Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/b9946d59-d8ec-34d2-a5b0-e2778172690b.roa
File:                     b9946d59-d8ec-34d2-a5b0-e2778172690b.roa (raw, json)
Hash identifier:          X1StM+zGZGETXbGaBphQ93x8dp8qLHGLcid9lZeMtU0=
Subject key identifier:   68:2C:F9:F6:B6:EF:C0:A9:CC:80:52:66:17:10:3D:A9:4C:EA:B9:D7
Certificate issuer:       /CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
Certificate serial:       010D0C9F432858499F249EC3A864143D8F997080
Authority key identifier: 7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/b9946d59-d8ec-34d2-a5b0-e2778172690b.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        2620:ac:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:9e:c3:a8:64:14:3d:8f:99:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=1b7f619a-ea68-447f-9099-940f607c7b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:13:a5:5b:b0:ab:d0:9c:6c:0f:2d:a6:26:
                    42:eb:4a:1d:05:36:5e:2d:e1:27:b4:3d:80:7b:b2:
                    21:46:5f:5b:e1:81:49:ef:f5:59:04:5f:bd:a9:f8:
                    d8:5c:c5:c5:e9:70:6e:ea:b1:ea:43:57:05:3d:3e:
                    ba:7c:17:ac:a0:a9:d1:cf:4d:60:8a:e9:22:51:fa:
                    18:a0:59:7f:7c:ff:99:73:98:91:89:de:d3:3f:e0:
                    7f:c0:12:cc:c6:98:09:3b:52:3d:cc:41:45:7e:4f:
                    6a:69:44:94:b9:89:bd:c4:e4:fa:58:17:2e:e1:94:
                    dc:e8:5c:c5:db:2b:68:ec:f9:51:15:b6:1e:21:aa:
                    e8:8d:5f:15:ab:5a:de:1d:d2:6c:88:fd:b0:79:62:
                    07:1e:7b:db:7c:97:64:b6:4a:e9:a0:33:a4:48:15:
                    2b:ca:2b:12:5d:d8:ce:f2:e6:d0:3e:9f:34:0e:02:
                    77:dc:c9:3d:12:69:37:07:1f:f1:06:13:c8:d0:86:
                    8d:4c:ec:5a:3a:25:68:69:e1:e2:f6:39:b5:10:a3:
                    b7:9d:0c:6f:18:2c:1a:6e:1c:ba:08:db:c3:67:cc:
                    66:a2:1f:66:5b:1c:d6:15:f6:fc:4e:43:b5:ee:53:
                    7c:84:70:2c:ff:44:eb:79:96:69:da:9a:e9:94:c7:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2C:F9:F6:B6:EF:C0:A9:CC:80:52:66:17:10:3D:A9:4C:EA:B9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/b9946d59-d8ec-34d2-a5b0-e2778172690b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl

            X509v3 Authority Key Identifier:
                keyid:7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ac:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:29:66:a2:61:85:c1:bc:26:7b:3f:53:ad:ae:0d:7d:fd:f4:
         30:09:77:3c:09:61:97:11:7f:ee:f3:e7:d8:b2:a5:27:96:01:
         6e:de:75:f4:73:db:53:ce:9f:ce:92:38:42:fc:2a:42:57:91:
         74:dd:c1:7d:07:99:f6:62:4b:d6:05:ac:a8:37:44:fd:bc:38:
         01:d4:a8:ff:c8:32:f4:17:c1:0d:ad:7b:55:b3:22:e6:dd:a7:
         f1:fc:7d:d5:2a:e5:19:52:47:ba:ba:b3:2a:10:bf:a6:1c:b8:
         36:9d:41:22:ed:14:42:0e:43:d8:28:09:c2:8b:76:f6:0e:30:
         01:bf:05:3a:42:4a:45:34:49:13:cc:69:7d:c9:32:50:27:39:
         b9:15:af:31:eb:89:d7:bc:89:7a:a7:23:3a:db:ac:1d:e6:a6:
         5e:97:c8:5c:0e:d3:20:bc:17:2a:e5:f3:25:5c:96:4b:bf:96:
         18:ee:a4:b4:43:de:cd:62:c3:73:c5:65:5e:f4:1a:8c:3e:0b:
         da:b8:6f:e6:ff:b2:02:51:d5:d5:70:0e:0f:e7:ed:2a:3c:9a:
         80:ba:59:2d:69:67:73:21:54:fb:1c:c0:13:08:a1:c9:9c:98:
         b2:24:a8:13:22:21:1d:c8:58:c2:c2:f3:82:a2:1f:bc:0c:26:
         a5:c7:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:40:07 2025 by rpki-client