Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/83ca55ee-24c3-3714-b1ba-0fbc4f34441a.roa
File:                     83ca55ee-24c3-3714-b1ba-0fbc4f34441a.roa (raw, json)
Hash identifier:          NPgmqCN754LfN7zJk6BwS+jOkrcDXG0vFoi10O+NbfY=
Subject key identifier:   7B:FB:CD:26:BF:33:19:1B:3C:59:F4:00:E8:37:25:AA:68:ED:ED:53
Certificate issuer:       /CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
Certificate serial:       010D0C9F43285849C904EF9FF0D3BD4C39A418CC
Authority key identifier: F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/83ca55ee-24c3-3714-b1ba-0fbc4f34441a.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     400013
IP address blocks:        2602:80c:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ef:9f:f0:d3:bd:4c:39:a4:18:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4272c123-bab5-43cb-a3b9-ac162a3b30af
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=67a5e5ee-fd24-4089-ba05-43ed08cb57ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f6:14:5d:e2:71:48:a8:d4:0f:a8:cf:e6:8c:
                    91:c4:7e:85:c4:e2:9c:f8:f1:0f:ad:8e:bf:61:e3:
                    2a:3a:26:01:c1:41:e6:13:d2:c4:01:f5:3e:69:ee:
                    d7:9d:8a:b4:ef:38:b9:eb:0d:25:b9:9a:dd:6b:9c:
                    7f:40:ca:69:79:73:b4:a0:e1:c2:c0:2a:6f:62:08:
                    0f:26:40:ea:6a:e5:29:8d:15:3f:24:a6:25:42:ae:
                    42:b8:55:0f:3e:7a:d3:72:2c:57:62:7c:a6:11:7e:
                    8e:48:dd:7e:86:27:03:30:b2:87:16:9a:9c:7e:b6:
                    d3:cf:5b:e5:d2:8c:40:1a:97:3e:a1:66:11:43:22:
                    09:5c:d9:93:88:86:15:05:9c:66:af:ee:e1:d0:90:
                    b5:90:54:7a:50:f8:6a:c0:2c:63:22:a0:14:09:67:
                    4d:b2:dd:60:7b:f4:6b:ba:47:ae:1d:ad:7a:ac:84:
                    35:a1:4e:7f:c2:8f:86:55:fd:ee:93:67:f3:d7:4b:
                    46:6b:a4:7b:c2:51:a6:b8:64:ce:ee:b5:8f:4c:27:
                    69:fa:c6:0c:26:33:1b:b6:cf:c6:a7:9a:bf:2f:3e:
                    7b:8c:8a:b8:b0:65:6c:fe:42:b1:5c:0b:f2:dc:9d:
                    0f:64:32:8c:cf:72:e8:04:06:3a:51:55:2f:c8:f8:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FB:CD:26:BF:33:19:1B:3C:59:F4:00:E8:37:25:AA:68:ED:ED:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/83ca55ee-24c3-3714-b1ba-0fbc4f34441a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af/4272c123-bab5-43cb-a3b9-ac162a3b30af.crl

            X509v3 Authority Key Identifier:
                keyid:F9:CE:7E:1C:E8:1E:7F:65:34:69:CD:9A:A5:DC:BC:87:38:0B:67:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4272c123-bab5-43cb-a3b9-ac162a3b30af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:40:35:7d:d9:ae:f9:97:3d:d5:00:a1:00:19:a7:21:43:73:
         af:8e:07:13:3f:0a:71:c2:58:96:11:1d:13:c5:a1:e7:d3:f7:
         11:05:a7:30:de:fb:cd:3c:c9:82:fd:28:b8:4b:99:65:0d:44:
         f8:05:2a:a3:7c:1d:ba:16:10:78:5c:81:fd:d2:cf:eb:d4:a9:
         a3:22:38:ff:6a:94:ed:6d:cf:19:26:b8:2f:6f:70:3f:43:69:
         d2:30:e7:99:1f:5d:61:e3:01:ba:64:0f:16:09:3d:51:fb:4d:
         06:f6:d6:4b:6d:26:34:0d:1d:ed:94:11:a2:f5:cb:57:7c:08:
         97:6e:00:73:d6:84:6e:88:c9:73:9b:54:47:05:99:16:51:3d:
         92:e4:48:3c:76:ed:61:80:79:cd:0e:23:13:6b:3b:79:45:ad:
         f5:f9:53:10:f4:0c:67:8b:24:a5:92:ac:61:43:f3:bb:73:db:
         fe:57:5b:f5:eb:48:b6:94:dc:87:e9:ca:9f:18:ba:19:bc:c0:
         51:1b:80:18:6b:90:4c:43:cc:a5:be:db:b1:63:8d:bb:85:11:
         71:fc:b9:00:49:77:6f:d3:2d:c4:86:f9:04:a0:cf:85:e3:3f:
         34:91:5a:9a:70:60:07:ea:0f:50:7c:72:7f:70:ed:2f:ae:cc:
         a9:86:ec:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:46:56 2025 by rpki-client