Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/ace9faee-e4f9-31a3-8438-eca6dfaf0d4d.roa
File:                     ace9faee-e4f9-31a3-8438-eca6dfaf0d4d.roa (raw, json)
Hash identifier:          1P3q9aJLtivURfpjLB83FMAzO1QQAI94oCalsyVq/mw=
Subject key identifier:   91:DB:27:25:86:8A:A5:E6:AC:00:3C:6D:30:CA:FF:7D:1D:C4:02:D8
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F43285848A99625E98B306986073CD380
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/ace9faee-e4f9-31a3-8438-eca6dfaf0d4d.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     21738
IP address blocks:        2602:2b7::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:25:e9:8b:30:69:86:07:3c:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=9ed788f2-9b9e-42d3-af2c-de5787377ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b8:e3:34:4f:1c:b0:99:d7:a4:52:dc:56:cb:
                    58:26:d9:40:f2:d7:cb:3d:e2:4c:cf:bc:27:cd:7d:
                    cf:10:ca:40:84:b1:a4:43:f7:d2:da:ac:ec:70:4c:
                    68:78:b5:08:0b:de:9f:e9:88:e1:72:3f:5a:b8:16:
                    6d:15:5c:f7:79:e8:5f:af:12:42:f5:e1:fb:2f:de:
                    d0:29:af:53:5d:a1:c6:59:a4:09:e9:a6:a9:ad:51:
                    90:03:06:b7:c3:ff:b0:e5:78:c2:7d:ce:41:b3:ca:
                    3e:b4:79:32:b8:3f:71:2a:77:5e:13:31:06:cc:85:
                    a5:28:dc:82:93:86:77:d2:70:d5:41:eb:a6:1f:7f:
                    30:79:5c:6b:23:ae:74:63:f5:74:67:cd:ed:f6:d5:
                    74:31:67:4b:bd:7c:06:e1:16:ac:8d:b3:cf:61:eb:
                    7c:b4:c3:61:af:4b:25:64:e1:b7:5a:a4:f7:7c:66:
                    6b:73:f0:68:06:a5:9a:1b:94:8d:32:a8:8b:28:03:
                    9c:ae:cf:3f:bd:46:07:88:d2:a4:84:9f:84:db:7e:
                    c7:2f:0e:76:76:ee:58:b9:32:ff:a2:8e:ad:7a:b3:
                    f7:2b:73:93:23:62:ea:e9:3f:2c:63:f5:ab:0f:46:
                    fc:7d:7a:77:f0:ab:70:af:26:83:20:06:57:52:a4:
                    2e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DB:27:25:86:8A:A5:E6:AC:00:3C:6D:30:CA:FF:7D:1D:C4:02:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/ace9faee-e4f9-31a3-8438-eca6dfaf0d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ca:37:2c:26:52:6d:f9:f6:e4:ab:00:c3:72:22:fc:82:02:
         c8:07:ac:bd:aa:08:bd:e3:eb:f0:cc:55:59:33:e3:e4:7b:46:
         d7:42:c9:08:41:df:3a:c7:9b:14:12:2d:64:ad:cd:cc:93:9f:
         56:af:49:7b:17:e1:42:28:0d:2e:62:f9:09:73:ef:31:21:f5:
         38:80:6e:01:2e:0f:59:47:fc:ac:3e:a2:03:b1:e4:e0:dd:64:
         28:58:02:4b:59:16:dc:87:27:16:3f:4f:4b:10:bd:c6:eb:18:
         6f:53:94:bd:45:58:bf:d3:ec:9a:29:c8:e0:f2:4a:0f:2a:0f:
         94:4a:f7:a9:62:37:8b:d3:c4:7f:25:b7:b0:bc:90:28:f5:f3:
         e8:61:5d:8b:b3:8e:f0:21:99:61:92:c8:24:da:e6:70:37:83:
         5e:cf:df:9d:a1:04:65:f1:bf:55:e5:a9:a5:d2:8a:cd:d1:36:
         eb:8c:ea:be:ba:5b:20:c8:c0:53:bc:22:6a:85:0f:23:22:30:
         ba:36:47:23:fe:bb:7d:a0:42:75:c4:62:96:34:62:0a:c9:77:
         2e:2c:cd:62:91:be:bd:78:7d:b7:6e:69:4b:06:71:1d:3f:34:
         f5:d1:0f:e5:e2:d2:1f:35:8b:76:5b:c1:1d:d8:19:96:d5:9d:
         a1:b3:a8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:19 2025 by rpki-client