Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/93146727-9cad-3961-ae07-df0111f1b59e.roa
File:                     93146727-9cad-3961-ae07-df0111f1b59e.roa (raw, json)
Hash identifier:          vJUoIKwFJ5XWPBdH6AGZtSXzGO1RW2yTCAt6Lk6GYoU=
Subject key identifier:   56:7B:ED:79:C1:AD:D2:3D:59:5C:02:8F:AA:B2:3C:0B:32:CC:DA:C6
Certificate issuer:       /CN=951e7581-98f6-4e09-8091-345244dd8d9d
Certificate serial:       010D0C9F432858498769B4B74277918BE343D810
Authority key identifier: 9A:54:6F:01:C0:15:F3:A1:30:21:64:90:35:86:79:43:ED:07:11:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/93146727-9cad-3961-ae07-df0111f1b59e.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     101
IP address blocks:        2001:1860::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b4:b7:42:77:91:8b:e3:43:d8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951e7581-98f6-4e09-8091-345244dd8d9d
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=e6ed0359-3e50-4a81-be84-732c12b30d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:7c:55:5a:9f:35:cd:39:7d:5e:73:19:23:
                    80:3f:82:72:6b:df:0e:55:9a:0b:b1:9c:03:6d:ad:
                    72:f8:f6:06:45:8d:d7:53:ed:08:01:c8:ba:a2:33:
                    4b:a2:21:16:e4:7e:86:eb:5d:e6:4e:0e:a7:72:86:
                    e7:13:c4:45:a3:b6:1e:50:fa:07:10:ed:7a:3d:ac:
                    71:0f:af:b2:7d:a1:be:60:a2:2a:73:69:c3:59:fd:
                    25:24:e8:af:9b:4f:2d:ea:58:c4:f2:fc:e4:c4:cf:
                    22:5d:7e:82:43:b6:0a:58:21:ad:5a:50:1f:b8:95:
                    fc:80:07:cd:32:65:02:6f:e8:78:19:66:40:fa:61:
                    ac:c5:51:1d:6d:be:eb:68:36:02:ce:f8:07:0d:a1:
                    2a:3e:5f:a1:91:32:e7:e5:67:9f:b7:bf:85:f6:c4:
                    db:9c:fd:7d:51:92:b7:46:0c:83:6f:51:ec:ab:2b:
                    c7:d8:c0:dd:02:ea:36:d1:aa:9d:96:9a:65:f1:9f:
                    ff:b9:34:43:99:7d:1c:41:96:c9:28:08:23:4e:f5:
                    66:f2:64:86:8f:69:06:8a:39:83:70:5f:b7:c0:1f:
                    66:15:f4:33:e8:2c:1e:88:0f:42:4e:ff:64:e8:95:
                    d2:8f:9b:6e:53:41:f1:83:e5:74:a3:7d:9d:09:98:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7B:ED:79:C1:AD:D2:3D:59:5C:02:8F:AA:B2:3C:0B:32:CC:DA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/93146727-9cad-3961-ae07-df0111f1b59e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d/951e7581-98f6-4e09-8091-345244dd8d9d.crl

            X509v3 Authority Key Identifier:
                keyid:9A:54:6F:01:C0:15:F3:A1:30:21:64:90:35:86:79:43:ED:07:11:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/951e7581-98f6-4e09-8091-345244dd8d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1860::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ec:e5:f8:bf:60:96:20:32:52:46:af:25:26:e3:60:26:20:
         5f:d3:b5:6f:2c:44:4b:d0:a6:d8:62:11:cf:93:a9:88:d3:a9:
         75:9a:6e:b0:64:77:d4:5c:a2:e4:53:26:6e:bf:b9:35:0c:31:
         b4:07:29:86:26:03:62:16:1e:d3:53:e3:97:66:f8:87:df:20:
         f7:1e:53:7f:57:a6:2a:bb:af:d8:d2:34:a8:a7:41:03:90:02:
         2f:6b:9a:07:58:35:bf:be:06:6a:86:bf:3e:06:b4:8b:e8:6f:
         e5:cb:f6:20:32:97:fc:0f:04:3b:44:13:d9:41:48:e8:e7:a9:
         16:45:1f:02:48:ec:9a:59:04:41:19:a0:a5:bd:29:99:5d:5e:
         8a:66:74:2e:17:90:70:c2:c2:82:0a:2d:ec:6d:12:aa:2b:b5:
         e9:e8:d1:fc:57:e6:50:99:e1:60:b5:00:8a:f4:3e:93:70:16:
         75:48:ff:3a:c7:ce:0c:74:1d:22:56:9b:40:22:ce:ad:e2:85:
         95:6f:09:06:71:98:a3:d7:fa:88:58:90:80:4f:b4:8f:af:1f:
         e7:0b:f6:81:4d:5c:58:48:07:b6:fa:1c:27:de:d8:68:81:a8:
         a9:71:5e:5d:a0:0c:c1:b6:ee:0f:71:7d:09:ac:2a:dd:52:d3:
         4c:3b:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:43 2025 by rpki-client