Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/d82e4cb4-f251-37b0-b368-ee1027a7e63b.roa
File:                     d82e4cb4-f251-37b0-b368-ee1027a7e63b.roa (raw, json)
Hash identifier:          kjVjvN+K9O+s3c3TbZWaW6DryiRKdnlW6IgYLbnIGyU=
Subject key identifier:   F1:1C:2E:77:3E:7E:D2:08:84:D0:0D:6E:5B:FB:0F:8A:6C:12:17:65
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285849AE1B519E9CA156FD1C822180
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/d82e4cb4-f251-37b0-b368-ee1027a7e63b.roa
Signing time:             Mon 28 Apr 2025 21:39:31 +0000
ROA not before:           Mon 28 Apr 2025 21:39:31 +0000
ROA not after:            Sun 27 Jul 2025 21:39:31 +0000
asID:                     142046
IP address blocks:        2602:f9a9:c10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:1b:51:9e:9c:a1:56:fd:1c:82:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Apr 28 21:39:31 2025 GMT
            Not After : Jul 27 21:39:31 2025 GMT
        Subject: CN=a7033928-c9b4-43c9-baba-2d90a5f81bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a9:ef:7f:e9:68:fc:f3:8a:50:03:d2:63:85:
                    ef:03:ed:05:b0:d9:60:01:7a:52:1a:28:83:e6:c5:
                    49:01:94:8e:f4:36:82:88:8a:dd:6f:a7:97:ef:78:
                    d9:24:72:4f:43:42:2e:c7:68:e2:07:d1:68:1b:a3:
                    a3:c0:69:0c:b1:c0:20:c5:18:a9:11:8c:06:5c:02:
                    6a:2c:2d:78:c8:49:b7:c8:6b:e5:02:2f:0d:76:4f:
                    85:fd:77:79:fa:70:b3:98:d0:fb:a7:a2:a7:7a:26:
                    f8:ca:8c:78:f8:a5:7a:f0:b2:1b:03:6c:d8:cb:5a:
                    f3:c5:1a:9f:13:55:88:51:52:81:4d:c6:e5:cc:ba:
                    10:ad:dd:76:d9:92:bd:f7:24:24:5a:dd:84:03:38:
                    26:de:61:f1:18:31:ba:dc:b6:65:d2:69:bf:97:53:
                    48:21:da:e5:77:69:12:6d:a1:ee:65:3c:8c:e7:d7:
                    b5:e6:9b:1b:a5:8b:45:74:8a:17:82:de:7b:9b:25:
                    b3:fc:dc:0f:d3:63:46:6d:66:85:ea:2d:ba:de:34:
                    b8:2d:44:e8:15:99:80:9a:a8:96:a2:b5:c6:a6:bb:
                    f9:d2:65:c2:53:9e:ca:fe:9a:e2:91:7d:78:ac:e7:
                    0b:68:4a:80:aa:56:1c:ad:28:c8:d2:0b:7d:3f:94:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1C:2E:77:3E:7E:D2:08:84:D0:0D:6E:5B:FB:0F:8A:6C:12:17:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/d82e4cb4-f251-37b0-b368-ee1027a7e63b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:c10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:bc:19:23:60:35:4e:db:ad:7e:45:2b:55:8f:27:dd:a6:83:
         ef:0a:bf:cd:20:32:6e:de:fa:2a:d5:60:36:d1:24:57:60:36:
         fe:f5:bf:5c:68:85:ec:ac:8f:bb:e4:a9:73:59:83:a3:ce:c3:
         95:e4:05:b3:93:87:a6:29:76:b2:4c:9b:8b:04:a0:31:0f:39:
         6f:c7:09:b9:f5:a5:36:ea:99:ab:70:05:ff:9a:9d:b3:a3:e4:
         07:4a:bd:3a:7e:ee:4f:69:c7:3e:36:45:ab:da:bc:59:58:f2:
         33:d1:a7:65:c5:f5:53:28:af:fd:49:0c:88:b1:57:e8:5f:01:
         14:41:0d:da:fe:54:e9:d0:ca:7b:53:b2:71:97:9a:2c:27:89:
         3e:a2:ee:ec:2a:6e:54:69:28:32:75:51:55:fb:e1:95:cc:af:
         cd:ef:4b:38:bd:8e:c9:5c:5d:ff:0d:cd:02:21:6e:02:61:07:
         83:51:1d:5d:ad:7b:dd:bb:6b:34:c3:1d:ac:f0:74:a1:31:81:
         aa:1d:ea:b9:d1:a3:c6:49:96:f8:70:f5:5a:ad:4b:c6:83:f5:
         6d:19:cb:f6:f1:ec:ca:ef:cd:fe:3e:a7:90:d8:a8:d2:99:85:
         59:65:78:c4:5e:11:6d:ef:ce:e3:12:cd:8c:0b:73:07:ea:a1:
         d5:7a:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:52:53 2025 by rpki-client