Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa
File:                     3ad9037d-cc4e-3a46-981a-715e438d4f71.roa (raw, json)
Hash identifier:          gVR43ynCIfTzJauJ8gHw5GNdM5rSErnmSoLXuy6LvoE=
Subject key identifier:   F2:7C:76:7B:D9:F4:F7:88:AF:E5:2E:17:86:DF:30:96:E5:27:92:3F
Certificate issuer:       /CN=cd7304e1-3bc1-43c1-b035-93ee027063db
Certificate serial:       010D0C9F4328584A00DAC552A0D02814E2906410
Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     48231
IP address blocks:        2602:fa93::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c5:52:a0:d0:28:14:e2:90:64:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=07feb119-7bdc-47c1-9afc-1d42fcc3c695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:ee:4a:e3:87:f7:9a:85:f5:97:93:1c:75:
                    93:4b:da:6d:3b:02:2b:d3:c7:e7:ca:19:e1:29:b8:
                    64:6b:e3:1f:c6:b5:d1:d9:d4:b6:44:ed:32:d0:ec:
                    d1:e3:82:23:f6:5e:6a:ac:8b:4e:c9:c1:d1:df:b7:
                    45:61:3d:5b:69:46:a8:05:20:f2:3a:07:75:a0:96:
                    c2:8d:40:8b:3e:cc:02:c0:1e:3f:17:ae:10:90:8d:
                    c8:c1:e3:61:34:b0:95:87:d6:42:8e:50:62:8e:fb:
                    66:db:11:e8:7b:0d:20:53:8e:5f:9b:a6:6b:3b:ee:
                    1b:ef:d4:e4:cf:ee:5b:b8:62:68:3b:5c:b2:ca:14:
                    92:8f:31:57:fe:0d:e1:43:78:2c:74:d1:51:5c:72:
                    d8:53:83:de:12:09:8f:0a:aa:98:96:8d:ad:c0:14:
                    fc:b1:ac:56:9a:ed:c8:07:e8:a2:50:f5:d0:b5:a0:
                    65:a3:fd:4f:54:45:83:a4:0a:9c:c0:50:e3:52:55:
                    97:0b:a4:8d:ff:d6:e8:f0:39:58:f5:2e:8b:7c:21:
                    c1:67:c5:94:37:d6:50:5b:fe:1e:d1:b2:3e:74:42:
                    2c:67:65:33:17:b5:67:2d:15:8a:e6:5e:79:02:19:
                    76:44:d8:3e:a7:de:9b:04:b2:9b:b9:39:c8:f1:79:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7C:76:7B:D9:F4:F7:88:AF:E5:2E:17:86:DF:30:96:E5:27:92:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa93::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a3:72:1a:05:38:44:0a:b9:48:34:a2:0f:6b:36:d2:1c:21:
         18:78:19:6c:43:af:b1:0d:12:2a:d0:d1:17:f5:7f:90:ac:92:
         33:1b:40:2a:9f:b4:63:6d:5b:5d:6c:c4:b1:da:20:5e:e9:77:
         c0:ed:51:6d:0c:da:66:8d:d9:ad:71:c8:6e:27:57:7a:4e:79:
         ae:c8:a3:a8:be:67:a7:06:c0:ea:d5:01:03:82:dc:5a:54:ea:
         44:53:e1:7b:19:95:4b:08:d8:f9:f7:f2:81:bf:e4:0c:ff:b4:
         2a:af:a1:24:69:71:2d:9e:0a:5d:10:75:1b:e0:f9:24:51:cf:
         64:9f:8e:32:d4:06:39:08:14:ee:4a:e2:0e:ca:15:fb:3f:10:
         4e:0e:0a:98:f1:44:06:c9:72:14:b9:f4:fd:ab:df:10:98:4b:
         d5:c2:15:36:e0:69:f3:d4:db:ab:ad:4a:62:9e:7f:d4:62:d5:
         bb:7b:fe:68:e4:4b:6d:29:32:b0:a1:5b:62:5c:90:4d:28:42:
         44:cc:92:5b:00:4f:a7:a2:54:2e:bd:76:9e:d9:75:ab:69:83:
         83:70:24:a1:3c:c6:55:2d:c1:16:26:53:eb:dd:50:ad:7d:54:
         e7:12:ce:68:5a:d2:71:db:b7:7e:b6:77:fc:c2:12:1d:59:7b:
         db:15:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:18:03 2025 by rpki-client