifier:          32DWCqYZmTaZu1UqKaj+iM7GjSSLu+0yAPOOS1Rl0Sc=
Subject key identifier:   A9:01:53:E2:EC:CD:AB:0B:60:62:22:67:59:B5:78:45:F5:7B:56:17
Certificate issuer:       /CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
Certificate serial:       010D0C9F43285849244E88B554676A96F416AB80
Authority key identifier: 59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9505f0a3-0703-386f-b4ed-699788414aa7.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     13737
IP address blocks:        2620:11f:7009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:88:b5:54:67:6a:96:f4:16:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fcde55-dd78-49f8-8c66-802a68b8f6c4
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=b01d0713-a0d7-4dbd-8946-57daf3a6a111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dd:aa:24:55:5c:cb:f1:22:05:30:98:7c:e3:
                    9f:3b:80:0a:02:49:69:7f:8b:3c:cd:51:0c:02:8a:
                    36:f9:fe:69:6f:e8:17:98:cd:bd:51:ac:1e:12:e8:
                    6e:97:0c:fc:80:f4:19:e9:6d:48:e1:e5:65:47:13:
                    94:f7:1a:6e:f6:de:53:89:be:8c:cc:fe:be:5f:9c:
                    e1:ba:36:d7:05:92:c7:9d:4d:96:c1:ec:6c:a4:bf:
                    4c:b7:f5:06:ce:3f:10:b6:73:10:16:35:82:29:7d:
                    d5:8f:3d:c5:38:03:b8:b3:54:05:ed:38:bd:92:61:
                    82:4b:b5:ae:41:d1:ce:e2:e4:70:16:f7:d9:12:9c:
                    39:49:77:64:34:71:6d:0b:49:62:21:c8:c0:0f:e0:
                    31:ae:a2:31:7e:0a:bc:59:58:67:56:20:cc:64:bc:
                    e7:79:bf:65:95:e2:03:bb:6f:59:dc:c8:0d:8f:65:
                    b7:ea:ad:8f:7d:fa:2e:55:42:2c:23:b6:ad:b2:c0:
                    4c:40:70:d2:6e:c3:34:36:af:ff:44:99:9a:ba:94:
                    be:7f:2b:42:e0:b0:ef:a5:d4:4b:d9:41:09:b5:de:
                    58:83:2c:83:53:c2:5b:2a:0c:95:54:90:59:be:79:
                    09:da:09:0a:60:9e:96:fb:ec:70:1b:64:6c:c2:fe:
                    42:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:01:53:E2:EC:CD:AB:0B:60:62:22:67:59:B5:78:45:F5:7B:56:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/9505f0a3-0703-386f-b4ed-699788414aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.crl

            X509v3 Authority Key Identifier:
                keyid:59:20:26:E6:D7:C6:47:62:EE:A3:1C:A3:AC:33:A5:32:CC:CD:15:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2fcde55-dd78-49f8-8c66-802a68b8f6c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11f:7009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e7:31:78:f5:65:57:c8:da:33:fe:83:ce:42:02:84:c8:ea:
         4a:ed:bd:7b:bb:be:94:4f:59:df:b1:8f:45:22:de:6e:89:8f:
         36:bf:7c:29:81:1c:e4:1c:cd:16:bc:dd:11:f2:e5:66:79:45:
         01:cd:69:b4:6f:0f:28:dd:18:f7:51:cf:21:c9:60:3e:83:e6:
         74:5e:0c:82:6b:84:a7:d1:7e:b2:a0:24:c2:eb:b1:99:9f:c6:
         9e:ef:20:80:90:4f:68:e1:92:7d:c1:d3:14:1e:3d:0f:ca:28:
         f0:84:31:7a:ea:4e:a0:3a:97:be:2c:dd:17:dc:67:42:49:49:
         14:8f:31:22:e8:b2:92:ca:df:80:db:30:b0:a9:d3:9d:ac:bd:
         8a:da:9e:89:d1:f2:52:4f:93:9c:5a:c2:d8:98:18:9b:ac:9d:
         63:80:f8:38:cf:13:a3:2e:88:6c:a2:5b:68:89:2c:53:12:30:
         51:ca:35:53:c2:1c:f7:d5:6c:16:0f:f5:2e:c7:1e:9c:1e:46:
         27:aa:b1:3a:b0:6a:66:10:35:c6:81:a9:c7:91:51:d7:3b:fd:
         86:8f:69:06:d2:07:89:19:b8:dc:ee:7e:d1:e1:5a:32:63:d9:
         9b:0e:0e:3f:65:75:1f:3c:df:a8:21:8a:fd:66:b6:ae:84:2f:
         ae:95:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:54 2025 by rpki-client