Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa
File:                     5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa (raw, json)
Hash identifier:          L7kTk0pgOi0wyPP6jvy+0daWehGWFmLwbrtOAF1nxjo=
Subject key identifier:   09:BA:29:FD:65:52:7C:08:0A:C8:CC:CF:E0:9E:03:19:1D:67:1E:8D
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F432858499C438BC9D13C8ECCD90A4D00
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa
Signing time:             Tue 22 Apr 2025 12:16:01 +0000
ROA not before:           Tue 22 Apr 2025 12:16:01 +0000
ROA not after:            Mon 21 Jul 2025 12:16:01 +0000
asID:                     763
IP address blocks:        2620:1f7:c052::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:43:8b:c9:d1:3c:8e:cc:d9:0a:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Apr 22 12:16:01 2025 GMT
            Not After : Jul 21 12:16:01 2025 GMT
        Subject: CN=b1795d95-2820-46a9-8960-87270b97e249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:5a:f9:cd:48:35:d1:50:87:9c:db:fb:09:
                    e0:10:75:3c:6e:e6:75:55:f8:fd:78:e5:27:69:7c:
                    83:98:86:0f:3e:52:87:13:85:0b:37:4a:47:41:88:
                    4a:0c:80:ac:f8:f2:b7:62:40:53:15:60:ee:d2:37:
                    16:eb:4b:71:c7:a2:bd:07:16:0b:0c:2e:1b:52:2b:
                    54:42:0d:e3:9d:b3:e4:0c:74:c6:82:7f:66:30:95:
                    0a:3d:0d:9d:68:67:af:ae:5e:e3:a9:65:c6:5f:c4:
                    c2:d5:e0:0f:b4:c9:0f:d2:f8:b7:61:c5:3a:2d:e8:
                    67:49:8a:7b:b5:11:0b:8a:96:c3:9a:4c:10:08:7a:
                    5e:64:ce:0d:35:03:12:95:4f:42:d4:8a:ac:bc:26:
                    72:c7:cb:1d:5c:68:b2:08:14:cd:8f:2c:60:a2:06:
                    db:79:26:4b:86:91:71:a0:a6:23:fc:98:af:f3:f5:
                    9d:5c:22:b4:9a:16:82:c0:b7:6d:6f:6f:ee:e6:dd:
                    b3:75:7a:18:e5:c1:46:37:fa:e9:17:2c:5e:d2:9e:
                    e4:f2:49:45:d3:13:a9:08:3e:23:66:06:2f:c4:68:
                    7c:fc:6e:d1:c0:0c:64:28:58:49:2b:ad:db:70:b9:
                    7b:fd:0d:90:98:e9:f5:85:2c:ba:7a:5f:b2:dc:a2:
                    a2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BA:29:FD:65:52:7C:08:0A:C8:CC:CF:E0:9E:03:19:1D:67:1E:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/5fd17ba3-298e-3dc9-b228-8dafb9d91780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c052::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6c:a6:17:0c:b2:e4:8d:cd:a4:90:3b:fc:fa:2b:4d:3e:65:
         6b:35:56:21:d4:78:57:b1:d4:9c:83:2c:52:fa:25:8b:67:e7:
         2f:7b:08:43:ed:a3:f5:f1:17:6d:ec:95:4f:19:63:f8:f6:c4:
         2e:19:78:e0:e4:ab:f5:92:50:07:fd:92:da:2c:88:14:8a:0a:
         8d:9f:6b:2d:b9:0c:69:bd:d3:6a:5a:3c:b6:9f:eb:bb:d4:9d:
         2b:10:e6:8c:2e:6f:8c:f5:b5:4c:5f:3a:41:e4:1a:5d:fe:48:
         02:ad:41:9d:4d:17:0f:d5:f4:83:2a:90:d0:c6:e1:cf:2b:2c:
         48:f7:a2:8f:50:d3:8c:0d:89:3d:2c:3d:72:ed:2c:ec:94:95:
         33:87:bf:6a:45:32:ea:41:c5:13:fb:6f:04:d5:36:c9:c7:74:
         fd:e2:d9:b9:c2:41:66:b0:a4:61:8d:d2:94:7b:8f:5d:ae:d7:
         14:b9:1e:36:bb:c4:9d:74:15:fe:7c:c5:71:71:4d:59:fd:b7:
         be:f2:38:72:42:37:9c:da:02:ad:9e:5b:f6:f4:9e:86:fd:76:
         fa:5e:ef:7e:e4:3c:bf:54:0a:90:84:be:26:a2:77:a1:f7:75:
         5f:77:31:c2:ee:b4:21:5a:76:db:2f:61:e3:c2:7d:2b:3c:94:
         8f:f9:6f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:44:51 2025 by rpki-client