Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e9069be8-0c03-3f6c-9ca5-252aad9b5aea.roa
File:                     e9069be8-0c03-3f6c-9ca5-252aad9b5aea.roa (raw, json)
Hash identifier:          UT5pC7ZTGL1at3HLCPPLBWWAD4oyXWodP8xjg6K72Fs=
Subject key identifier:   36:24:5D:6A:50:A1:F7:F3:74:A5:26:9C:30:A0:AA:EB:AA:B6:B1:E2
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F43285849D6FA4BF2D8F5C400D4E59180
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e9069be8-0c03-3f6c-9ca5-252aad9b5aea.roa
Signing time:             Tue 13 May 2025 13:01:02 +0000
ROA not before:           Tue 13 May 2025 13:01:02 +0000
ROA not after:            Mon 11 Aug 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        2620:1f7:c021::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:fa:4b:f2:d8:f5:c4:00:d4:e5:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: May 13 13:01:02 2025 GMT
            Not After : Aug 11 13:01:02 2025 GMT
        Subject: CN=b264952c-768a-43ef-9abd-b288ec3f290d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a9:c2:59:bf:cb:62:94:b5:8c:b7:53:57:fb:
                    7b:78:67:f8:c7:c0:ef:4b:04:f3:6d:75:b9:30:ec:
                    77:71:67:83:be:78:cd:bd:c8:e0:2c:4e:a2:97:ee:
                    8f:bd:a8:5e:bc:30:00:f2:5a:f5:29:06:30:0f:4d:
                    f3:64:9b:04:9c:37:6c:53:e0:a0:9b:62:c9:eb:ee:
                    c6:99:c4:5d:e8:5e:76:54:2c:ea:54:ca:99:54:75:
                    b1:2a:93:ff:de:27:63:60:19:ca:88:f0:10:f2:2c:
                    2a:23:98:58:5a:50:3b:08:64:bd:5d:b9:7a:3a:48:
                    b8:e2:3a:64:1b:e2:a4:22:66:0a:3c:0d:22:da:8c:
                    1b:90:e7:d2:ae:6a:aa:8d:b1:36:72:0e:eb:a7:64:
                    83:14:4b:35:07:12:b6:d7:89:fe:ae:a1:a0:25:bc:
                    7c:e6:5b:4c:b2:a6:47:c6:9c:38:15:ca:70:98:37:
                    66:a2:21:bc:14:7a:b9:64:52:90:3b:88:52:4b:d0:
                    0d:9a:d9:c0:b5:5e:bd:7a:a3:5c:fa:f6:2a:ae:5b:
                    92:a6:a9:7b:f2:9f:39:b1:64:93:ea:eb:c1:7f:6e:
                    04:61:37:4c:55:1b:0d:dc:b2:8a:d9:fc:a1:e7:41:
                    bf:96:cd:55:55:1e:63:9a:08:cd:b4:36:9a:5b:08:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:24:5D:6A:50:A1:F7:F3:74:A5:26:9C:30:A0:AA:EB:AA:B6:B1:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e9069be8-0c03-3f6c-9ca5-252aad9b5aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4f:51:a4:f3:b7:20:4f:59:aa:e5:fd:05:19:88:bf:e3:66:
         2c:2b:3a:c3:c8:d0:ec:38:73:75:6e:f3:5a:1a:9e:12:d1:e2:
         1d:51:7f:9b:6f:62:c3:95:82:fd:d2:01:3c:0b:0e:ea:5a:b1:
         04:66:d2:99:4a:d6:34:30:a6:aa:30:5f:b3:1a:d4:d5:36:9a:
         e6:ad:b1:e4:85:14:eb:49:30:6d:4d:06:ad:1b:9d:40:fa:84:
         54:02:0e:16:6d:c1:b6:35:28:06:5e:f3:05:80:5a:d9:67:60:
         29:55:f5:3b:a0:bc:a8:b6:48:2a:2f:97:da:39:60:09:eb:f7:
         90:df:99:4d:6b:07:7e:f5:2c:16:e0:07:bf:f5:55:3b:f4:dd:
         77:19:a1:a6:f0:9f:06:77:9a:ba:c1:ab:a9:e0:71:31:13:38:
         5c:56:cc:1d:82:db:e5:02:43:dc:bb:15:c2:87:2a:4c:e6:58:
         b0:c9:32:06:44:3a:36:d1:61:35:0b:68:22:e4:61:a6:ed:30:
         b6:80:ba:59:17:ea:5d:d2:da:e4:d1:60:3b:26:dc:e1:2c:6f:
         92:4e:8e:8f:36:09:33:7d:5f:c3:ee:77:5a:d8:6b:b2:2a:34:
         89:49:a0:de:5b:30:61:dd:0a:49:ae:28:82:79:9e:95:8f:73:
         cd:f1:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:01:01 2025 by rpki-client