Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa
File:                     efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa (raw, json)
Hash identifier:          EEl/dVX5ejgrtl8pEu+MYt3NtmTqQMJEj+OnzEYet9o=
Subject key identifier:   36:7A:C4:0C:60:76:57:E5:1F:BE:35:B9:F9:0A:CD:A0:68:89:00:E3
Certificate issuer:       /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial:       010D0C9F43285849D85F85097FD04D26390CC980
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        2602:808:4001::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:85:09:7f:d0:4d:26:39:0c:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=a764d051-01b9-47fb-abee-2409ff22b769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8c:78:63:51:38:36:9c:42:4b:e4:1d:b6:b0:
                    23:55:e5:2d:5a:90:c0:c7:00:12:f3:0f:9f:3e:3c:
                    23:18:5d:d2:e5:34:16:e0:9d:af:c9:13:9f:69:0d:
                    fd:68:ed:b4:15:6c:6f:98:3d:cf:58:14:8a:87:0e:
                    8c:a9:26:7a:37:5d:55:97:7c:3b:65:fe:01:dc:51:
                    f0:e9:dc:5d:e2:b8:1d:24:82:f3:67:3b:6d:b6:dd:
                    7f:ab:8a:6a:39:ea:2e:ae:7d:4a:f5:e9:04:39:a4:
                    94:ee:40:e2:4f:dc:ff:ef:c9:9c:50:ed:75:11:e6:
                    06:8f:c0:34:51:04:53:a5:e7:2a:95:e0:c7:9b:c9:
                    15:34:e3:40:b4:4e:b6:ec:d5:a3:05:02:fc:20:af:
                    ac:40:f9:65:fa:60:6f:5b:55:5f:9f:6a:47:97:4a:
                    2c:77:85:bd:9a:79:3d:69:3d:a7:6c:7f:68:18:32:
                    0d:84:55:1e:9a:1a:87:56:90:2d:c2:ed:11:e4:a0:
                    60:09:75:ec:cb:f2:49:0f:6f:20:a6:27:d3:a3:6e:
                    b0:72:e2:55:5b:5d:c1:b7:74:e6:38:1b:1f:02:42:
                    fd:08:9c:f3:02:e1:9d:17:96:c4:9d:ea:0a:ae:ce:
                    c8:ec:7c:9d:18:f3:fb:54:54:60:73:bf:e8:f0:f6:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7A:C4:0C:60:76:57:E5:1F:BE:35:B9:F9:0A:CD:A0:68:89:00:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/efb59abe-2c1c-35a3-9a19-c9a5be46b235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl

            X509v3 Authority Key Identifier:
                keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:4001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:96:69:ea:54:8d:4d:b5:11:87:41:f3:84:25:a8:22:a3:38:
         94:90:39:2e:9f:87:d4:8c:2a:4b:cf:71:7b:1a:d6:dc:01:9d:
         98:7a:56:59:1a:7a:cd:63:f3:1c:86:b4:2f:f5:9c:a6:1f:ce:
         ff:4c:d5:2e:83:d8:46:27:84:04:a6:92:c9:55:b4:9a:6b:6f:
         df:9a:bc:9b:c5:5f:24:ca:de:09:7c:73:e3:8a:1b:6b:80:17:
         a0:c5:e6:c0:7f:47:f9:d5:11:8e:32:d7:8a:a6:2a:0d:73:a0:
         eb:09:a2:f9:38:54:de:6c:9f:86:97:9f:6a:55:3a:92:df:66:
         63:c2:ee:1b:1e:22:13:4b:02:a0:04:31:72:65:55:b8:22:8f:
         5a:4c:01:da:c0:28:cc:63:85:6f:a4:82:86:c2:60:79:98:a4:
         11:35:cd:58:d9:08:2c:18:fa:0e:76:ff:d6:15:be:72:76:b7:
         7d:04:22:95:b3:e2:3a:34:6d:a9:91:4a:7f:a5:a3:82:5e:7a:
         45:81:86:6c:66:fa:94:84:11:32:76:5c:04:d5:dc:02:8f:60:
         4b:6a:d9:9c:9e:10:99:61:0a:a3:87:e8:14:e4:6a:a4:5a:6d:
         21:11:0d:86:03:58:10:4e:7b:0b:bb:dd:c3:3a:27:cb:c1:32:
         9b:0e:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:00:02 2025 by rpki-client