Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/e9b4c1fc-8126-3b09-b648-9cce0b1845fc.roa
File:                     e9b4c1fc-8126-3b09-b648-9cce0b1845fc.roa (raw, json)
Hash identifier:          MEfVjCzCf9nMpDU9KnWNFAqGrDaXkefUrMbtquU0u3M=
Subject key identifier:   F8:70:8A:CD:F7:49:DB:D3:D4:30:01:21:13:8C:AF:4E:D5:DB:7E:A3
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F43285849DDB1F78D70EBBFD98F49CC80
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/e9b4c1fc-8126-3b09-b648-9cce0b1845fc.roa
Signing time:             Thu 15 May 2025 22:46:03 +0000
ROA not before:           Thu 15 May 2025 22:46:03 +0000
ROA not after:            Wed 13 Aug 2025 22:46:03 +0000
asID:                     16509
IP address blocks:        2601:5000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dd:b1:f7:8d:70:eb:bf:d9:8f:49:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: May 15 22:46:03 2025 GMT
            Not After : Aug 13 22:46:03 2025 GMT
        Subject: CN=592b2db0-8e73-4386-ae03-78436bae4c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:d5:8d:71:80:db:0f:c5:6c:40:11:69:c5:
                    7c:8c:6c:44:4d:f7:c6:e7:ba:91:4a:6d:c9:1e:38:
                    44:fe:44:0b:60:f5:82:98:bf:f9:ae:f5:2a:3b:63:
                    9d:ef:1d:3b:34:76:2c:08:f6:61:56:08:a0:af:21:
                    8e:11:41:bd:70:5f:fd:31:7d:1d:fe:87:f7:de:41:
                    d6:88:f0:74:74:ad:4c:12:5c:cf:7c:3d:87:ea:f6:
                    70:88:26:58:66:2c:74:5c:63:67:ae:78:a9:3a:0b:
                    0e:b0:64:44:0e:38:12:ed:20:05:6c:f6:96:e5:2a:
                    57:58:70:53:73:4b:83:29:62:11:25:d8:00:51:db:
                    f6:e7:46:ef:07:97:bc:60:89:26:fa:69:ab:90:1d:
                    3f:ae:cf:65:40:0f:08:a6:3a:46:a2:32:c4:10:bc:
                    79:95:87:8f:d7:01:3e:17:d6:2b:48:c7:36:57:24:
                    29:a0:67:c3:fe:c4:10:16:15:1e:30:21:79:29:34:
                    9b:f1:21:2d:f6:07:69:57:12:b9:ed:b1:36:a2:a6:
                    22:01:ba:01:08:79:a5:19:dd:ac:66:6f:41:28:fe:
                    fd:3f:f1:38:cb:47:16:c2:86:69:ab:93:f9:7f:32:
                    7c:21:ba:de:40:aa:a0:a3:e3:83:41:87:11:e2:ae:
                    ba:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:70:8A:CD:F7:49:DB:D3:D4:30:01:21:13:8C:AF:4E:D5:DB:7E:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/e9b4c1fc-8126-3b09-b648-9cce0b1845fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:8d:08:4b:78:12:c8:51:62:22:e3:84:c3:f3:74:f6:c2:06:
         3b:73:32:f4:2a:37:29:63:a8:6a:b6:10:24:5c:0e:79:86:df:
         41:7e:00:e5:84:ba:be:46:a1:0a:b7:de:21:d6:52:f0:bb:5a:
         cd:82:8a:2e:7a:ee:c2:61:99:a7:ff:a8:31:a3:0e:28:35:ea:
         55:17:03:fc:12:52:e9:ed:21:b7:45:b9:94:15:85:cc:af:1d:
         a4:a6:1c:8a:aa:a3:78:f0:63:9f:c1:4e:9f:53:f8:b9:c0:87:
         b1:ca:2c:1b:e9:42:3d:76:13:e4:b0:48:99:a0:3c:7d:3c:6f:
         d6:20:f9:9d:50:b2:3a:11:7a:dc:98:29:70:77:e6:67:9e:bf:
         2a:27:6e:4d:b2:8c:bb:f0:5a:06:dd:35:6c:77:74:b8:03:c0:
         b4:6d:94:5a:01:8b:ec:1b:3a:6d:11:e0:cd:45:9c:35:d6:c0:
         25:38:00:2b:0b:1d:a6:11:34:b4:a9:2e:34:7b:ee:bf:7a:bf:
         e7:22:76:68:60:33:86:46:d3:0b:64:da:a3:f7:05:43:7b:79:
         66:da:22:34:70:51:42:90:33:b5:48:0a:11:46:b4:cd:14:6a:
         e6:86:8d:dd:02:8f:5f:45:f5:9e:49:b5:24:e0:e9:52:0e:a6:
         57:3f:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:38:22 2025 by rpki-client