Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/21214490-ba7a-3258-9590-6f9f34a28301.roa
File:                     21214490-ba7a-3258-9590-6f9f34a28301.roa (raw, json)
Hash identifier:          HLnhmRnJFF/zUJ3Uhik3VsfSPbPH9sZyu+MD+FL8ZNw=
Subject key identifier:   12:F8:13:B0:18:24:3C:CF:F3:9D:5B:CD:C3:BD:C6:84:93:04:30:22
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F43285849E91FAA4EBC999EB88AC07760
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/21214490-ba7a-3258-9590-6f9f34a28301.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     46427
IP address blocks:        2602:2c1:388::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:aa:4e:bc:99:9e:b8:8a:c0:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=5426c949-bb01-4e2f-b9c7-c05ce14c525a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:0d:3c:08:c4:9e:e0:41:22:9b:69:ab:d0:
                    c1:c5:85:07:ae:b4:eb:45:22:46:c9:9b:02:8f:2a:
                    e1:e8:9f:c9:da:3b:49:7f:fc:3d:69:43:fa:1b:f5:
                    a8:f6:b2:e3:97:13:32:29:cb:b9:ec:85:67:0c:eb:
                    b9:66:a5:9a:44:5a:18:50:2f:b5:91:01:27:e1:50:
                    86:6b:fe:68:dc:65:69:84:ff:a9:d8:b5:63:75:3f:
                    6a:28:44:15:84:0e:74:67:b8:67:10:16:af:50:d9:
                    aa:d1:d4:a5:99:f5:56:cc:04:99:9d:4a:38:0f:66:
                    6c:36:8f:aa:f0:af:9d:f6:18:a0:51:db:3f:18:e5:
                    7a:c7:13:16:86:30:82:de:65:d1:c5:07:b4:2c:f3:
                    d6:49:91:61:cd:b5:29:b4:05:e4:89:46:66:50:c0:
                    b2:23:69:c4:c9:01:28:b9:46:a3:c4:ed:3c:af:d8:
                    e3:66:9d:90:ad:ed:da:67:8f:08:2f:70:78:ce:41:
                    0d:f7:7c:c5:f8:35:b7:e2:dc:11:db:43:97:b7:c0:
                    93:d7:c5:cb:06:d2:2d:eb:0e:9e:7d:a4:23:dd:ef:
                    18:ec:a5:fc:97:6c:95:cf:40:95:d6:2f:6c:94:89:
                    e6:af:fd:09:c9:90:ac:e6:2d:96:ec:b0:8c:4b:b0:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F8:13:B0:18:24:3C:CF:F3:9D:5B:CD:C3:BD:C6:84:93:04:30:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/21214490-ba7a-3258-9590-6f9f34a28301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c1:388::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:8a:d2:b0:7f:03:1d:b0:28:38:f5:11:e3:3f:2b:46:31:b8:
         88:7a:8f:8c:d5:b4:9d:a4:10:6f:5c:67:20:e3:7a:78:f4:68:
         23:19:c4:85:f5:b7:56:7a:76:4b:6a:5a:3d:60:2c:57:94:10:
         2d:17:dd:08:1d:66:13:91:92:06:43:58:05:d9:95:1b:5b:7c:
         4b:14:bb:16:89:eb:f2:78:d4:97:6b:ff:a0:14:ee:59:7d:94:
         1d:25:53:1f:26:99:a8:92:2b:d4:98:05:96:0a:d5:22:5c:7a:
         2d:af:4b:3f:c2:61:6b:9f:8c:a8:9d:1a:5c:45:3b:e4:20:e3:
         56:53:5a:67:03:47:95:7b:9d:33:60:91:06:fe:10:7e:bf:a2:
         aa:34:49:a3:96:96:79:25:01:46:88:e1:4c:12:22:5f:91:0b:
         e0:cb:f6:b4:49:45:37:b7:e1:df:52:cd:df:49:c6:bb:03:03:
         49:37:b0:55:e9:62:5d:91:38:6d:8c:ac:c4:f6:ec:dc:8a:bf:
         86:75:36:d6:4a:ec:fa:4a:a1:3a:e5:59:28:c2:92:d9:a9:43:
         87:58:0c:39:1d:a4:fd:5f:4b:4a:20:d1:11:93:ab:91:81:41:
         f0:50:9c:a9:45:f0:ac:7d:12:ca:e0:9c:59:82:32:75:54:6b:
         04:1d:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:05:44 2025 by rpki-client