Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa
File:                     edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa (raw, json)
Hash identifier:          8gY7yZvIVZ6rKpqoRYE102ffyH5VLEgSjafBvTffBH4=
Subject key identifier:   97:58:A5:22:19:AD:AA:B3:87:95:E2:04:45:4E:AC:68:90:8E:FC:64
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849A4BAD911BDF78A3FCE599D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        2620:15c::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:d9:11:bd:f7:8a:3f:ce:59:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=2d665663-b9e9-4cad-a74f-dd01d755532a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:97:01:a2:3b:61:bb:a8:ba:12:30:d8:ba:
                    04:6e:92:a5:f1:95:5b:fe:6a:dd:c0:4f:e7:d1:5b:
                    d1:6d:a6:25:b8:b7:60:cb:dc:22:c5:a1:db:90:b9:
                    d2:75:5a:7a:cd:6f:a4:92:86:c0:95:62:a1:eb:a9:
                    56:5d:63:67:eb:1a:76:fd:e1:44:72:57:3e:cf:5e:
                    b1:40:24:38:3c:9c:37:a4:0d:4f:99:3b:c4:b2:cc:
                    8e:e3:72:8e:07:46:45:48:9c:4a:f9:2e:ed:8e:3f:
                    02:12:e3:64:56:1a:c1:03:65:76:32:3c:ba:62:fd:
                    c5:5f:c6:98:a9:d7:86:27:0e:26:61:c5:35:88:59:
                    98:1e:f4:9c:00:c9:08:61:7b:3d:43:3c:bd:e9:19:
                    c8:c3:01:9b:45:7b:58:f1:e4:ce:d3:e0:71:1a:f4:
                    f5:15:e0:c4:f2:83:3d:c6:ed:3d:8e:07:8d:06:4c:
                    80:9f:4b:79:54:fa:1c:83:07:b4:5e:53:f1:29:51:
                    21:38:00:9b:85:26:9c:af:02:8b:3f:53:98:7e:70:
                    63:53:9d:83:c9:56:bb:b6:77:a8:0f:e9:1c:03:47:
                    57:c7:6b:9f:29:13:9c:e8:3d:e9:c5:83:58:f8:2a:
                    9f:fa:36:4d:af:62:15:d9:6f:45:12:04:d4:4d:76:
                    cf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:58:A5:22:19:AD:AA:B3:87:95:E2:04:45:4E:AC:68:90:8E:FC:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/edd91d7d-a81c-3e4a-b9d2-82fe6ed0c4b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:15c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:72:81:7c:16:d5:d2:29:2e:ac:cd:3b:8e:d0:4a:03:44:83:
         6f:54:05:08:9f:16:f4:f4:85:7d:15:ee:29:c8:75:dc:7b:1f:
         8a:58:d8:03:e1:a7:9e:b2:b5:ea:78:08:ef:44:3e:1a:65:a8:
         58:49:06:0c:e5:a3:94:6e:1c:6b:5d:cf:ad:a7:7f:a2:c4:25:
         20:00:75:0d:3f:a5:8e:cd:3e:5c:0a:f0:6a:a0:ce:23:21:a8:
         af:19:ea:e8:8d:1d:de:c9:2a:57:c0:3c:12:b4:ea:4d:34:2f:
         dc:81:25:65:e6:3c:f9:eb:69:a6:f1:0e:67:7f:05:e2:31:e7:
         a1:3c:54:73:30:e3:da:f1:d3:8e:1b:89:28:e2:82:e5:c4:d0:
         dc:a7:85:51:2d:20:67:8b:fb:a7:0b:c6:da:ad:de:d8:c1:da:
         64:d5:81:08:f1:2d:5d:69:4b:50:3a:1f:5e:75:51:bd:9a:ef:
         98:8f:fb:46:7b:db:f7:a9:78:c2:d5:98:a3:c2:1d:0d:7c:e5:
         d9:f6:89:a1:9d:c7:e0:a0:8a:0a:4a:fe:d6:e7:4d:ec:26:b5:
         63:f1:0f:d0:cd:27:59:59:04:54:af:a5:3f:40:2a:5f:34:60:
         c9:0c:3a:2b:68:b8:38:b0:f6:0b:b9:a1:0d:29:99:74:1c:b9:
         81:d0:40:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:16:28 2025 by rpki-client