Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa
File:                     51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa (raw, json)
Hash identifier:          pwJymU7CtubXbEpox0a9ao05jel9Ap39g35UxglSpSk=
Subject key identifier:   0B:B5:FA:B0:6B:40:6F:9B:96:5A:EB:C7:5C:1C:18:E1:74:7E:8C:AB
Certificate issuer:       /CN=d3a00337-0fdf-42e1-9343-424fd474da93
Certificate serial:       010D0C9F43285849C0A4D9948B18F8BC73191100
Authority key identifier: CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     27398
IP address blocks:        2602:fed5::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d9:94:8b:18:f8:bc:73:19:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3a00337-0fdf-42e1-9343-424fd474da93
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=36e0ee8d-1bdf-48d1-9e4f-ccbc8d81626c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:c1:08:f9:8e:7a:f1:9f:b1:c4:ee:d1:77:
                    f3:11:a1:0c:25:a0:9b:ad:07:09:bf:f3:21:7d:65:
                    6f:d1:3c:ef:a5:98:fe:e9:2d:98:98:94:4b:8f:cc:
                    33:f1:b3:d7:2e:42:b3:f4:03:71:d5:af:2c:6e:d7:
                    dc:ef:19:b0:fc:2c:0d:a7:1c:f3:8e:2f:eb:35:b8:
                    82:81:22:36:b2:84:85:64:03:02:b5:9d:45:07:16:
                    3b:d0:60:80:16:61:e6:e7:2d:a7:97:de:66:20:8e:
                    83:0a:ec:be:e3:ad:41:d3:5b:4b:3e:b6:01:a1:08:
                    14:b7:1f:a3:6a:c2:4e:36:f0:a3:73:e5:9e:e8:2c:
                    58:df:f7:a6:b0:b5:1a:8e:a2:8b:10:70:b6:b8:9b:
                    ec:fc:ad:28:15:a2:c4:94:db:60:d7:a0:03:84:b2:
                    cb:b3:9f:84:64:de:50:f4:cf:a3:7f:fb:c5:b1:5a:
                    3b:26:10:53:67:d8:e9:7f:2e:17:58:fc:b1:00:39:
                    fd:af:de:20:1e:57:50:cd:c7:d4:40:3c:ab:d6:05:
                    86:16:66:01:d0:52:e8:30:bd:b6:08:80:be:49:07:
                    75:4a:d5:0a:03:be:b8:98:f7:ee:08:fc:3a:c5:67:
                    3c:df:eb:4d:b6:84:68:79:6a:eb:7c:fa:07:4c:53:
                    e3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B5:FA:B0:6B:40:6F:9B:96:5A:EB:C7:5C:1C:18:E1:74:7E:8C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/51db6d6f-70a1-3d89-ab6e-e556a5af1c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93/d3a00337-0fdf-42e1-9343-424fd474da93.crl

            X509v3 Authority Key Identifier:
                keyid:CB:37:3A:06:D0:D6:61:3B:C1:2E:E7:33:9E:8A:11:DA:AE:C9:55:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d3a00337-0fdf-42e1-9343-424fd474da93.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3c:28:51:e4:94:7e:84:8d:de:ab:ba:2c:e1:7e:2f:6a:fe:
         eb:fa:78:6e:16:8c:f0:cb:88:19:4b:87:c2:8a:67:65:ba:5e:
         ae:2a:a7:c3:ed:8b:d5:41:61:ad:92:5c:a6:b9:e9:04:bd:d2:
         09:3d:5d:eb:75:1b:f3:b6:a6:94:0b:f6:8a:95:52:92:f3:12:
         7a:ff:66:68:40:dd:48:5a:02:0c:61:1d:4d:16:cc:98:16:c4:
         1d:26:f7:ed:2c:5a:0a:1d:14:75:ee:56:49:e0:01:c0:58:c2:
         25:8c:b9:e9:f6:2b:d5:4f:e4:d9:3b:b2:99:f8:44:49:24:50:
         7c:6e:9a:28:4b:11:a8:56:9f:21:3f:f1:7e:28:a7:df:b8:a6:
         11:0f:e0:ab:2e:14:50:73:b7:8d:7c:ad:d6:90:fb:8e:90:65:
         03:12:ff:4e:7d:2c:27:21:b2:c5:63:c8:31:91:ca:26:8c:19:
         df:00:2e:05:de:cc:82:c2:cc:ef:25:2c:5d:de:83:5f:b0:cb:
         7c:ae:84:a4:e1:23:de:eb:00:d5:af:b2:d7:b4:61:4b:64:16:
         e4:e6:c4:47:a5:9f:4a:71:e6:d1:35:25:46:89:af:07:e4:b6:
         f7:bf:cd:a6:a7:3f:25:c2:1e:92:f2:0e:e1:83:38:29:cc:bc:
         b4:1a:69:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:17:28 2025 by rpki-client