Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/2267296e-7e5c-3dad-9bcb-b73e0454bb7f.roa
File:                     2267296e-7e5c-3dad-9bcb-b73e0454bb7f.roa (raw, json)
Hash identifier:          oStE1Liq5c7ME0k8rdGP0tY8CzcpH/Mi2zkz4G1vhOk=
Subject key identifier:   E0:06:B7:00:B7:C4:75:82:C6:5C:DE:C4:E0:D4:C8:97:22:92:B3:94
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584986046AA019C8A30FDA0B3260
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/2267296e-7e5c-3dad-9bcb-b73e0454bb7f.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     198949
IP address blocks:        2602:281::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:6a:a0:19:c8:a3:0f:da:0b:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=5d712335-645f-4cba-8369-b7ca59a00780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:03:b1:6a:00:91:18:ce:fe:08:84:a5:52:cb:
                    bb:23:70:5c:24:76:94:8c:33:1a:f1:a6:2f:98:ec:
                    e0:24:4b:b8:38:09:49:37:28:9e:bd:2e:ef:5b:a2:
                    39:40:5f:c6:6c:b8:16:01:f3:d7:e2:25:b7:3c:12:
                    1c:00:bc:75:3c:32:21:ca:81:0d:f0:e4:3e:c7:51:
                    51:3f:b9:54:0d:3e:9e:c7:42:b0:00:8f:e6:02:5c:
                    5c:b6:b5:51:65:9c:a2:b2:f3:18:57:16:af:be:57:
                    8e:6b:9f:d0:64:41:94:af:1c:42:84:cb:c8:44:48:
                    3f:52:c2:8e:55:42:29:7e:98:f7:81:1b:39:46:e1:
                    cf:02:12:a3:08:b0:50:ce:73:b2:0d:4f:fd:5e:3b:
                    91:f2:c6:2d:5b:f7:82:1d:7d:e0:aa:b9:55:ee:e5:
                    b3:b6:3d:a4:65:a6:7d:02:36:dd:1e:d1:64:c2:cc:
                    26:8d:2b:e4:cd:17:f9:e8:50:f8:8f:4e:85:0d:da:
                    47:eb:e4:65:dc:d4:bd:49:cc:2d:34:2e:20:11:08:
                    6d:d4:5a:27:ab:48:ac:ce:da:a2:32:21:8d:40:3b:
                    fa:ee:4a:be:b7:04:aa:9e:6c:d9:1b:81:14:30:fd:
                    5d:6a:33:90:e8:a5:e4:de:65:69:aa:87:0f:09:16:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:06:B7:00:B7:C4:75:82:C6:5C:DE:C4:E0:D4:C8:97:22:92:B3:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/2267296e-7e5c-3dad-9bcb-b73e0454bb7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:281::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f1:f5:8a:cf:92:53:46:0d:90:eb:a7:82:15:44:f3:03:5e:
         77:dc:f4:f5:67:af:97:c4:82:5c:ad:cc:ea:8d:39:d5:db:ed:
         59:0a:07:8c:45:0b:cf:bc:a8:e0:b6:b1:08:31:76:a4:ab:6d:
         10:a0:5b:91:34:aa:73:e4:61:eb:20:66:cc:49:96:e9:4d:b2:
         e2:61:43:7b:4e:38:07:eb:37:21:cb:4e:04:d8:74:89:72:09:
         fd:26:d5:8a:f8:73:50:15:e9:45:27:8e:90:69:30:df:14:25:
         13:55:1b:a9:0d:e2:23:09:d9:33:ff:2d:69:08:57:91:32:fb:
         17:86:b5:1b:b1:ad:da:23:b4:75:d5:48:12:1e:73:51:6f:5b:
         b5:4b:bc:b3:e4:9b:68:59:d3:8e:99:ec:15:cb:fe:eb:9b:ac:
         e7:02:ae:25:37:fb:e1:5e:bc:0e:51:80:30:36:b0:26:57:7d:
         70:e4:77:bc:5f:2d:2f:79:6e:80:fa:0c:94:8f:96:2c:81:58:
         23:da:fb:fd:b6:a8:57:07:f7:68:df:ea:af:86:63:80:83:4b:
         e5:c1:f5:8f:5f:49:9b:75:9d:f3:c5:bb:2e:68:cf:51:6a:e6:
         0c:02:eb:34:62:7f:c3:c0:d1:0b:70:78:fa:99:ef:f6:ae:3b:
         b9:22:c4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:14:57 2025 by rpki-client