Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa
File:                     a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa (raw, json)
Hash identifier:          3RnpvpSFSn3PnX6vKjYkFz/adSGKBEaqza7o5gF+/M4=
Subject key identifier:   72:90:1A:AA:F7:F5:90:97:91:E8:5F:66:61:58:DE:2E:D0:1C:5C:8D
Certificate issuer:       /CN=cea06c90-4ccd-4474-b4fa-882eed4f4cd5
Certificate serial:       010D0C9F43285849C0A4DF4A12F8335333FBEC80
Authority key identifier: C0:94:76:1B:6F:0E:00:D6:3B:58:1C:57:5C:40:D3:98:37:9E:FD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     19750
IP address blocks:        2620:100:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:df:4a:12:f8:33:53:33:fb:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea06c90-4ccd-4474-b4fa-882eed4f4cd5
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=380331b1-a696-4138-946b-cfebc94e4ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:d0:c7:6f:1d:ca:43:6f:81:53:58:ca:a6:
                    3c:18:38:0f:07:59:99:fd:0c:b9:e7:53:dc:8c:14:
                    a4:62:92:71:71:67:fd:e2:c6:87:2d:cd:21:0d:dd:
                    44:52:36:84:f4:03:e2:a5:17:37:1f:9e:97:49:b8:
                    b0:08:eb:67:a1:a9:26:35:06:b7:6b:2e:59:b9:51:
                    b9:6d:4c:2e:ac:7a:27:b8:d3:4a:f5:4b:5c:05:86:
                    06:2c:6b:9b:7a:d2:9d:95:82:b2:76:4d:7a:47:15:
                    cb:61:75:65:90:bc:41:9f:60:05:f5:06:57:b1:d0:
                    03:23:08:15:fb:9a:1b:7c:f5:02:57:d3:fc:e5:4c:
                    27:00:f5:bc:77:f0:55:75:b6:06:9f:37:4d:90:be:
                    98:a3:bb:da:fb:13:c4:10:3c:1d:29:a0:4d:5d:cc:
                    50:00:a4:28:f9:df:19:c9:d4:33:ab:37:1e:e5:e8:
                    ae:36:be:31:c6:57:38:0c:68:e3:e6:85:ef:27:32:
                    70:07:34:8f:e3:10:5b:ec:0e:81:25:18:ae:43:16:
                    ba:47:ce:a1:09:01:ba:c2:1b:a3:a5:b4:c0:31:c9:
                    08:b0:2e:73:fd:10:32:02:d4:f7:b1:f4:d6:30:a8:
                    2c:21:82:b4:c1:4c:dc:9d:c1:3b:9f:cb:40:07:c5:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:90:1A:AA:F7:F5:90:97:91:E8:5F:66:61:58:DE:2E:D0:1C:5C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.crl

            X509v3 Authority Key Identifier:
                keyid:C0:94:76:1B:6F:0E:00:D6:3B:58:1C:57:5C:40:D3:98:37:9E:FD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:100:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:32:38:68:2d:15:60:8c:00:88:8a:a3:5f:27:37:00:ad:
         37:4f:b9:fc:97:0a:71:5a:c4:6f:83:ff:b3:10:d0:80:5e:17:
         cc:3a:fd:d8:51:98:a2:3d:2e:72:af:95:98:58:fb:f2:fe:ac:
         90:38:38:e8:6c:2b:fe:cb:a4:5d:34:d0:18:b3:f8:cb:b8:9c:
         3a:1b:06:09:a2:6e:89:dd:b0:7d:87:1c:2a:39:67:b4:5e:a2:
         5f:1f:1e:07:25:37:c3:16:36:66:a6:3e:0b:6c:45:ac:98:49:
         fa:c9:e7:eb:d4:44:2f:f7:33:bd:19:80:29:f2:df:8a:0b:bf:
         7a:d2:b2:4d:e6:ed:39:6a:a0:31:94:f6:6e:eb:3c:b5:05:88:
         8e:16:ab:16:9c:34:6f:c8:dd:54:68:85:82:26:3a:13:78:d4:
         ca:76:5e:0a:3a:ce:e1:39:6f:ac:89:4a:93:c4:07:a5:5e:62:
         b9:d9:af:d4:3c:ed:bd:bc:d6:47:6f:55:7c:5e:2e:cf:d7:66:
         aa:3d:25:0b:51:20:bc:2c:07:61:61:af:99:12:03:e2:c9:92:
         da:01:ab:aa:eb:f6:7b:2d:aa:73:7c:51:30:11:76:2e:2a:c1:
         13:05:fe:24:48:fb:5a:16:1a:a5:62:8c:33:83:54:21:79:ea:
         b0:86:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:32:08 2025 by rpki-client