Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/6287725d-70ea-33ca-9beb-ccbf0e213993.roa
File:                     6287725d-70ea-33ca-9beb-ccbf0e213993.roa (raw, json)
Hash identifier:          E9YUiUISyX8zRgsCOrMoKLMa3dLVeCnUW50kwab90hk=
Subject key identifier:   0E:C9:83:8F:40:27:0B:A2:CF:2C:6E:09:C7:81:1C:68:1E:CD:D4:CA
Certificate issuer:       /CN=e9ba2448-ef35-44cb-836b-3f71ba57a40f
Certificate serial:       010D0C9F4328584950F9656ACF7CCE9A190F3E80
Authority key identifier: FB:2F:B9:30:BA:6A:33:B7:58:B2:F9:D9:38:BB:3C:36:3C:68:96:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/6287725d-70ea-33ca-9beb-ccbf0e213993.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        2602:fb33::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:65:6a:cf:7c:ce:9a:19:0f:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9ba2448-ef35-44cb-836b-3f71ba57a40f
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=04c062a3-58dd-4d56-96c9-6e1968e1c954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bf:07:d1:2f:20:81:65:ca:11:84:89:f5:98:
                    34:27:68:b4:a1:6d:93:d8:60:ce:9b:71:35:8e:99:
                    7b:c4:b6:0c:0e:f5:3e:f6:d5:f2:9b:c9:37:4b:6c:
                    e9:15:f8:15:79:51:09:94:8f:7e:ae:14:bc:37:30:
                    06:87:b2:49:82:bc:6f:a4:6a:11:11:a2:ae:a0:dc:
                    99:18:59:6f:04:70:36:fe:a7:28:32:94:bf:ba:17:
                    63:b2:a9:70:b9:44:1d:3d:73:7b:e0:b9:2d:65:6d:
                    80:9f:7f:7e:01:d9:a1:3d:70:e0:68:31:1d:b1:15:
                    19:6c:93:cb:85:db:57:36:7d:59:ab:69:df:fc:8e:
                    0c:3e:49:b1:db:89:22:44:be:f1:e6:3d:d4:89:03:
                    c3:10:82:3d:e7:02:91:af:7f:84:f3:98:67:60:ee:
                    21:e3:28:16:60:27:6f:e5:37:70:80:49:c6:fd:4f:
                    5b:e4:f8:60:0b:67:d1:0c:3b:5f:28:eb:d9:8f:7f:
                    6a:77:4e:01:90:fd:73:56:db:29:03:87:10:90:4c:
                    0d:e9:fa:b4:07:da:6d:ed:4b:a0:b1:f5:3a:f4:11:
                    9a:2f:51:2e:14:c2:42:80:1f:0c:3d:8a:de:7b:3f:
                    61:16:3c:6e:30:af:72:6b:4f:88:d8:60:ce:25:fe:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C9:83:8F:40:27:0B:A2:CF:2C:6E:09:C7:81:1C:68:1E:CD:D4:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/6287725d-70ea-33ca-9beb-ccbf0e213993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f/e9ba2448-ef35-44cb-836b-3f71ba57a40f.crl

            X509v3 Authority Key Identifier:
                keyid:FB:2F:B9:30:BA:6A:33:B7:58:B2:F9:D9:38:BB:3C:36:3C:68:96:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e9ba2448-ef35-44cb-836b-3f71ba57a40f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb33::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:e9:15:12:11:a9:5f:03:14:2a:bc:e0:45:fc:fb:dd:41:31:
         22:13:a1:6d:fd:ff:b5:80:06:ad:97:b8:5d:46:a8:b6:0c:60:
         4e:a0:10:5e:02:80:30:5a:d8:0c:ff:db:42:f8:d0:0c:9d:18:
         9b:21:5d:40:af:23:1f:6f:b8:46:15:56:85:2b:ba:a2:66:a5:
         af:ca:aa:b1:b1:8b:7f:75:17:0c:e9:c8:4a:f7:ac:55:4e:16:
         6a:73:bd:f1:93:f8:f2:d3:4d:38:cb:fd:ca:f3:52:c6:ea:92:
         7c:5f:b2:df:97:96:6d:f6:79:21:33:78:0b:98:12:67:28:e9:
         5e:7a:12:9b:60:78:33:e5:e6:0c:15:6e:bb:c2:5c:e5:12:5d:
         ad:4a:ce:39:9d:28:c4:b2:58:a0:b9:9c:77:f8:a4:bc:7e:e8:
         8a:aa:39:cb:2b:9d:46:47:18:c7:3d:28:3c:85:87:a6:4a:3f:
         1d:93:e2:4d:24:f7:fe:0c:af:58:ff:ea:0b:0f:54:21:e8:e5:
         35:ef:10:32:4d:aa:7f:85:4f:d4:ed:d4:54:c0:9e:e9:17:f1:
         a3:79:46:73:6e:63:44:59:f8:00:3f:7f:d5:36:10:4e:1a:a1:
         55:3d:36:66:f3:da:9e:7e:8e:d2:cd:5b:f1:be:f2:0f:1b:ca:
         1f:ba:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:00:23 2025 by rpki-client