Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa
File:                     2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa (raw, json)
Hash identifier:          OboUL5HZietRCYE2aP5dc5nkSbWhy0t5QkR/zBPU+/8=
Subject key identifier:   18:57:73:BB:EC:ED:B4:9C:6B:CA:7B:70:F6:DF:D0:B4:7B:C0:E3:D0
Certificate issuer:       /CN=2cc7763e-7f76-4992-8aa2-f572d5b0bf60
Certificate serial:       010D0C9F43285849ABB4AC2560965FA89B716000
Authority key identifier: 56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     397059
IP address blocks:        2620:4a:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:ac:25:60:96:5f:a8:9b:71:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc7763e-7f76-4992-8aa2-f572d5b0bf60
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=5f57ac13-f6ae-4212-ba49-5f5a6282c91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ed:62:fc:34:b4:f7:81:18:ff:1e:51:68:43:
                    1a:01:b5:e2:46:c9:0d:7a:ad:aa:88:4a:ef:12:17:
                    94:a6:ce:ba:10:30:a6:29:80:a7:5c:e0:f5:50:36:
                    0c:3c:c4:b5:73:42:c5:2e:71:f8:c8:79:a0:db:ea:
                    57:41:0b:bf:4c:5b:57:28:aa:ce:0d:2e:3c:1a:1a:
                    f6:b9:76:d0:9b:73:f5:58:ae:e3:84:d9:b0:d6:51:
                    24:6f:4d:bd:b9:dd:a3:77:88:a5:e7:53:cc:8a:23:
                    77:8d:e8:77:37:c6:7a:67:ab:c6:f4:95:0c:62:47:
                    15:f4:db:cd:c6:ff:ce:70:a8:06:73:05:33:ba:01:
                    9b:3c:10:a5:af:64:6b:6c:27:63:c2:29:8d:0d:cc:
                    18:e3:b6:4e:1e:66:07:69:3f:7a:64:f7:b9:7b:e1:
                    0f:c1:bf:3d:cf:da:f4:ea:51:47:3d:72:30:6b:ee:
                    9e:2c:b8:95:32:62:c0:d3:f5:e3:51:4a:9e:24:c6:
                    68:fa:2a:01:f0:ee:96:96:2a:f7:d7:47:d9:fe:bd:
                    22:37:d3:e7:fa:9a:54:e3:36:e5:da:01:9a:0d:1a:
                    96:d2:7a:0a:b9:c1:3a:ce:29:9e:ab:8a:af:64:38:
                    cb:01:b3:0b:0b:07:c5:42:f7:87:72:9e:09:43:6a:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:57:73:BB:EC:ED:B4:9C:6B:CA:7B:70:F6:DF:D0:B4:7B:C0:E3:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2ad1a13f-c1be-3c9f-bdda-5e0cf31e8f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.crl

            X509v3 Authority Key Identifier:
                keyid:56:7F:07:58:16:A5:74:32:2B:7C:68:E8:EF:4A:FE:9F:C1:46:E7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2cc7763e-7f76-4992-8aa2-f572d5b0bf60.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4a:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:69:20:7d:54:1e:4a:bb:6a:47:47:01:4f:b8:ea:fb:7f:
         98:ec:59:11:79:88:7b:42:77:eb:36:da:53:d8:38:fd:12:b5:
         2a:1c:29:c2:49:7b:ea:a3:b4:f9:2d:e2:48:1d:b2:f0:e2:33:
         66:66:cd:5a:38:4d:9a:53:26:3e:f3:11:ff:b0:a7:b3:95:16:
         fe:aa:c8:58:20:27:aa:78:d6:a4:f6:94:b2:02:59:78:c6:37:
         27:08:cc:12:b9:c5:1a:87:32:9d:9d:d3:c3:bb:54:fb:f2:68:
         d1:ee:a5:b6:1c:46:33:18:93:b5:32:50:4d:5d:9b:64:27:be:
         14:03:79:df:4d:ce:97:ca:12:19:d5:c3:ff:6f:14:2f:b0:a9:
         91:e8:da:74:6b:16:bd:79:ce:db:83:b0:5a:0f:61:a4:dd:8b:
         3d:db:0c:36:db:ae:23:6a:6b:60:bc:c6:94:c6:b5:f4:af:38:
         bb:d9:f6:4b:d4:5c:f1:8b:4f:a6:50:81:cc:fd:37:da:5f:95:
         b9:62:aa:45:24:94:26:5a:a9:67:c6:b3:10:32:0d:8b:ae:6b:
         4a:4f:cf:5e:45:82:db:4c:a7:f7:ec:2b:b9:a7:11:8e:f7:bb:
         95:37:86:b8:41:25:b1:07:14:62:d4:31:c9:30:04:d6:52:9a:
         3c:68:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:23:43 2025 by rpki-client