Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa
File:                     e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa (raw, json)
Hash identifier:          kmAEDnIsfHgXPwxkruTFOG06V3sqDWbZati+FSEVa2Y=
Subject key identifier:   91:7D:6A:31:07:D9:AD:68:33:CE:33:06:EF:6A:72:8A:B8:C4:6E:9F
Certificate issuer:       /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial:       010D0C9F4328584961B984B4A4FBEA4C4E629B80
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     40124
IP address blocks:        2602:299:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:84:b4:a4:fb:ea:4c:4e:62:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=015c80a4-f619-40da-87b0-a2b93aa585f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:30:b3:13:f7:d0:a6:65:fd:d9:a2:17:3e:79:
                    12:63:72:37:93:e2:aa:9f:0c:66:95:39:33:ff:7f:
                    05:53:7b:82:26:0f:a5:2e:dc:26:20:e7:13:1a:c8:
                    18:21:3e:88:7f:3a:fa:18:7e:0d:bd:5a:01:db:8f:
                    55:e9:16:57:6a:d2:d1:29:ec:1d:73:14:47:83:57:
                    e9:7c:1d:c4:5e:07:02:af:2d:ff:3b:dd:b1:20:68:
                    44:66:f6:64:ac:78:38:4d:25:db:ee:49:aa:bb:5a:
                    b3:b0:8e:83:2d:15:4d:50:84:1d:89:5b:01:2f:65:
                    73:74:b2:65:42:f9:8c:85:42:0a:fd:44:f4:ef:f7:
                    f5:d1:3e:77:b0:c5:fd:84:40:0b:7a:2f:2b:ac:b4:
                    a2:c3:78:e4:0d:5f:54:86:37:04:c5:09:05:4f:42:
                    32:4a:19:8d:9b:a2:34:d3:99:2c:e4:c1:d3:a1:f8:
                    ed:48:f6:cb:70:96:d9:83:19:7f:d4:47:59:fd:3e:
                    c5:15:c5:5f:87:dd:7b:6a:07:96:07:16:8a:f9:a1:
                    2b:34:5a:01:db:ce:05:23:b3:23:52:c5:69:b0:32:
                    a9:08:a3:ad:a5:e5:91:aa:56:06:c7:52:a9:f4:d9:
                    fc:fe:51:eb:3e:ad:4e:13:8e:87:7f:e9:12:6c:2e:
                    d2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7D:6A:31:07:D9:AD:68:33:CE:33:06:EF:6A:72:8A:B8:C4:6E:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:299:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:42:8c:af:96:7b:46:d3:7a:cc:3a:9c:91:21:e2:66:a2:
         95:f8:29:90:16:89:5e:e9:45:dd:ef:2a:c1:5f:05:9a:b7:9a:
         f9:55:88:4f:5a:92:ee:8b:3a:9e:38:1f:a4:dc:53:75:f1:c4:
         1c:af:3d:60:e1:07:78:b9:93:c3:8c:14:f4:3a:2e:5c:41:a6:
         0c:d1:84:bd:2e:22:08:70:11:73:45:0e:64:90:54:e1:ab:e1:
         87:71:59:a6:aa:a4:49:51:1f:92:5e:d8:95:54:ce:ea:31:b0:
         4f:23:ca:62:48:7f:75:1b:0a:56:ae:53:ea:ad:85:bd:cf:ca:
         2c:23:4d:f0:80:8b:15:eb:d1:47:59:a6:77:95:f9:72:72:74:
         93:0e:72:81:a6:e0:91:9f:d1:fa:77:f5:fe:92:22:8a:50:ca:
         cb:cd:05:1b:ba:43:fd:12:2c:0c:93:e4:8d:d6:a2:e5:3c:d9:
         04:80:96:89:65:1a:39:71:b2:9a:7f:88:7e:34:80:16:1a:ba:
         42:f6:c4:92:87:38:46:25:62:82:44:88:6c:2e:7f:50:ea:07:
         ef:83:9d:57:53:88:fc:99:38:ee:b1:a0:c4:fd:78:ed:4c:a5:
         b6:03:2a:df:c2:2a:52:eb:26:0c:cf:46:25:9e:30:9b:fa:99:
         9b:22:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:55 2025 by rpki-client