Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/c2b92efc-5b5f-3ef0-89e9-c4018d1d6fde.roa
File:                     c2b92efc-5b5f-3ef0-89e9-c4018d1d6fde.roa (raw, json)
Hash identifier:          iog4MP/AcK4OfBEB409CY84PF9gU7Hb+/jqSO+EpgDQ=
Subject key identifier:   A3:2F:73:A5:EE:A5:BB:04:1D:2E:CF:C0:4F:68:A9:0D:8B:84:EA:63
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F43285849C0A4CABE0FB0BFCFEBEEA600
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/c2b92efc-5b5f-3ef0-89e9-c4018d1d6fde.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     45102
IP address blocks:        2600:3100::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ca:be:0f:b0:bf:cf:eb:ee:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=5aa30091-4b7e-4923-8d55-1d8572336b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:54:3f:cc:b4:19:a7:e0:31:0e:41:49:21:
                    2a:42:b7:e5:d8:9d:63:f5:2a:91:72:96:71:3b:1a:
                    1a:87:84:1c:f1:d3:22:77:95:e6:f1:2e:b3:48:6b:
                    d2:76:e6:66:88:f9:0c:b9:a9:94:0b:26:84:75:7e:
                    fa:c0:7c:0b:0e:be:f9:af:c8:14:08:ab:d1:55:5c:
                    38:f0:74:85:03:80:53:4c:c9:4a:7f:5e:94:05:da:
                    9e:e5:6b:7d:dc:5d:77:60:b2:b4:29:95:a1:af:ec:
                    66:51:a3:e6:a5:3f:0f:fb:55:7b:95:f8:c0:4e:0c:
                    58:81:cb:a6:fe:d5:70:f2:23:ed:82:c9:66:f3:c4:
                    88:4d:b4:38:32:67:fe:04:83:4d:b3:38:7d:be:e7:
                    b0:ed:82:ab:e5:0c:c1:80:7e:94:4c:bc:db:e8:86:
                    d7:83:84:e7:db:53:84:68:3b:5c:02:9e:1a:5b:b5:
                    25:9e:1a:cc:f4:57:fa:1c:e7:21:dc:6e:8c:a3:3e:
                    37:58:ba:72:cc:e6:be:4f:f4:53:b7:6e:01:7e:fe:
                    aa:5e:32:40:a6:d2:f7:c8:7d:a1:37:f4:fe:37:f3:
                    34:4f:b7:52:53:b2:99:a5:4e:43:54:8f:19:25:1f:
                    13:a1:fb:a1:6f:c9:d4:73:fa:99:3b:e8:c7:48:c1:
                    30:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2F:73:A5:EE:A5:BB:04:1D:2E:CF:C0:4F:68:A9:0D:8B:84:EA:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/c2b92efc-5b5f-3ef0-89e9-c4018d1d6fde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3100::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ee:b9:19:a1:c8:2e:d9:89:d6:ab:d0:bd:b8:73:e9:75:12:
         cb:73:4d:33:05:a2:76:f0:73:78:63:d5:9e:ad:94:09:8d:b1:
         01:07:4a:6f:66:8d:d6:2f:94:3e:03:50:6d:c5:84:90:e0:68:
         1e:b6:20:c6:05:2c:da:2d:8a:0c:0f:3c:f5:2d:73:bd:46:b7:
         90:af:67:9f:41:27:37:c2:f6:14:2e:d0:e8:88:c9:c2:9e:9c:
         29:fd:7a:f4:3b:ed:cd:08:32:f3:e7:a9:fb:3b:e5:97:ae:25:
         5e:cb:eb:ae:40:dc:2f:c6:d2:0f:c1:31:01:3c:23:6b:5f:58:
         8d:b9:c9:70:37:78:35:e4:8e:0f:d4:cb:88:fa:8f:07:27:25:
         f0:46:9c:64:86:b9:c3:4f:15:cb:d1:b4:ea:be:16:16:78:66:
         f0:6c:b4:60:e9:6f:b1:55:a6:f5:8c:fc:79:30:b3:7a:f9:5e:
         3f:ff:fb:d6:ec:40:0a:33:1a:16:34:3f:54:ed:d8:55:c9:b9:
         a3:58:29:a9:24:38:d9:43:f4:d2:0e:77:26:9e:6b:6a:34:f3:
         f4:b2:ab:a7:65:0c:5d:d3:fc:01:28:0f:37:59:74:b7:a6:7b:
         65:54:48:3c:a9:fc:24:6a:9c:30:2a:43:43:62:de:dc:e9:2d:
         49:fc:3a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:38:49 2025 by rpki-client