Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/1c60f76f-56dd-3482-8065-65a73b3af3ef.roa
File:                     1c60f76f-56dd-3482-8065-65a73b3af3ef.roa (raw, json)
Hash identifier:          Si9K3bqbKxLfvxCTsECQCl0YpCGEZ1W/KdBq1h2HtcQ=
Subject key identifier:   66:D7:D7:7D:18:58:DB:AE:85:82:30:F9:70:BC:73:33:FC:34:7A:DC
Certificate issuer:       /CN=e102a5ad-786a-444b-bd0b-6bd116f20466
Certificate serial:       010D0C9F43285849C0A4DA288BDA6684B1181100
Authority key identifier: 98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/1c60f76f-56dd-3482-8065-65a73b3af3ef.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     7018
IP address blocks:        2604:9d40:1f8::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:da:28:8b:da:66:84:b1:18:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e102a5ad-786a-444b-bd0b-6bd116f20466
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=f7718b03-cba0-4b71-a1ed-9af0da58d9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:4e:16:2b:61:a4:12:d6:30:b1:5d:66:36:
                    eb:7f:5e:a7:af:06:80:39:05:6a:13:9f:e8:0f:26:
                    f1:7d:16:46:d5:0e:a4:1f:ee:3c:58:91:6b:af:48:
                    a1:62:a5:5d:a4:48:99:23:f3:4c:c6:05:56:35:d2:
                    66:b7:89:fa:49:ff:2c:2d:c9:7e:b5:ea:98:b2:e8:
                    57:34:30:b6:41:75:47:5e:fc:9a:6d:d3:10:79:52:
                    02:99:9f:b2:0b:81:83:fa:a5:5e:09:e8:f1:c0:5f:
                    13:db:7a:9b:b6:5a:84:d9:46:c6:f3:1b:1d:ef:94:
                    28:ef:77:fe:4e:80:78:b2:5c:1e:b4:9b:9a:10:d7:
                    dd:fb:f0:f2:ed:54:0b:74:a9:8b:d8:f0:7e:f0:77:
                    14:6b:b7:c7:59:dc:fc:85:4b:9b:b7:b0:ae:76:35:
                    38:84:81:40:58:d4:71:f4:fb:a1:46:ed:35:be:26:
                    da:c3:94:c5:69:e4:de:18:54:be:89:8f:af:27:5e:
                    11:02:df:27:04:fd:11:bd:de:71:f7:ef:54:94:92:
                    df:8e:e1:9e:b7:0b:6b:5c:c9:26:58:ce:a8:65:17:
                    56:bc:6d:a0:49:76:1c:15:9c:0c:8e:96:ac:41:45:
                    2d:f5:da:3c:7c:49:8c:de:c7:e6:78:7f:92:96:f6:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D7:D7:7D:18:58:DB:AE:85:82:30:F9:70:BC:73:33:FC:34:7A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/1c60f76f-56dd-3482-8065-65a73b3af3ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl

            X509v3 Authority Key Identifier:
                keyid:98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9d40:1f8::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:98:41:b3:74:e1:cb:da:e3:33:ef:38:e0:9c:ff:ac:e7:9d:
         bd:cf:3d:19:1e:15:fd:c1:c6:c6:77:36:40:77:f4:57:bc:c3:
         b1:b1:af:c2:9b:16:32:70:df:7c:f7:8c:45:53:d2:37:14:89:
         3f:24:42:58:29:a1:de:1a:c0:24:a6:30:87:13:af:a0:ef:0c:
         90:c9:b8:f5:61:af:33:e5:0d:40:68:9d:70:f2:e4:20:7e:2d:
         14:e7:1f:d0:c0:fc:51:33:1f:b3:95:60:c7:ba:31:1e:fc:b0:
         c2:65:3f:19:8c:0c:59:cc:72:56:69:42:de:a4:53:d8:be:1e:
         e3:e8:da:e6:61:e4:2a:47:7f:5b:5e:ec:34:ca:c0:2e:92:f9:
         65:f5:0a:18:87:dd:54:d3:41:49:bb:b7:05:11:fb:70:31:4c:
         e1:8f:4c:47:59:83:58:e0:6e:7d:9e:64:a6:37:61:50:37:05:
         9c:bb:94:19:42:3c:9b:ad:47:c9:d5:64:ce:fa:a2:be:91:0c:
         dd:47:f7:5e:c5:03:57:09:f9:55:93:e1:4f:e4:fc:c1:ea:e3:
         ee:28:34:f4:94:73:ae:b4:90:35:04:f4:23:02:64:fd:b5:52:
         6a:41:e3:90:c9:40:55:7c:76:be:ac:a3:24:1e:20:66:25:7e:
         a3:e7:b0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:12:15 2025 by rpki-client