Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/f088a302-0a9b-32c2-b9ce-f898278df853.roa
File:                     f088a302-0a9b-32c2-b9ce-f898278df853.roa (raw, json)
Hash identifier:          OmaHIFIpVyowNHsrthz/LMMrk7hEXRSkP49MHby23jk=
Subject key identifier:   04:89:81:25:F3:66:97:0E:A1:AD:72:C0:8C:93:C1:36:60:83:DA:8F
Certificate issuer:       /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
Certificate serial:       010D0C9F43285849D85F7BFC04D5EFDDE034D600
Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/f088a302-0a9b-32c2-b9ce-f898278df853.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        2602:808:4001::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:7b:fc:04:d5:ef:dd:e0:34:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=3cdd00eb-60e9-49ee-a057-4981b18b99bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:81:50:4f:f1:e1:4e:ff:7a:49:55:27:4d:
                    d1:5f:41:c0:f9:58:e0:d2:ae:ad:79:a0:67:d4:f5:
                    9a:07:59:3c:ee:84:b6:b6:e9:ad:78:e1:6d:5c:66:
                    91:d8:57:9d:e2:0f:41:32:d3:94:35:3b:ff:e6:85:
                    25:65:e4:31:0a:1b:01:61:46:cc:10:1f:1a:fc:40:
                    2a:a8:34:e0:ca:2a:b5:f2:4e:4f:c1:0d:48:36:8f:
                    7e:ab:14:70:a8:8a:82:ac:81:77:af:b8:69:26:46:
                    f2:ea:6b:dd:d5:6b:14:d5:66:ec:9e:a7:5e:22:ef:
                    08:dd:0a:3a:f5:43:d5:95:2e:79:9b:f6:44:be:0a:
                    cd:21:06:28:b3:81:42:59:56:2c:a0:bb:0e:47:f6:
                    39:40:17:e8:30:0e:33:60:fd:43:29:e1:c8:4a:f3:
                    93:15:8f:a8:01:8b:19:8a:cd:59:ac:33:97:3e:a0:
                    c5:da:11:1d:8f:b7:c2:f1:b9:60:45:01:13:19:2a:
                    56:b9:dd:de:0c:ea:c1:87:af:ad:d7:ad:c8:5f:65:
                    58:8e:41:96:10:d8:7a:dd:de:3d:64:0b:82:78:16:
                    ec:0b:52:ae:a3:55:96:4a:dd:50:76:f6:76:d7:f4:
                    6b:ca:4f:f3:09:0d:34:db:d6:5e:e0:8d:c1:77:d0:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:89:81:25:F3:66:97:0E:A1:AD:72:C0:8C:93:C1:36:60:83:DA:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/f088a302-0a9b-32c2-b9ce-f898278df853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl

            X509v3 Authority Key Identifier:
                keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:808:4001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:00:d8:dd:1c:e9:03:93:4e:b9:ef:ba:8e:51:fa:ca:1c:f3:
         58:8d:e5:9d:5c:a2:31:fd:26:85:af:cb:1e:60:71:49:28:ff:
         b3:da:b1:80:37:57:83:81:c5:eb:2e:6f:53:5a:37:21:91:e1:
         37:1b:4b:b6:26:7b:5e:a7:30:81:b9:c8:b5:25:e5:8b:70:fc:
         4d:b8:27:97:9d:54:81:7d:2d:3e:66:7b:31:6e:6a:dc:31:0a:
         69:d3:05:85:3c:c7:c5:bc:32:4d:4b:44:ee:f4:ec:f1:8e:b0:
         4d:63:6e:2e:d9:7f:9f:08:3d:7d:3d:a8:78:38:6e:72:8a:51:
         75:25:71:aa:76:1e:27:2c:d5:8b:e6:10:bd:55:7b:60:70:05:
         10:cc:be:a3:77:ca:96:ef:dc:c9:ea:04:17:b7:df:f7:17:c8:
         39:9d:c7:77:63:14:c3:0a:d0:8d:ec:87:12:8d:13:1c:20:5c:
         96:c5:46:9c:f9:9a:f0:eb:a3:9b:ce:7f:cd:d5:24:45:e3:c5:
         b4:6e:56:7b:1d:87:26:3f:e2:63:c1:a9:38:89:51:52:a4:6a:
         43:60:a6:a3:ae:3a:69:cf:ff:09:20:a1:42:ac:1a:05:a9:47:
         12:a7:8d:6e:51:b6:d8:01:69:6c:ad:99:f9:e8:03:2c:c8:96:
         86:b4:96:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:20 2025 by rpki-client