Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/37a176b3-ed36-3f95-874a-4ce5473ad8d6.roa
File:                     37a176b3-ed36-3f95-874a-4ce5473ad8d6.roa (raw, json)
Hash identifier:          hBnQFAciX319g1hcaI8pghGZL6rBxxRepdm6Ms6wxyY=
Subject key identifier:   3E:B2:3F:34:DC:70:87:09:82:17:E8:EA:99:75:E2:04:22:0D:23:68
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858499DBF33C550268F9C742C2A80
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/37a176b3-ed36-3f95-874a-4ce5473ad8d6.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     13213
IP address blocks:        2606:2e00:8003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:33:c5:50:26:8f:9c:74:2c:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=ad4277c2-8c64-4e19-9117-5d445288e7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:f6:b7:c0:ff:e1:42:4d:83:db:99:2d:03:
                    81:77:25:de:6e:9d:f9:30:42:fc:19:71:5b:65:fa:
                    3d:95:5d:ce:6e:ae:cd:bd:3a:02:d0:3a:15:18:75:
                    54:af:4e:ec:ca:1f:3c:51:dd:36:0d:e5:6f:89:8d:
                    81:f2:63:e0:d0:32:93:67:4f:f7:aa:25:8d:09:48:
                    6b:1d:36:24:0e:39:70:c5:02:ad:95:8a:ed:b9:b0:
                    7b:0a:a0:62:07:db:85:c8:47:a7:3b:98:19:1e:30:
                    5d:2c:63:c0:50:1d:cd:07:fa:57:73:6a:34:1d:be:
                    8d:4e:e4:af:8d:b4:59:54:49:ab:ca:6d:cd:50:cb:
                    da:db:5c:95:09:2d:e2:8b:33:3b:6e:43:3a:4d:7e:
                    76:30:9f:20:e2:98:ed:b6:01:aa:67:72:46:4c:88:
                    9e:d2:d5:55:62:ab:0e:2a:7f:85:fc:b8:49:fb:3f:
                    61:78:89:ea:2d:09:36:d7:9a:11:fc:18:0b:46:45:
                    18:f6:c6:1f:74:ac:5e:13:35:3c:dc:f4:21:bf:37:
                    ec:14:2e:14:9a:b4:43:df:1e:f7:6f:d6:28:c3:5d:
                    a8:f3:07:39:5e:57:36:7c:4a:d6:4c:67:cf:5f:9d:
                    31:2c:2a:2b:0b:07:53:c3:0d:ea:7b:94:4f:b3:6c:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B2:3F:34:DC:70:87:09:82:17:E8:EA:99:75:E2:04:22:0D:23:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/37a176b3-ed36-3f95-874a-4ce5473ad8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2e00:8003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a8:97:1b:c6:df:19:62:4e:99:5a:03:a3:7a:02:c7:5e:96:
         b0:6e:20:b0:a2:ff:64:7b:4b:04:50:73:15:de:3f:b0:6e:bc:
         3b:42:72:dc:32:c9:19:e8:9e:71:4d:14:fb:d0:34:58:9d:ba:
         73:62:cd:ef:89:2f:ec:a7:46:35:60:65:53:b9:14:66:b8:d5:
         a8:1e:79:6f:d2:c2:44:f0:b8:cc:bd:c6:bd:ff:cb:9f:f4:3f:
         5b:db:ea:2c:4c:c2:ca:6c:8b:c7:24:11:43:1b:af:03:29:6d:
         73:3c:0e:85:64:e1:04:72:58:80:e5:cb:fd:e4:ab:df:0f:78:
         b0:71:a0:3f:47:3c:9e:a7:29:99:1f:27:44:8e:6b:1e:a6:4a:
         b9:a7:ba:b1:38:93:31:39:f2:eb:ef:f4:d4:89:63:64:ef:13:
         b7:1a:6c:9c:7e:99:83:d3:c9:26:4b:76:4f:d0:50:bf:ce:4a:
         e0:c8:1d:7b:62:be:96:8a:fa:51:0d:16:68:5d:63:33:59:b7:
         e7:51:d6:71:59:34:c5:c5:6f:d2:29:31:3e:89:34:51:41:ac:
         a6:14:4c:95:6b:a7:bf:3d:cd:5d:00:50:28:8f:05:87:57:43:
         f0:56:11:00:d1:8d:42:71:72:10:09:6b:ee:11:e4:d6:f3:64:
         63:2c:f8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:31:49 2025 by rpki-client