Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/37af2310-315e-3e37-9b20-11ef24b51fb4.roa
File:                     37af2310-315e-3e37-9b20-11ef24b51fb4.roa (raw, json)
Hash identifier:          M9GiXx/M8Y/e6J/DqUgjSq/A0I+2/n3g8b+yHU7BpkE=
Subject key identifier:   C8:47:31:6A:8A:CA:8A:83:7C:5A:B3:07:BC:0C:CA:D2:0C:68:39:96
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584986046B30E088F56A23003A80
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/37af2310-315e-3e37-9b20-11ef24b51fb4.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     198949
IP address blocks:        2602:284::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:6b:30:e0:88:f5:6a:23:00:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=c6b16ca0-e8a7-47bf-a0e0-26a6fa535b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6c:08:f4:91:71:04:01:65:20:dc:d6:31:43:
                    53:54:43:61:8c:34:f4:d9:27:36:9d:1d:10:73:b6:
                    36:72:0a:f8:12:2f:53:c1:43:78:12:63:fd:41:76:
                    de:41:10:bc:fb:eb:9f:63:af:c8:5a:9f:7d:46:49:
                    b4:6e:1b:ad:ab:85:62:ac:c1:38:45:9c:17:d9:15:
                    c6:c0:a2:e6:72:92:71:cc:f0:fc:21:85:ab:f7:22:
                    17:17:b6:af:2f:65:82:6a:b8:3b:e7:50:8e:52:63:
                    30:11:df:9f:8d:85:2f:1a:ba:a5:4c:eb:4b:5f:25:
                    1b:da:43:04:0a:8c:63:4c:75:7d:69:c2:45:8a:d4:
                    44:49:54:28:86:19:9e:a8:8e:fe:59:d3:f0:43:3b:
                    4a:e1:5f:d0:e3:ef:bd:c9:fe:0e:0a:25:ea:ac:bb:
                    8a:b5:a9:44:38:d1:87:df:88:71:e5:42:3d:4e:5a:
                    84:4e:5a:dc:ae:88:46:ca:a0:4a:32:f3:30:ee:86:
                    7e:2b:6b:59:4a:cd:45:3b:1c:f0:8a:2d:e7:42:35:
                    d9:96:fa:62:4d:d9:4b:7d:0e:36:a0:5f:13:00:a8:
                    39:2c:ec:6f:93:dc:9a:79:dc:81:f6:b7:19:27:22:
                    39:a2:50:eb:17:98:82:f0:79:e6:70:22:d6:ed:7b:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:47:31:6A:8A:CA:8A:83:7C:5A:B3:07:BC:0C:CA:D2:0C:68:39:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/37af2310-315e-3e37-9b20-11ef24b51fb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:284::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:f6:cd:29:1a:7d:91:31:ad:c0:1d:2c:d5:ad:50:e5:29:
         dd:45:4d:f3:69:95:a7:14:85:87:ba:02:dc:4f:fb:3e:7a:f3:
         26:bb:87:84:0d:7a:71:ca:9b:89:84:49:72:ba:f9:a7:3e:bb:
         8d:70:81:2c:47:96:59:5b:71:03:03:26:7b:c9:38:80:bc:ee:
         34:a4:79:a2:6f:d6:9e:7f:8c:9e:80:00:84:35:1d:0b:be:74:
         24:19:8f:48:76:a9:7d:dd:e7:6b:15:4a:04:72:f3:70:1b:41:
         98:0b:c7:77:de:55:49:43:b1:b5:89:14:a1:08:8e:ce:84:81:
         ad:4e:0b:d5:b2:ec:2d:7b:fb:19:db:1d:43:3e:57:b4:2f:64:
         05:19:8b:26:6c:e7:f9:93:44:b5:d4:2a:74:27:0d:e0:6b:76:
         fd:85:88:e5:5d:be:ec:75:80:22:c7:04:de:79:b1:33:e8:70:
         fd:05:99:d3:7c:0b:99:20:2d:fc:cb:b5:0b:e8:24:3e:21:0b:
         fd:f4:8d:12:78:19:fc:e6:1e:b1:0d:04:87:85:67:d3:1b:10:
         1a:56:d6:d2:f9:40:70:a4:b4:3b:de:38:cc:fe:ab:86:2f:af:
         6c:00:8d:5f:8b:88:12:5f:4d:fe:7e:9a:14:60:79:50:aa:eb:
         6b:e3:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:31 2025 by rpki-client