Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/09453429-2584-3592-aacb-71f41ee9d1ed.roa
File:                     09453429-2584-3592-aacb-71f41ee9d1ed.roa (raw, json)
Hash identifier:          i5opvg5CR8xarT6TwXBU+CFmq5vbiS4WK/fjFPNP2K0=
Subject key identifier:   F5:E9:8A:B5:A3:6B:BF:31:49:F7:16:C2:EC:3A:70:38:58:18:BF:B2
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F43285849A61F493F7300A6FD8F961180
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/09453429-2584-3592-aacb-71f41ee9d1ed.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     13627
IP address blocks:        2602:fba3:301::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:49:3f:73:00:a6:fd:8f:96:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=b7eed695-c16b-48b5-aa57-24a5e4dcc7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d8:93:60:14:3b:d3:59:68:64:33:a8:2a:51:
                    ba:6d:6d:86:eb:02:48:75:b7:23:a8:bb:de:4b:46:
                    52:3f:a4:c0:11:06:f4:40:49:2b:1d:7f:29:0c:04:
                    d7:fb:76:7a:cc:4e:bd:f5:64:44:1f:a9:ae:4e:23:
                    6e:3e:14:b3:ca:57:0c:3b:95:56:84:91:cf:16:81:
                    03:10:89:db:9f:9b:06:54:f4:d9:2d:53:a2:bf:de:
                    52:27:e5:13:f8:2b:7d:43:ac:3e:16:9e:4b:4c:37:
                    fa:4b:6f:16:33:0c:d4:88:01:c7:11:fe:be:39:f3:
                    83:90:b7:db:51:b4:e8:f9:97:bc:c3:3f:94:9a:28:
                    37:ea:2c:38:e4:74:75:45:b2:f3:41:fc:d0:c6:14:
                    c3:d5:e5:f8:4b:5f:21:2b:dd:2d:24:16:85:e5:fb:
                    25:f5:30:14:bd:2a:bc:d8:50:86:37:05:55:14:9e:
                    0b:a3:42:bb:dc:3a:d8:df:d4:a9:ce:ab:c7:05:23:
                    85:49:27:aa:01:9e:a4:b3:40:ad:4e:50:cc:d7:85:
                    51:57:bc:45:8a:ad:c4:91:e4:a4:0b:02:fc:8e:3d:
                    bd:c8:f5:08:85:39:7f:b9:4c:82:c4:1c:f6:39:ad:
                    37:ea:68:1d:26:4d:0b:5b:b5:d4:1e:17:8d:18:e3:
                    c5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E9:8A:B5:A3:6B:BF:31:49:F7:16:C2:EC:3A:70:38:58:18:BF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/09453429-2584-3592-aacb-71f41ee9d1ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3:301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:17:38:01:f4:4c:e9:7a:37:49:63:6e:c4:13:40:92:d6:
         52:ba:3c:c7:a9:46:e2:ae:92:57:7a:96:65:60:9b:b6:8e:70:
         e6:03:c7:5b:52:73:70:b2:d6:1f:6e:84:79:28:a0:06:04:f2:
         0f:74:f3:11:03:e8:a8:dd:ef:c1:a6:8a:55:93:16:65:62:46:
         ed:91:2a:20:c2:52:4c:80:74:db:e6:cf:da:73:dd:34:28:73:
         06:82:8c:c7:5d:6a:8a:08:0a:25:c8:c7:37:6c:41:d0:b4:44:
         48:2f:bf:eb:59:7a:7c:ed:66:e3:8e:2e:78:75:5f:b2:51:87:
         dc:00:54:cb:46:7e:b2:b4:7a:f4:d1:1c:76:51:e6:75:e4:09:
         b9:bc:ee:db:35:4b:8d:e2:8e:3c:bf:c5:b4:06:e7:d3:43:15:
         e8:77:5a:9d:04:1a:cd:48:c3:35:9e:09:fc:e2:f4:f5:b0:b2:
         62:3a:87:4b:35:a7:bf:e5:ea:3d:60:89:e8:97:02:16:24:d9:
         38:bb:ca:e3:95:8e:f4:2f:61:aa:2e:97:63:78:1c:76:e0:5e:
         17:11:7c:a9:e9:db:2e:a0:24:11:75:8e:fd:c0:01:a7:a8:8e:
         cc:d5:38:e7:81:3e:4a:57:d4:0d:62:99:ec:05:45:a5:0b:c1:
         4e:bf:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:15:22 2025 by rpki-client