Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/c7f81528-d3f7-3184-87f0-d2670a835419.roa
File:                     c7f81528-d3f7-3184-87f0-d2670a835419.roa (raw, json)
Hash identifier:          3LLtgu1v3B0kt+QwDpapsPRXdN1QmdMyje7eJ8Co7fM=
Subject key identifier:   98:AF:A9:EB:A1:BB:48:51:D9:60:F8:23:D2:0F:B9:3D:A0:27:13:F5
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F43285849A4BA4AA405D4E19FB3C6D500
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/c7f81528-d3f7-3184-87f0-d2670a835419.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     21538
IP address blocks:        2602:fc30:a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4a:a4:05:d4:e1:9f:b3:c6:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=e0023dd7-3fd9-4bab-8209-ca0da92604d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:53:b0:1d:82:fe:58:88:6d:e9:44:fc:24:61:
                    6e:af:66:ab:cd:5e:f9:b1:0e:01:03:ce:4e:c7:07:
                    8c:2c:e2:ec:17:0c:58:ba:a6:55:74:8f:98:2a:5f:
                    a2:c5:48:a7:41:06:b7:52:1e:2c:db:fd:52:2c:9d:
                    c4:c7:f7:cb:e2:91:13:a1:62:75:90:44:a4:8f:7c:
                    d4:35:31:4d:4f:e6:85:cb:96:f7:f4:48:9e:9d:cb:
                    91:54:ba:c2:74:3d:7e:13:98:35:e3:d4:e2:2e:ff:
                    1d:71:4c:9b:a6:91:37:c0:3b:7d:22:70:cf:7c:70:
                    0e:7d:70:ff:bf:52:a1:15:00:13:ae:b6:2d:00:1f:
                    5e:74:7a:14:f2:e6:90:4b:8c:79:25:37:09:cf:e4:
                    e0:f4:44:a3:79:1f:1d:89:53:a9:6e:d3:9a:bb:a1:
                    42:56:db:b8:26:ac:7f:98:21:06:b6:4e:36:ee:31:
                    38:62:08:40:b3:86:5c:96:1d:de:92:67:2f:70:6a:
                    8e:fd:7c:d0:49:b2:a3:6c:95:6b:a0:4a:d2:0d:11:
                    4f:25:93:0e:ed:b7:d7:45:d7:23:36:c8:68:23:04:
                    d6:8e:63:d0:63:ad:36:45:b3:c2:67:af:83:82:32:
                    a4:89:83:e5:2a:09:11:3c:fb:20:35:88:44:0a:c7:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AF:A9:EB:A1:BB:48:51:D9:60:F8:23:D2:0F:B9:3D:A0:27:13:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/c7f81528-d3f7-3184-87f0-d2670a835419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc30:a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:0f:31:61:53:e0:87:98:e5:94:2d:fd:4a:ef:e2:d0:50:9f:
         81:9d:4d:4d:32:94:fb:6d:50:84:c2:17:78:39:81:f4:f6:44:
         af:3b:04:dc:20:97:33:88:e8:11:24:4b:a9:bc:4e:7a:d5:cd:
         94:4b:61:58:9d:7a:7f:8b:85:f6:86:1a:4e:8e:5b:d5:57:a6:
         e6:15:93:e2:6b:9b:cf:d6:82:ee:3c:b6:83:b0:ad:67:28:53:
         bb:2d:3f:3c:ed:d1:14:77:ae:c1:23:b6:0e:13:57:00:06:3a:
         1a:82:f5:16:bb:e6:d2:5c:90:1c:1c:54:a2:14:b3:d2:6d:20:
         2b:00:78:3d:99:74:bf:8e:f7:80:d6:2f:41:63:bb:4e:77:be:
         ec:14:26:bf:1f:03:60:07:e6:dd:25:dc:6d:fe:0f:70:e5:5e:
         d3:5a:7b:7d:40:d4:cb:32:eb:c6:62:f5:10:5b:4c:aa:4b:16:
         0c:f1:7f:e6:6e:b5:13:05:aa:73:83:35:49:e4:f8:d9:ed:4b:
         1d:c0:8d:37:24:a7:24:51:10:1a:1a:07:6f:ef:2f:c2:3c:3f:
         50:b6:b1:64:7d:6f:9d:93:c1:3d:de:7d:10:65:c7:64:f8:0b:
         00:eb:89:c5:c1:e2:82:f6:c9:a2:f2:85:85:d1:13:b9:f4:af:
         ca:2a:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:50:48 2025 by rpki-client