Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c207329b-e5f0-3c6b-9a35-4884146bf096.roa
File:                     c207329b-e5f0-3c6b-9a35-4884146bf096.roa (raw, json)
Hash identifier:          VHTNUZ9GdIDjHJ7UiwyMEv7+u1L9jOR3Q0DSsQH3MTo=
Subject key identifier:   87:53:EB:DC:A5:72:06:EB:8B:0D:6F:7A:49:7C:36:22:6D:96:1D:D4
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F43285849287E6AA0D7FC8E2C324CB500
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c207329b-e5f0-3c6b-9a35-4884146bf096.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     213327
IP address blocks:        2602:2b7:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6a:a0:d7:fc:8e:2c:32:4c:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=292db93c-332c-4027-9f2d-a87d4c565f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:97:d9:92:4b:40:d5:66:ce:33:53:2a:fe:aa:
                    f6:66:73:81:03:25:a4:2c:56:a3:d0:e0:6f:c8:63:
                    3f:b5:1c:da:94:3f:9d:78:35:ee:61:e2:7f:38:2c:
                    1d:5d:ee:25:7b:b9:45:81:84:2f:00:a0:0e:e5:38:
                    e4:95:6b:ff:37:be:e6:17:60:bd:f8:84:7f:ab:bf:
                    36:7f:ba:9f:48:7c:8e:09:7b:35:74:80:f1:c5:ee:
                    76:28:f6:75:5c:80:26:13:ba:fe:94:26:de:57:c5:
                    54:93:e3:9b:34:7b:3b:59:09:f1:d6:38:ac:ae:04:
                    d5:89:3b:b2:33:ea:f2:6b:a5:a0:13:7f:60:3c:79:
                    1f:17:19:78:f4:25:d4:f7:ad:76:1a:c4:b7:29:28:
                    93:2d:01:84:84:29:ef:c4:ac:f2:c5:4e:a3:ea:13:
                    1f:21:47:67:07:8a:ba:62:a5:65:a7:79:aa:af:fb:
                    67:70:63:78:5f:23:f0:ee:32:e6:fb:68:ad:1f:ce:
                    5b:1a:ed:9d:6c:62:ae:9a:e3:85:90:b5:08:15:d3:
                    7b:60:0b:1e:c4:f7:c4:74:82:8e:e4:f8:d1:92:52:
                    94:77:0b:67:97:db:65:9b:43:ef:c5:4d:0b:33:7d:
                    09:ee:14:bb:f6:0e:f6:9e:cb:54:0b:97:29:9d:81:
                    95:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:53:EB:DC:A5:72:06:EB:8B:0D:6F:7A:49:7C:36:22:6D:96:1D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/c207329b-e5f0-3c6b-9a35-4884146bf096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:0b:ef:e7:bf:62:17:b0:09:3d:df:25:72:0b:8e:63:b2:
         e4:c0:6e:c9:a5:e1:72:54:fa:63:bf:1f:c3:5f:89:4a:b4:81:
         f6:e1:e2:7b:08:97:f5:fa:04:fc:8e:73:6c:d6:09:28:29:8c:
         3b:e5:a4:3e:1d:e5:c5:65:bf:90:24:60:5a:8b:51:42:70:55:
         13:bf:c7:21:03:16:e3:d1:7a:1f:69:22:3c:c1:b3:28:c5:40:
         bb:2c:19:0b:84:f4:33:a0:7a:f4:c2:a3:f4:0c:e8:84:1b:ed:
         58:4c:47:62:38:8c:e5:4a:99:eb:18:5c:55:8c:32:ab:73:67:
         61:20:d5:27:8b:a2:5f:94:ca:5e:c0:0b:58:28:5f:37:09:52:
         15:9c:84:03:57:a6:10:4b:cf:53:64:ac:cc:64:ef:e1:70:80:
         61:ba:cf:8e:7f:f5:7a:50:0a:d3:b8:03:30:98:4d:ec:73:5e:
         92:1a:65:55:d9:20:e2:a0:e1:05:60:41:12:e8:9f:68:9e:08:
         55:67:9d:f9:6f:df:76:c8:36:2c:47:f4:b2:d0:22:ce:94:79:
         ce:70:fd:47:50:1a:b0:34:62:40:f9:2e:86:fe:71:b4:51:26:
         f2:a8:1c:83:8c:1e:ee:15:9a:5b:9d:25:92:49:96:f7:80:47:
         35:1f:d3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:37 2025 by rpki-client