Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/f088a302-0a9b-32c2-b9ce-f898278df853.roa
File:                     f088a302-0a9b-32c2-b9ce-f898278df853.roa (raw, json)
Hash identifier:          1rkEo39kmJo5Nb5dg65iSzjjEzV0opR2bH2N+E8bG34=
Subject key identifier:   CD:6C:96:11:95:6F:98:CC:0F:AC:98:2B:AA:CD:4F:34:BF:0F:44:69
Certificate issuer:       /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial:       010D0C9F43285848F926937E804EF9C2EA139640
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/f088a302-0a9b-32c2-b9ce-f898278df853.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        2602:808:4001::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:93:7e:80:4e:f9:c2:ea:13:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=083dc99a-446b-41b4-90a4-bbc4b13ad2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0a:63:de:45:55:93:56:ab:4c:39:02:0e:e2:
                    5d:f3:3c:98:9c:35:a6:5c:ab:61:03:61:be:52:a1:
                    1d:ad:1b:be:68:2d:02:1d:76:18:3e:07:32:95:d5:
                    58:25:60:70:58:2c:df:0a:52:e7:1a:ee:47:be:c1:
                    7f:a2:fb:10:82:b2:a0:65:6c:2d:87:92:07:64:c4:
                    f5:aa:5f:c1:d8:61:8c:af:f9:86:9e:9d:4b:31:80:
                    c3:9f:27:9b:2b:29:93:95:3e:1e:60:53:58:9c:bf:
                    bc:8a:3a:08:5d:d9:87:0f:7d:c9:20:3b:51:40:87:
                    b7:f0:7d:56:c2:44:03:2b:45:d3:c2:73:f5:26:d6:
                    a9:dc:2c:65:9c:e9:59:60:3b:05:42:97:66:53:be:
                    71:60:cc:5b:04:cd:48:a8:36:f4:56:be:b4:5a:9a:
                    3e:2e:97:bb:28:5e:33:cb:2b:e3:ce:3c:0d:f6:0e:
                    88:9d:0c:e7:6d:0c:8c:43:91:43:02:d4:d1:d3:51:
                    bf:e6:6e:b1:61:31:75:cc:1f:74:cf:08:cf:a5:55:
                    80:dd:10:aa:36:19:3e:92:5a:4e:de:27:e5:98:90:
                    fd:f7:24:e1:b9:32:21:d5:ae:b4:f1:d0:82:c2:9b:
                    5d:8d:e4:0b:9d:ad:d0:87:b7:07:c0:9b:e5:2f:8b:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6C:96:11:95:6F:98:CC:0F:AC:98:2B:AA:CD:4F:34:BF:0F:44:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/f088a302-0a9b-32c2-b9ce-f898278df853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl

            X509v3 Authority Key Identifier:
                keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:4001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:11:17:38:82:59:b2:1c:ee:17:1c:0d:e9:2c:d4:57:56:66:
         8a:e4:6b:8d:29:9c:68:b7:00:90:0f:5c:31:cd:5d:6d:b0:19:
         e3:45:aa:14:07:20:8d:b2:38:48:f9:eb:c2:1c:b8:ae:0f:ca:
         7e:ad:aa:96:ab:ba:da:57:37:cb:20:b8:6a:76:f2:84:56:9a:
         14:ea:f4:cf:c7:4b:2b:59:32:23:77:80:dc:88:5f:bd:48:05:
         30:8d:9b:db:10:a7:91:44:c8:f5:36:ba:8a:9f:57:5d:5c:2a:
         9f:30:80:f6:b3:dd:b7:b1:42:42:d3:70:35:88:84:43:fd:98:
         e9:ff:e8:97:28:cb:64:bd:bd:5d:72:ad:0f:49:c2:0a:95:d2:
         03:b6:3e:43:e3:e0:48:56:c1:5e:f8:d5:16:71:95:91:ee:15:
         b8:49:2e:0e:99:a0:25:26:54:cc:a3:c5:c7:9c:7e:bf:90:b0:
         ce:01:93:74:0f:ee:ed:07:6f:ee:8d:0b:7f:ce:9f:7c:c2:50:
         29:3c:60:24:20:ed:ec:17:99:69:ab:4e:86:98:74:41:dd:00:
         c3:23:47:ec:21:d3:2d:91:3f:90:94:0d:f0:25:b3:1a:84:61:
         38:86:07:3b:ac:b7:f5:d2:37:5c:21:93:de:d7:c8:c3:7e:73:
         a9:97:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:48 2025 by rpki-client