Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a1d9f10f-96c7-3a30-9b74-f496be85caae.roa
File:                     a1d9f10f-96c7-3a30-9b74-f496be85caae.roa (raw, json)
Hash identifier:          qXI0GgLz8As4d1mJpIRdfAXGJ5ETtYUg7t3ue4XovTQ=
Subject key identifier:   4E:9A:9B:CB:8F:A1:71:85:9C:F8:C5:33:BE:20:70:99:42:58:28:C6
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858499E8AA31BCE2ECC549EABCD20
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a1d9f10f-96c7-3a30-9b74-f496be85caae.roa
Signing time:             Wed 23 Apr 2025 07:50:53 +0000
ROA not before:           Wed 23 Apr 2025 07:50:53 +0000
ROA not after:            Tue 22 Jul 2025 07:50:53 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c8a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9e:8a:a3:1b:ce:2e:cc:54:9e:ab:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 23 07:50:53 2025 GMT
            Not After : Jul 22 07:50:53 2025 GMT
        Subject: CN=e9d39b18-0b97-4c83-b71c-fa1f902bf97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ba:ec:6b:1a:14:1b:0e:e0:23:7e:40:e7:6c:
                    e5:f3:be:35:73:8d:55:16:5c:b9:6e:eb:02:11:6e:
                    42:57:5a:fb:ac:60:1d:a0:12:99:00:ec:26:a9:ea:
                    88:56:48:55:7a:46:e1:5e:18:26:3e:be:a2:b5:5d:
                    5d:a8:83:3c:16:a5:9c:76:39:37:c8:63:48:90:0c:
                    c7:3d:57:92:cd:8d:5e:1b:ea:66:9f:e0:89:dc:94:
                    4f:bf:f6:e1:e4:29:0d:b2:45:10:67:53:71:c8:0f:
                    97:8f:22:fc:59:cb:a7:14:90:92:8b:bc:05:4c:05:
                    c8:84:d6:e8:45:3d:18:98:28:b3:91:e6:f3:03:9b:
                    5f:04:0c:ad:a5:37:b6:0b:16:d3:46:06:a7:9a:dc:
                    0f:44:da:06:58:c6:99:ca:9a:f2:07:5d:60:0c:40:
                    ad:85:b8:bb:90:a0:1c:69:bd:be:5a:f7:6e:5a:34:
                    5c:18:99:f8:e3:5a:13:1d:9f:0c:4b:3d:8c:39:39:
                    23:ec:ad:78:a5:af:a9:61:c3:74:46:21:33:ef:20:
                    37:80:63:09:30:5d:bf:88:9f:95:0e:ff:c9:28:b1:
                    8c:b7:15:34:b3:1f:20:dc:4f:cc:94:9e:9b:39:18:
                    6f:66:23:49:a8:91:c4:03:d8:13:5f:cb:3f:31:89:
                    2f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9A:9B:CB:8F:A1:71:85:9C:F8:C5:33:BE:20:70:99:42:58:28:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a1d9f10f-96c7-3a30-9b74-f496be85caae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c8a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:42:ae:4b:d5:c9:fb:9f:d0:a6:22:2c:17:89:bf:75:9f:
         01:c6:ad:79:37:85:11:de:85:7d:9a:d5:7a:ab:dd:77:4a:90:
         1e:7b:51:ff:75:61:1c:cf:05:13:44:e2:36:73:80:62:fe:cd:
         2b:d2:4e:7f:98:78:79:38:83:04:9e:ea:ad:71:64:ed:59:74:
         81:bb:10:e1:5f:79:d7:e6:e5:47:1f:a7:a9:cc:c8:18:2f:57:
         59:0f:92:0d:7d:b3:07:65:24:74:89:ef:1c:8c:e2:30:d9:ec:
         63:ee:13:95:af:3d:6d:49:e2:5a:5e:bd:e7:9b:a8:87:c2:8f:
         9f:f9:1a:5f:c3:5a:6b:4e:de:c0:bc:1c:bf:45:1b:a7:1d:7b:
         90:da:ad:49:46:b7:55:5c:ac:66:19:3a:79:98:82:ba:8b:78:
         90:ea:ca:d5:f3:00:92:6f:b5:c1:42:ae:46:06:46:88:92:95:
         e1:ea:cb:f0:83:4b:fd:b6:27:eb:b5:54:e2:61:f5:36:e4:a5:
         b5:14:d9:ef:f1:a7:a3:d0:d1:3c:00:fc:b6:a0:22:c6:6f:4d:
         b9:cc:d9:ff:35:2f:c4:a8:ba:65:e4:ea:9c:b1:2c:65:a7:69:
         22:5e:4b:e8:ab:31:93:e5:d2:ca:af:4b:82:05:a8:cd:09:77:
         fd:95:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:45:44 2025 by rpki-client