Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/c5144e10-cda3-3f1f-ad54-72216455023f.roa
File:                     c5144e10-cda3-3f1f-ad54-72216455023f.roa (raw, json)
Hash identifier:          HivFXczDKMqeGXYh+vtPgvX4wX0mVLcLm+vSFJeA9Go=
Subject key identifier:   90:4B:D1:26:F1:10:26:83:0B:25:A8:C8:63:14:06:74:A7:DE:78:3D
Certificate issuer:       /CN=cbe51a2e-768b-4b93-baac-8cae43186078
Certificate serial:       010D0C9F43285849C904DF4F13B858E85F53DE00
Authority key identifier: C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/c5144e10-cda3-3f1f-ad54-72216455023f.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     394923
IP address blocks:        2602:ff52::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:df:4f:13:b8:58:e8:5f:53:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe51a2e-768b-4b93-baac-8cae43186078
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=709b7f49-8cfc-469d-ba0e-208033f4c5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:b8:ab:b5:c7:b4:31:a6:c2:eb:ba:33:00:
                    0a:e1:a4:14:cb:5a:5c:7b:60:50:f3:9f:29:43:1c:
                    40:0c:a1:c2:80:ca:10:92:37:96:14:7f:84:42:2f:
                    0d:d6:07:f5:40:82:a8:e1:f0:f5:69:80:b5:95:f0:
                    7b:81:64:f0:5b:19:11:75:44:fb:72:9b:7c:f8:e8:
                    46:07:2e:b9:e8:99:e9:3b:fc:8f:2e:ac:59:79:c9:
                    0c:13:5d:65:f4:95:e4:bd:d0:ab:a3:62:bc:34:14:
                    08:ec:ca:25:51:19:58:10:7f:63:87:45:d0:a1:46:
                    ba:4e:65:dc:29:ba:d1:9a:b9:3c:4d:27:80:68:f0:
                    0f:82:e3:1c:09:7a:e5:24:81:5a:e3:23:e5:b0:9e:
                    9a:4c:1a:70:bc:29:32:17:93:26:d7:66:ef:81:67:
                    2a:38:27:b8:bb:07:26:5c:78:45:1d:ad:c3:2f:42:
                    01:9e:25:97:f0:6e:fc:c2:c7:51:f3:2a:ba:c2:1e:
                    fc:e8:6f:36:fe:e5:da:b5:7b:68:11:2f:ff:47:7c:
                    c4:eb:f7:b8:41:0b:cc:73:18:d9:7f:43:07:0f:10:
                    91:7c:9b:bb:4e:7a:10:d9:2e:29:46:07:f7:ef:29:
                    57:15:ba:81:77:09:9b:41:86:06:07:b3:42:93:c2:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4B:D1:26:F1:10:26:83:0B:25:A8:C8:63:14:06:74:A7:DE:78:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/c5144e10-cda3-3f1f-ad54-72216455023f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078/cbe51a2e-768b-4b93-baac-8cae43186078.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:CD:3F:9F:7E:84:04:FF:F1:FC:17:A5:0C:DC:3F:E2:2F:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbe51a2e-768b-4b93-baac-8cae43186078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff52::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:95:46:e3:3b:c0:df:54:f0:0d:39:8b:99:2c:f5:fd:2e:5f:
         b0:b9:30:28:2c:d3:28:d2:bf:e8:fb:c4:41:f0:f3:07:89:87:
         73:40:89:c0:d4:e9:e1:0c:7a:8d:d7:ec:2e:e4:56:19:0e:2e:
         91:76:6e:41:5f:21:64:d1:89:64:c8:30:83:36:84:20:47:b8:
         94:11:9a:5d:cf:e4:89:7f:d7:02:bc:5f:34:69:10:2f:82:de:
         2f:65:d8:02:bd:49:3e:73:12:48:18:fb:48:92:07:1b:f4:83:
         c9:2e:e6:4d:9b:4d:c1:85:5b:a4:10:31:32:7f:21:ad:d3:08:
         f6:42:6f:a8:d9:6f:ae:e8:cd:8b:e2:89:e0:51:06:6e:0d:db:
         2f:76:e6:d7:bc:79:51:4c:73:bc:4e:36:ab:80:f3:53:76:96:
         e8:d3:a3:76:f0:eb:33:c8:77:f7:db:3a:68:27:29:c4:c9:0f:
         38:b1:2e:7d:2d:e6:5b:d0:a1:01:34:80:cb:01:21:1a:f7:79:
         cd:60:f5:01:0b:50:1a:f4:b2:34:b6:e7:dd:53:d1:1c:29:c6:
         81:b2:5e:8f:48:cc:83:a3:b6:89:1d:20:72:5f:2f:df:0b:6a:
         22:20:39:89:02:9b:60:07:af:da:41:b2:4b:54:9f:1c:80:dd:
         7e:f5:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:09:05 2025 by rpki-client