Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/100890b2-cb63-38f6-a327-be1ff3bbbb34.roa
File:                     100890b2-cb63-38f6-a327-be1ff3bbbb34.roa (raw, json)
Hash identifier:          cdZuH9TCwgDJW20lohMV+SQ1Id5/0XaUMszf3Bi4fcA=
Subject key identifier:   A6:59:9B:C0:5D:BF:4A:F8:1F:63:94:9F:4A:A5:FD:75:B2:19:71:7B
Certificate issuer:       /CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
Certificate serial:       010D0C9F43285849C20A225153DF88E047156280
Authority key identifier: 71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/100890b2-cb63-38f6-a327-be1ff3bbbb34.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     31898
IP address blocks:        2602:80f:9003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:22:51:53:df:88:e0:47:15:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e347687c-d80d-46e2-b30e-10ae68d8e1ee
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=022557f2-d086-4b5d-99e1-0ec3e85c7f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:63:2c:f7:10:39:c6:97:98:8f:80:38:f2:b4:
                    54:2f:38:04:f6:a9:a2:85:6b:08:00:94:af:2b:1d:
                    9b:e5:e4:c0:a9:42:0a:9e:5a:ad:e9:a6:a7:f0:91:
                    15:f5:5c:a1:31:a0:c4:d0:d8:f0:fd:ef:b0:92:3e:
                    99:29:93:7b:bc:17:6a:73:9c:5b:8b:b8:ac:30:26:
                    13:c2:92:39:07:76:38:a3:c9:c7:85:ec:98:c0:b6:
                    93:4a:ac:53:2f:1b:af:5e:42:e5:a1:71:d2:3a:af:
                    9b:65:c8:be:9a:e3:48:48:0e:92:3b:75:a7:48:51:
                    a7:e5:32:39:be:fa:fc:f7:ec:08:8e:d9:c7:fe:1b:
                    91:8d:f3:72:51:a1:a3:12:10:fe:47:37:28:ed:6c:
                    fa:99:56:e7:f8:a9:68:2a:a6:95:b7:b0:53:8e:4c:
                    66:3d:bc:cb:93:26:ee:1d:25:97:97:87:85:8d:aa:
                    d9:6f:d6:ea:da:0c:b9:40:66:7f:6b:23:19:96:b2:
                    b2:d7:94:db:92:51:aa:63:34:c3:a7:56:14:2f:40:
                    ff:3b:5c:52:37:67:39:3e:a3:fc:5f:d0:44:cd:e2:
                    17:32:f9:79:04:3d:ef:25:63:d1:d6:6d:c5:95:9a:
                    c4:96:83:97:97:f3:33:26:71:1a:3c:18:00:ed:7d:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:59:9B:C0:5D:BF:4A:F8:1F:63:94:9F:4A:A5:FD:75:B2:19:71:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/100890b2-cb63-38f6-a327-be1ff3bbbb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee/e347687c-d80d-46e2-b30e-10ae68d8e1ee.crl

            X509v3 Authority Key Identifier:
                keyid:71:A2:33:D4:28:7E:31:F5:37:E1:22:FA:52:79:C2:EB:06:25:D5:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e347687c-d80d-46e2-b30e-10ae68d8e1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80f:9003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:49:b2:8a:92:6b:73:ad:01:b8:ff:1f:12:ed:c3:f4:4e:8b:
         64:01:d9:55:5c:35:9a:d5:93:21:8b:04:0d:2d:82:1d:4d:02:
         0d:25:fc:c5:d0:eb:b3:f6:07:3a:72:75:71:8c:79:f7:0c:81:
         cb:fc:03:a0:03:84:36:d6:35:43:12:40:cc:f3:0a:61:03:83:
         06:e9:76:1c:c5:c1:0a:13:cd:28:26:5c:49:5c:78:1e:7e:ba:
         e9:ea:b2:30:45:73:cd:14:60:49:da:45:ca:65:fe:92:89:53:
         96:74:ce:6a:f0:40:c1:d2:dc:bd:a9:0b:ec:0a:17:57:1e:95:
         ab:61:84:2b:a0:50:33:50:8c:43:aa:a0:9b:5d:16:d3:71:a1:
         4f:39:5b:6c:f9:83:a1:ab:9f:8b:ac:ac:40:32:34:39:9f:0d:
         a0:ab:d0:7d:4b:1e:05:89:45:1b:ee:d3:3c:38:88:a0:fa:d0:
         32:d6:2d:b3:17:67:62:1b:bc:24:ca:c5:14:d4:5a:57:61:04:
         e7:c4:63:e0:d2:25:7e:87:36:73:6d:50:f5:ba:f4:0f:75:47:
         ac:a5:2f:2e:30:5b:13:9d:60:ef:80:03:71:f8:99:8e:0d:c7:
         22:60:dd:ad:1a:3e:01:ea:b1:85:db:e4:70:3e:59:e0:24:d3:
         d1:57:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:56:42 2025 by rpki-client