Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/01bb21ca-d25d-347c-bb2a-6f82d02ab8fb.roa
File:                     01bb21ca-d25d-347c-bb2a-6f82d02ab8fb.roa (raw, json)
Hash identifier:          WSwVOS/QPac0SXcW3AHtPYGFAhZxvzFWvfEzd5YX1N8=
Subject key identifier:   18:37:0B:7A:CD:7B:B2:BD:DC:03:0E:3C:80:21:F7:82:0D:DB:30:9B
Certificate issuer:       /CN=ae746161-70fc-4a1b-8327-03cf4ca58ca9
Certificate serial:       010D0C9F4328584A119AB6BCFB80F374D1DC8880
Authority key identifier: EB:8F:89:E5:45:92:F6:EE:B0:91:05:C5:9A:DE:02:68:CF:A7:26:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/01bb21ca-d25d-347c-bb2a-6f82d02ab8fb.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     25728
IP address blocks:        2620:27:40c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/ae746161-70fc-4a1b-8327-03cf4ca58ca9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/ae746161-70fc-4a1b-8327-03cf4ca58ca9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b6:bc:fb:80:f3:74:d1:dc:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae746161-70fc-4a1b-8327-03cf4ca58ca9
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=e73b0dde-193a-4fc1-8f73-c176528294f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:c7:ea:4d:7a:92:49:f9:2f:4f:b7:59:87:
                    c6:b6:bd:aa:1e:71:de:6b:6e:66:ac:13:a8:3a:39:
                    1e:a8:29:36:3f:9d:00:25:39:59:4e:04:e8:8e:75:
                    e3:f0:37:2a:9d:2d:dc:e3:b9:f9:f8:4c:e2:9d:64:
                    25:97:14:de:6e:6d:d5:7a:5d:a3:40:3e:7e:15:b1:
                    14:95:3d:73:5c:68:02:8d:7a:a2:16:90:0e:9b:66:
                    af:cc:2c:60:ea:00:ca:78:63:62:fe:da:50:09:2c:
                    69:1c:5d:25:65:f0:c3:57:d3:80:14:47:c6:28:0f:
                    55:b7:67:6d:81:64:d1:90:47:e2:de:c7:38:6c:c7:
                    6c:7b:3f:de:0e:3f:48:e8:8e:16:16:d6:38:b4:fb:
                    74:bf:cc:7a:b6:e2:0b:ad:e4:84:9d:40:62:e3:cb:
                    1a:fd:79:e6:e3:50:c5:bc:8f:61:f2:3c:ed:f9:04:
                    04:7f:61:c6:a7:3e:e6:98:2d:3b:00:0e:a5:77:f3:
                    ba:8f:5a:2a:56:71:b7:81:42:db:94:33:e8:05:e6:
                    97:1f:d1:72:cd:64:2b:cb:fb:c6:85:6b:de:11:7d:
                    84:e6:eb:d6:a3:3c:1a:db:48:92:77:6a:d6:52:57:
                    36:d7:59:54:98:a1:95:36:ee:ac:48:35:4f:30:aa:
                    b2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:37:0B:7A:CD:7B:B2:BD:DC:03:0E:3C:80:21:F7:82:0D:DB:30:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/01bb21ca-d25d-347c-bb2a-6f82d02ab8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9/ae746161-70fc-4a1b-8327-03cf4ca58ca9.crl

            X509v3 Authority Key Identifier:
                keyid:EB:8F:89:E5:45:92:F6:EE:B0:91:05:C5:9A:DE:02:68:CF:A7:26:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ae746161-70fc-4a1b-8327-03cf4ca58ca9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:27:40c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:a7:9f:f3:11:f8:48:30:ea:d8:23:2b:72:c6:55:f5:90:
         48:30:fc:a7:1f:ec:8a:ae:1c:e6:76:1c:35:0c:04:b6:d0:ed:
         f0:c8:7b:a5:7d:e9:80:81:ad:41:99:18:8a:ed:bb:1c:92:45:
         1b:37:2c:b5:41:c7:b8:c7:66:09:2e:c3:ae:18:b7:5d:41:5c:
         8b:f3:10:e3:24:78:f6:b3:fc:e1:87:69:b8:82:31:f2:aa:fc:
         6a:fc:c1:d6:71:f5:7b:c1:a8:10:2c:b6:e2:9f:41:3f:01:46:
         84:eb:ef:8d:55:1e:cf:34:e2:55:97:0f:7c:03:ee:57:1f:d9:
         e3:da:b5:e6:d2:48:6c:81:30:9c:11:5a:78:5f:0b:ab:c2:e8:
         50:e8:93:67:e4:f0:f2:44:0b:a5:0d:bd:c9:e3:74:28:46:b5:
         16:7f:b5:24:e2:a6:7c:65:ee:40:ac:b4:3a:90:e0:4e:57:59:
         e1:9e:dd:da:ad:dc:24:ad:9d:cb:e1:34:12:02:0b:3a:ae:52:
         30:2d:5f:ee:ed:8a:66:80:fd:28:ad:d1:f3:62:35:0d:b4:28:
         9b:5b:a0:38:59:d2:ff:00:0c:e5:29:ee:15:63:41:d4:ba:a1:
         51:92:51:6f:0d:94:0a:9a:26:2a:76:f6:73:59:b8:fc:ba:ed:
         0e:3c:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:57:29 2025 by rpki-client