Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/7ab363ae-acd6-38f6-99fa-43f32d8e4e9c.roa
File:                     7ab363ae-acd6-38f6-99fa-43f32d8e4e9c.roa (raw, json)
Hash identifier:          eAqwykX3TSBVTao6d4VcDaEqQrc02PoGZFV9Z96vm54=
Subject key identifier:   DA:65:B0:AC:70:93:92:83:AA:9F:D1:29:E2:DB:AE:71:0D:67:B1:96
Certificate issuer:       /CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
Certificate serial:       010D0C9F432858492184076B9E4022679BA6CC80
Authority key identifier: 17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/7ab363ae-acd6-38f6-99fa-43f32d8e4e9c.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2602:80a:2018::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:07:6b:9e:40:22:67:9b:a6:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1918ee56-343c-40dc-b01d-fb5efd51e26a
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=ba218c06-1e8e-4eab-a94d-192c6077d3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:15:e3:d7:b3:8a:53:bd:5b:4f:e6:3d:3a:06:
                    2c:b2:ea:34:69:93:16:09:17:b1:06:26:28:f3:c9:
                    53:da:43:57:33:65:58:85:74:a0:5c:7a:49:a1:34:
                    15:5e:42:37:dc:52:4d:08:4f:76:d3:6c:a7:00:8e:
                    25:98:f7:1c:a7:3b:c4:b1:8e:e1:85:5b:1e:8b:bb:
                    48:36:12:3e:8b:54:62:a3:94:95:ec:2a:65:6b:7f:
                    63:b8:ca:f7:33:ab:eb:41:88:5b:85:7a:e3:10:16:
                    8b:58:b4:75:eb:4e:19:e7:ab:0c:6f:53:0b:e9:58:
                    9b:9b:31:ca:fe:1e:03:fe:a4:5d:88:5d:68:c1:d9:
                    15:3a:8b:4a:e5:e0:56:32:d2:0f:f2:12:1c:05:50:
                    c5:87:9a:37:98:d4:92:70:1b:5d:e4:7a:e4:d9:ac:
                    41:cc:33:41:9b:9c:61:e1:ed:48:9e:80:9d:48:04:
                    09:13:76:45:95:9a:11:5c:d5:a6:53:c4:c1:4e:96:
                    26:b1:73:84:57:8c:b0:79:a1:b4:91:0d:cd:b6:9d:
                    cd:50:8a:03:67:23:72:5b:48:83:b5:ec:3c:a1:46:
                    56:ae:b5:1e:10:33:8a:65:cb:c8:9e:5e:df:03:36:
                    34:fa:a7:85:ca:92:4d:9e:0c:7e:4b:22:f5:6d:f0:
                    4e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:B0:AC:70:93:92:83:AA:9F:D1:29:E2:DB:AE:71:0D:67:B1:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/7ab363ae-acd6-38f6-99fa-43f32d8e4e9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a/1918ee56-343c-40dc-b01d-fb5efd51e26a.crl

            X509v3 Authority Key Identifier:
                keyid:17:39:49:C6:83:A6:F2:A3:39:16:0F:35:00:CD:81:81:75:6B:7F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1918ee56-343c-40dc-b01d-fb5efd51e26a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:2018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e7:df:22:0f:d7:0f:46:c7:53:4e:57:42:f0:55:68:7b:76:
         07:44:02:dd:62:07:1a:78:c7:a3:31:7e:18:31:55:3f:3d:18:
         43:85:f2:87:37:95:91:4c:e3:af:08:59:b7:b1:1d:a8:3e:3d:
         7a:64:4f:bd:d7:e2:92:7e:97:f0:1c:66:c9:f6:69:ce:f3:56:
         d9:a9:f8:e8:ee:cb:d2:f4:84:95:a7:ca:11:dd:a0:d6:7c:bc:
         73:19:50:c0:6c:62:5b:bd:2d:67:1d:dc:52:fe:1d:f6:18:03:
         54:67:8d:a9:ed:15:69:88:dc:36:48:a2:21:45:a1:60:5e:c1:
         fb:d8:20:be:d0:7d:a5:e3:0d:17:e0:73:52:5e:dd:44:90:4f:
         e8:0f:84:c8:81:9e:b1:4f:26:76:ef:5d:81:33:72:5e:70:6d:
         07:e6:f4:c5:54:35:6a:0b:04:38:b6:ac:90:45:85:2f:98:97:
         67:81:0d:f1:45:ed:cf:5c:84:6d:c4:45:9b:e8:ba:5b:a7:c6:
         2a:6e:d6:b3:df:8c:07:c8:7b:82:54:cd:2f:03:0c:8c:60:90:
         64:79:a9:f0:1f:f5:6b:d3:8d:0e:d2:7f:19:24:27:b2:13:4b:
         c0:b4:3d:b2:ae:d2:8e:cc:09:55:92:60:11:47:cf:ea:71:2b:
         8a:f8:bf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:08:02 2025 by rpki-client