Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa
File:                     5c2617d4-b863-3aea-89a8-20002822ac28.roa (raw, json)
Hash identifier:          qEb3IyvjoV0bZqD1hr22MPVQwD+XY4wYGW5VVmo67Y4=
Subject key identifier:   99:A9:90:26:65:6C:8F:6A:10:24:94:96:7C:B2:B5:1B:E1:39:07:27
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F43285849E654F0EA9EB8D62D7EE7D680
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     18914
IP address blocks:        2607:1cc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f0:ea:9e:b8:d6:2d:7e:e7:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=263f8a7d-9516-44bf-b3d6-493151ef9d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:97:3a:dd:5a:53:78:34:0b:ee:df:ec:90:
                    c6:d1:77:fa:ed:3c:9c:92:49:ea:ea:9d:a1:68:fd:
                    fc:d4:b5:05:13:b0:39:08:d0:18:7b:06:89:81:af:
                    ed:c3:7c:67:90:3f:d2:de:9e:b5:80:de:3d:14:c5:
                    7c:e8:7b:45:c3:b9:0d:4d:1c:64:a1:df:00:e0:ce:
                    13:a0:43:cd:95:07:dd:c2:fa:9d:d2:ce:89:bc:4a:
                    b4:1d:85:9b:6e:e6:86:11:f8:66:2f:4d:88:83:fb:
                    e3:3b:d4:87:df:a2:3b:29:3c:62:fe:e0:a1:9a:3f:
                    67:06:a4:d9:d9:ff:5e:73:a2:79:45:2a:23:9c:41:
                    07:a7:f1:86:47:4c:16:02:50:5c:31:9c:28:2b:21:
                    ab:b9:b8:3a:f5:38:25:16:2b:9b:26:07:47:28:53:
                    1a:22:b6:4b:93:9e:66:18:bd:8a:5b:1c:3f:b1:fa:
                    52:b3:97:0a:56:ce:38:ba:d4:46:10:02:3c:a3:c2:
                    cc:8a:24:5e:86:b4:c9:ad:43:35:a1:e5:ad:fe:e7:
                    42:3a:eb:0f:72:50:2f:45:00:44:bf:9b:aa:71:5c:
                    3a:7f:a5:f2:be:cc:6b:c9:d8:7d:a9:18:7f:c2:64:
                    c5:6a:c5:85:a9:2d:6b:2f:7f:bc:28:d4:ee:c3:fd:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A9:90:26:65:6C:8F:6A:10:24:94:96:7C:B2:B5:1B:E1:39:07:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5e:05:a7:08:e9:70:9a:53:84:c4:e7:bb:60:27:06:e6:2b:
         ac:e7:3a:ea:fe:f9:04:54:7b:cc:73:1c:61:7c:39:12:d1:f0:
         52:de:f6:da:ef:f2:57:b7:04:13:49:68:5e:a9:5a:30:55:8d:
         35:2b:13:91:5c:c9:1c:ce:25:f6:56:75:3e:86:f3:44:19:42:
         fa:da:f2:e9:49:1a:f2:cc:a1:f9:13:e2:d4:fd:28:6a:ed:dd:
         3f:7b:65:1b:c0:e2:75:6d:7c:be:c0:71:1b:72:39:60:54:82:
         ef:6b:3f:a2:11:85:ae:81:2e:73:e4:41:1c:ac:a3:a5:f4:06:
         73:a8:f9:9a:14:a8:23:21:a0:2b:4a:27:af:9c:b8:21:53:63:
         99:62:47:47:2e:57:dc:ba:8a:d8:8d:87:79:cd:f2:42:c1:39:
         c2:d7:99:b4:be:09:8b:a6:e0:7a:3b:91:0c:85:26:2e:06:dc:
         17:d5:4b:0d:bb:2a:81:78:81:08:24:23:5f:82:47:65:15:22:
         75:b1:f3:a9:75:fc:69:19:62:d9:65:4e:44:7b:40:e9:ca:f8:
         42:cf:0c:ca:1f:23:86:8b:f8:59:dd:72:17:ac:ab:59:28:30:
         fd:bb:c5:28:4f:18:4a:19:79:41:09:57:a9:f8:56:58:49:db:
         34:58:12:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:28:30 2025 by rpki-client