Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/cbd5a95a-8259-3f65-b94d-162479ed9464.roa
File:                     cbd5a95a-8259-3f65-b94d-162479ed9464.roa (raw, json)
Hash identifier:          pd8bcDN0CKXZgFGEiGXiKLoObZQe6dbVkUnhibN996c=
Subject key identifier:   71:EB:65:F5:A3:9F:A9:A3:E2:90:E9:3D:F6:E2:56:8A:71:93:52:8D
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F43285849CE9A5811265F8C01180F2900
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/cbd5a95a-8259-3f65-b94d-162479ed9464.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     398493
IP address blocks:        2602:fd37:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:58:11:26:5f:8c:01:18:0f:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=fe94cb61-0e2f-4c9a-a111-556632de5c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a1:cc:05:b9:41:ac:23:94:7b:01:81:19:d5:
                    0d:4e:f6:1d:66:c7:b9:ee:bc:90:14:76:fe:65:ea:
                    d6:20:55:ac:fe:1d:61:31:3b:18:24:9b:5a:d0:97:
                    ea:96:9e:2b:44:1b:38:a9:f4:d1:88:12:8c:37:f5:
                    b7:5f:26:b9:3b:ab:91:7b:68:ce:a6:66:c9:21:dd:
                    e0:ab:00:46:8f:1e:31:60:5c:2c:7b:d3:00:44:10:
                    41:60:db:fe:75:00:9d:5c:0a:1e:f7:f2:c7:f1:42:
                    f6:91:c7:93:c3:e0:81:8f:8e:94:b8:ba:13:74:a0:
                    d1:34:06:c3:65:06:b3:e2:54:b5:3c:d4:4e:6c:ae:
                    2f:39:12:69:c3:3b:07:33:37:94:7b:82:7f:c8:17:
                    3d:a1:b1:bb:2b:8c:7d:a1:9c:20:cd:43:d7:73:70:
                    8b:88:ae:70:55:f0:f5:81:d4:a0:7d:1b:0d:2d:f0:
                    66:1a:2b:4e:81:e0:0b:8d:6c:f7:67:28:4f:fc:30:
                    1e:b8:33:1f:5d:99:a4:a2:8c:b3:35:ce:47:9a:63:
                    bf:28:d8:14:33:ae:a3:53:86:6b:de:0e:f0:51:19:
                    18:6f:c8:51:66:88:93:74:58:36:9b:87:0b:00:05:
                    4e:ec:dd:06:bc:ec:81:47:cf:9f:34:8b:93:38:1a:
                    97:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EB:65:F5:A3:9F:A9:A3:E2:90:E9:3D:F6:E2:56:8A:71:93:52:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/cbd5a95a-8259-3f65-b94d-162479ed9464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:32:d7:fe:b5:92:dc:a4:ae:05:8a:61:39:17:8e:6f:fd:53:
         d1:7c:f6:21:fb:72:2b:fb:52:67:13:f0:42:22:c2:60:fd:38:
         c7:5c:cd:21:b0:81:45:9d:69:f4:87:37:81:2b:66:52:ba:e1:
         94:19:bd:2f:00:16:01:09:ae:81:87:81:68:3b:76:3e:cf:cd:
         57:bf:48:d7:44:14:cc:ed:95:40:a5:71:78:ff:3c:7e:19:f9:
         55:27:76:76:24:b5:92:ce:e8:2d:9c:83:e8:c0:cb:16:cd:f7:
         15:ae:2e:93:2d:54:7d:fd:6f:6b:10:d0:fa:70:4f:fd:76:7f:
         9c:f5:8f:62:f9:2c:3d:22:b1:b2:e4:30:3e:c5:ce:62:0a:02:
         c2:8b:fc:ab:a1:bf:93:da:47:92:63:de:45:d4:41:e2:9f:f6:
         a0:26:eb:e8:71:cb:36:aa:5f:92:ea:2d:2d:f6:d9:e3:31:6d:
         64:b6:66:d5:75:a6:47:9b:f0:50:bf:6b:9b:0b:4a:58:7c:47:
         97:6f:4f:d7:e4:85:4c:a9:4d:d2:6d:14:b6:a3:b3:3c:b5:20:
         af:8f:0b:0c:2d:cd:35:ee:a9:7b:5d:48:b5:f9:9c:71:25:c7:
         8f:b4:4a:82:7d:87:e5:57:06:95:ad:b0:26:e0:4e:c8:e1:cf:
         66:d2:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:39:32 2025 by rpki-client