Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/818d97ef-c1ab-3beb-842a-9d31a4febc85.roa
File:                     818d97ef-c1ab-3beb-842a-9d31a4febc85.roa (raw, json)
Hash identifier:          a21gFtYtrxKd741oVRJKVfTbgi4huWJ46VchgxmXbkE=
Subject key identifier:   C7:7D:82:9C:6A:FB:7A:17:43:E4:34:6C:40:4A:55:67:C9:CB:00:B8
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F43285848F4D42347CED4F7348AEEECC8
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/818d97ef-c1ab-3beb-842a-9d31a4febc85.roa
Signing time:             Fri 21 Feb 2025 12:51:33 +0000
ROA not before:           Fri 21 Feb 2025 12:51:33 +0000
ROA not after:            Thu 22 May 2025 11:51:33 +0000
asID:                     53388
IP address blocks:        2607:eb40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:d4:23:47:ce:d4:f7:34:8a:ee:ec:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Feb 21 12:51:33 2025 GMT
            Not After : May 22 11:51:33 2025 GMT
        Subject: CN=c4e4c499-7bf2-4d65-8a1c-f75672403d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:1f:79:5d:d8:c4:48:a9:15:8a:d7:8d:66:
                    1d:14:ee:08:6a:8e:74:c7:12:57:ed:87:d1:2e:28:
                    e3:ca:bc:ac:25:bb:e0:76:83:83:3b:d6:e3:b5:cb:
                    d8:60:11:b0:a3:c9:8f:77:a3:14:58:2b:16:01:7d:
                    7c:38:d1:84:bd:aa:62:26:16:ee:fe:7c:c9:f6:df:
                    e8:06:df:f7:56:ac:77:8d:34:10:b3:2a:57:67:e9:
                    e1:26:8a:4f:8b:19:f3:db:92:69:27:d5:e9:8c:3a:
                    3b:8f:f6:9b:3c:23:11:37:d5:ac:1a:9f:de:63:40:
                    16:a3:19:29:0c:8b:57:cf:43:5c:cd:dc:da:5b:bc:
                    24:3e:6f:78:bf:8a:0a:93:c8:1d:6c:52:11:5c:a0:
                    df:be:2f:ae:72:19:e1:81:3f:6e:3d:31:70:32:59:
                    4c:fc:4c:24:de:3e:fc:32:4a:41:a4:d7:eb:54:11:
                    51:41:a3:ae:df:0c:f6:2c:7d:61:26:ca:42:74:75:
                    e1:29:ae:80:1a:25:14:fe:39:f1:54:48:77:62:26:
                    e2:46:3e:2c:21:47:e0:4d:99:d4:03:65:20:ea:e7:
                    88:1a:c9:68:8e:c2:46:8d:45:ef:c1:3a:91:9a:12:
                    3a:74:50:d1:34:2f:7c:5b:65:f1:9e:a8:54:65:1d:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7D:82:9C:6A:FB:7A:17:43:E4:34:6C:40:4A:55:67:C9:CB:00:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/818d97ef-c1ab-3beb-842a-9d31a4febc85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:16:90:67:ba:85:2f:7d:57:12:ad:42:62:f1:4e:a9:48:6c:
         49:f5:fc:8f:24:c5:cd:81:da:15:3a:3a:69:dd:97:fd:6c:4a:
         ce:6b:da:bf:01:e5:5d:4d:b7:7a:e9:d1:6a:54:b7:b5:00:d5:
         16:75:a0:f0:43:f5:3e:be:00:88:68:58:cc:65:74:62:32:57:
         38:c6:dc:61:7e:1f:2b:d8:3e:cb:b5:a7:b4:33:05:1e:39:9e:
         2d:e0:e1:7d:c2:42:48:25:3d:58:93:80:35:95:fb:7f:e3:01:
         fc:9c:64:04:1a:5d:0b:78:a4:dd:04:6f:cf:30:69:37:6b:d9:
         9a:b5:6c:60:11:bd:6e:74:71:6a:95:ad:55:5d:cb:d3:ea:76:
         53:db:81:e6:43:9e:37:fc:9d:55:84:11:6a:b3:65:48:12:26:
         fa:48:7e:45:73:ba:8a:f1:98:9c:ef:9e:d6:d4:46:c5:f6:1d:
         44:8a:d0:63:b7:c4:ae:34:bd:3e:be:50:35:09:47:b4:67:b1:
         bf:53:1a:20:ec:fb:04:48:2c:99:c4:26:e0:b9:22:ef:20:e5:
         77:e2:86:af:22:a4:d7:b4:62:d9:1a:0b:d6:dc:6c:02:89:f8:
         eb:d9:fa:d6:96:1a:a2:e0:43:fe:f8:6f:26:b6:20:c1:37:54:
         70:1f:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:20:47 2025 by rpki-client