Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1f5a9a72-5fc9-3e7f-9f3e-76f84c3c9dcf.roa
File:                     1f5a9a72-5fc9-3e7f-9f3e-76f84c3c9dcf.roa (raw, json)
Hash identifier:          315zAiTaI+hHCnm3Ez8KfGdG0j9/CHJhdn86oAc34MU=
Subject key identifier:   23:00:CD:C8:FD:2E:8F:47:1C:3F:4F:44:8D:39:1D:93:11:0C:89:3A
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584973DEE66E803D6DE2F53BCC80
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1f5a9a72-5fc9-3e7f-9f3e-76f84c3c9dcf.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     2152
IP address blocks:        2607:cc80:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e6:6e:80:3d:6d:e2:f5:3b:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=2fc93fad-e2eb-4a64-81dd-7ba0789143fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:c4:32:39:df:af:6a:3e:71:ba:f2:22:0a:
                    fa:d1:91:ae:a6:7e:51:92:10:a3:8d:68:1c:91:a3:
                    e7:5c:49:c9:d5:7b:ab:34:cb:36:13:6d:dc:aa:1f:
                    08:20:ac:98:1a:b7:23:09:f6:3a:da:8b:f1:5d:63:
                    6e:b2:a7:90:25:44:f2:4c:86:db:ae:22:f2:3a:c3:
                    a5:ac:d3:fd:92:54:5c:5c:67:f8:cc:f9:37:d0:fd:
                    f7:1b:6e:7c:c1:32:86:70:73:86:ac:38:86:0a:07:
                    1b:ae:b3:1d:b5:fe:17:0b:f6:19:4d:19:aa:28:da:
                    1c:5f:0f:5d:94:f1:52:82:8e:79:9d:d8:4a:e3:2d:
                    6a:52:a9:28:7e:0b:91:ee:e1:17:81:23:bb:57:4c:
                    3a:92:7f:ea:07:3e:c2:83:42:75:66:8f:36:c8:6b:
                    f4:6e:54:c5:a4:5d:5e:b8:cb:3a:86:ec:e3:64:5d:
                    9f:df:aa:e0:bf:c0:d5:05:fa:55:d8:89:01:39:5c:
                    3c:cf:f8:73:0a:6d:0b:6b:d2:6b:e3:ef:66:b8:e0:
                    48:fc:30:0e:45:21:74:be:00:7d:b9:58:a5:a3:a5:
                    c2:85:28:e4:47:d7:d2:b2:48:f5:3e:fa:05:71:06:
                    b1:15:de:eb:8d:cf:55:8e:58:1f:74:6d:12:9b:3a:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:00:CD:C8:FD:2E:8F:47:1C:3F:4F:44:8D:39:1D:93:11:0C:89:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/1f5a9a72-5fc9-3e7f-9f3e-76f84c3c9dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:20:2d:96:b4:25:93:e3:d3:5b:1e:c1:3a:a5:7d:2a:e6:ac:
         81:c4:79:0f:09:f1:41:55:24:88:ad:48:1f:75:af:2d:82:9c:
         eb:55:3f:a0:3e:32:11:22:21:20:9a:6d:b4:ab:81:10:37:f2:
         0c:f5:be:3c:28:4b:b6:5d:e2:67:1c:e2:9b:c3:be:b0:b8:03:
         88:5d:db:fb:0b:94:6d:88:e6:c0:3d:7e:99:54:21:34:53:4a:
         e2:f3:f4:87:be:1c:a1:ea:6a:57:1e:c6:bf:59:2b:82:c0:c4:
         e8:bf:a3:bf:02:4d:80:99:c4:c7:a4:12:8a:a2:d1:21:0b:0b:
         de:5d:cd:38:40:61:77:67:62:61:a5:3a:89:66:13:ae:79:eb:
         60:f4:4b:89:73:c9:cd:7c:f1:92:cf:91:ba:1c:08:a2:68:4e:
         4e:83:d3:78:46:16:e4:b8:c6:18:9d:95:36:b9:c1:03:91:4f:
         0c:88:86:a1:71:d5:da:d7:36:7d:09:29:a9:e8:2f:33:06:4b:
         36:d6:05:93:7b:f1:5e:07:f7:be:41:8d:65:14:41:ab:6c:7b:
         07:f5:ce:eb:25:b3:5d:15:e1:8e:83:ab:4b:cf:36:65:db:66:
         88:4e:b6:c1:6c:69:e0:48:67:e9:54:98:dc:92:1d:f8:76:fa:
         09:bb:f8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:25:31 2025 by rpki-client