Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa
File:                     2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa (raw, json)
Hash identifier:          rYq8rVphQVhOjVItmaqAGuM8EYRupyfcn1pB5lqaFQs=
Subject key identifier:   02:95:4D:DF:63:11:D1:CB:CE:38:24:9D:36:2F:EF:AB:63:5B:D4:63
Certificate issuer:       /CN=53cc15fa-4aac-4896-89f6-ee84e1915dca
Certificate serial:       010D0C9F43285848EF6162DAB800744B4CD7B480
Authority key identifier: 4E:19:B9:FB:72:6B:F1:39:59:C4:08:9E:51:5F:5B:58:B8:D9:D6:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     14224
IP address blocks:        2600:7d00::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:62:da:b8:00:74:4b:4c:d7:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53cc15fa-4aac-4896-89f6-ee84e1915dca
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=83e69f7f-f628-4d8e-9bf5-8212bba00e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:40:c5:31:0a:ea:9b:37:52:90:a3:3d:28:
                    38:c7:93:e9:f6:eb:2f:0f:d4:7c:7a:fe:9a:a1:0d:
                    25:7a:4e:b9:01:5a:86:cc:c8:ea:f9:83:97:5c:aa:
                    ca:d8:e3:62:b5:db:ac:1f:71:91:79:c2:8c:cb:00:
                    01:87:e2:af:20:a7:ee:a3:30:62:49:68:8a:74:86:
                    b6:be:5c:3e:0c:b3:b9:34:61:95:7b:00:ab:c0:f6:
                    a9:ed:c0:94:aa:bc:3f:8e:09:78:b3:60:8e:1a:85:
                    4e:0e:f2:a2:55:fd:ee:24:f7:5d:18:e4:b4:cb:25:
                    e7:ec:d4:92:ac:be:ae:df:5a:9e:4c:38:6f:4d:0a:
                    c7:23:6f:b9:84:90:29:ad:61:a2:41:ac:af:90:ed:
                    33:21:4b:bd:94:23:f1:8d:b9:1c:01:61:ac:41:5b:
                    bd:42:b8:c6:f2:b5:1d:16:5c:5f:49:b1:74:49:20:
                    1d:03:12:db:0a:ef:74:4f:4c:32:fa:70:3c:32:b1:
                    b9:4c:72:55:40:2f:00:d1:ab:dc:69:66:5c:35:d7:
                    92:41:1d:b1:1d:bb:ab:6c:60:69:b7:42:61:d0:0c:
                    a8:e5:21:06:db:17:4d:be:ac:c9:a4:cb:b9:7d:0e:
                    59:03:45:46:2a:18:40:2b:db:c4:42:e4:d4:11:a3:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:95:4D:DF:63:11:D1:CB:CE:38:24:9D:36:2F:EF:AB:63:5B:D4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/2dad34f0-43ba-3ac1-bac7-34995fdf822c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.crl

            X509v3 Authority Key Identifier:
                keyid:4E:19:B9:FB:72:6B:F1:39:59:C4:08:9E:51:5F:5B:58:B8:D9:D6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:7d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:58:28:d9:4b:b2:b4:9a:1f:f4:7b:43:1a:b3:f5:2b:ef:34:
         bb:fb:4f:f8:11:15:80:77:0e:f5:29:c1:7b:d3:dd:d8:66:62:
         39:e0:2c:74:ec:bc:53:e1:4f:cb:8c:1c:17:c6:16:eb:f1:c9:
         28:2a:3a:5d:74:bf:4d:06:37:30:94:62:92:c1:04:d1:bb:7e:
         8a:5b:d9:95:cf:39:75:f8:7f:5d:f6:e0:4c:22:7f:50:54:de:
         5a:b0:77:c7:9b:9a:46:35:39:a3:61:8c:d8:f0:d1:5c:1e:7b:
         46:d4:c8:df:98:29:24:6c:c8:67:1a:53:fb:0e:b8:89:72:db:
         92:7b:30:9e:34:2e:7c:b2:ad:62:b3:f3:74:da:47:f8:96:95:
         81:0b:a8:9c:b0:a3:42:cd:7f:40:1a:b0:9c:5d:12:cd:6e:51:
         4e:97:3b:9b:d0:b7:23:50:90:7d:f4:b8:28:05:39:56:78:ea:
         9c:9a:a9:3f:5c:2b:38:08:18:16:83:90:1d:44:3c:5f:41:38:
         d6:67:27:28:1e:69:2e:2b:6e:aa:70:b3:76:7c:c6:72:b4:71:
         7c:8d:a4:f1:15:dd:52:c0:bc:ab:ff:89:e2:ab:27:c7:b8:26:
         1b:f0:90:35:8b:b6:fb:f1:73:89:dc:29:60:a6:af:b5:ec:82:
         22:d6:ee:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:49 2025 by rpki-client