Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/15a22f1f-b13f-381f-8b3c-4b59841245a7.roa
File:                     15a22f1f-b13f-381f-8b3c-4b59841245a7.roa (raw, json)
Hash identifier:          f2MYR0a7BD11lypSQl75m4ZvWg1DYm3aTg/dMGuBub4=
Subject key identifier:   7C:73:08:A1:91:23:31:11:8A:F7:EC:63:D2:5C:E9:35:3E:06:CF:A1
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285849B24345A1AD0E50D86C7911C0
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/15a22f1f-b13f-381f-8b3c-4b59841245a7.roa
Signing time:             Wed 30 Apr 2025 09:23:15 +0000
ROA not before:           Wed 30 Apr 2025 09:23:15 +0000
ROA not after:            Tue 29 Jul 2025 09:23:15 +0000
asID:                     18526
IP address blocks:        2602:fd6f:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:43:45:a1:ad:0e:50:d8:6c:79:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Apr 30 09:23:15 2025 GMT
            Not After : Jul 29 09:23:15 2025 GMT
        Subject: CN=e8d93b7f-6b7d-46d2-90e2-4e2086907d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:f7:16:ab:58:a2:c6:06:b4:19:fb:c0:42:
                    a2:0b:3d:46:f7:a3:dd:fb:6f:d6:fe:ec:4c:46:18:
                    71:06:08:41:26:14:fc:4c:cb:4f:40:04:62:28:72:
                    ee:13:6d:57:59:50:db:14:14:b2:c3:17:7b:d0:4c:
                    fb:62:69:89:61:48:7d:ea:44:fa:f6:db:7e:99:a0:
                    3b:40:12:f4:2e:18:bb:5a:31:07:f8:c2:c7:c4:58:
                    45:a3:44:1b:95:0e:cb:0b:bf:f5:90:87:97:39:40:
                    a9:73:31:e0:26:99:b6:05:90:86:46:81:8b:76:18:
                    a8:8d:64:67:9f:79:1e:12:04:ab:e6:25:ce:c1:e5:
                    c8:ad:96:6f:6a:e1:ee:36:03:f0:30:2c:55:33:de:
                    6c:ef:0d:8f:83:db:fb:b1:98:1a:aa:46:b2:af:c9:
                    f5:b0:64:7e:f8:b4:78:a4:79:37:52:e7:ac:e6:8c:
                    0a:6a:3c:c1:ff:0f:c9:f5:23:68:83:9c:fb:87:dd:
                    b1:85:38:98:24:5f:0a:3a:09:26:2a:8a:38:b7:2f:
                    31:0d:68:49:de:e2:66:ff:52:21:8b:c5:3c:47:bf:
                    d9:0e:ad:23:8a:af:59:a6:74:ee:25:f1:ed:1a:78:
                    56:43:9f:25:00:1b:cc:75:2f:41:3b:4e:87:2e:2a:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:73:08:A1:91:23:31:11:8A:F7:EC:63:D2:5C:E9:35:3E:06:CF:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/15a22f1f-b13f-381f-8b3c-4b59841245a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e0:62:3a:cd:65:fa:14:cb:8c:93:89:42:49:49:27:db:4d:
         34:17:bf:55:8b:2c:d5:4f:ee:ef:63:6a:49:7c:ee:4a:e0:97:
         85:75:ff:3a:aa:8e:d1:e7:95:c3:41:2d:c9:1d:27:e7:69:dc:
         ff:09:54:e9:36:2d:8c:e2:2c:ba:68:04:e4:59:7e:a4:44:4d:
         88:c1:28:dc:e2:0c:f5:69:44:d9:06:7b:ba:ee:ce:a7:2e:2a:
         33:06:7f:ae:c4:20:b3:9f:9b:17:e3:3b:6b:15:38:d0:77:87:
         a0:5d:3a:66:bb:1a:23:0f:90:1b:79:5d:56:2b:60:15:6d:4d:
         7e:95:bc:9e:ec:99:2c:a3:74:cc:cf:59:3c:39:06:72:c9:e3:
         20:0c:0e:6b:9c:1a:af:b3:7a:1b:a0:b0:1f:5d:15:bf:fa:1b:
         53:6d:22:d0:46:4f:d1:be:49:e5:3d:c7:f1:73:14:ef:86:b3:
         5e:1c:3a:1e:ee:61:76:da:8e:b5:fa:f2:0a:f5:3b:88:a7:7d:
         55:26:b5:ab:e6:9c:4b:4d:19:16:87:26:d4:32:dc:8e:05:15:
         6d:cb:00:9d:81:4a:bc:e3:bf:56:a1:b9:a3:42:4f:e3:ce:f7:
         d7:c2:22:d6:e2:ab:e7:36:fc:c3:23:02:73:40:71:66:bf:76:
         bc:02:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:30:06 2025 by rpki-client