Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/95512bac-8d7e-3402-b33f-ca96cf6891f7.roa
File:                     95512bac-8d7e-3402-b33f-ca96cf6891f7.roa (raw, json)
Hash identifier:          DkVcyy707BkHJDA3GWDveBmzMx/FkzJOuzXeWhlIAMc=
Subject key identifier:   5B:58:0E:53:B1:74:33:B0:9C:EA:45:22:29:99:4B:A2:AE:D9:19:D4
Certificate issuer:       /CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
Certificate serial:       010D0C9F4328584A2ABAD313C7A2E7195B8D7740
Authority key identifier: 52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/95512bac-8d7e-3402-b33f-ca96cf6891f7.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     147297
IP address blocks:        2602:fca7:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:d3:13:c7:a2:e7:19:5b:8d:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1045712-9a23-40a5-87f8-41b31ddbe93b
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=6aa76407-66bd-4fcf-9696-b5fb076cf9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:ef:f3:82:8c:a9:ba:95:a1:9e:33:83:2b:
                    53:7a:5d:7a:f6:8a:df:64:d8:c6:9c:51:b5:e7:46:
                    7a:92:2c:03:0b:ef:a9:32:15:11:eb:f8:29:cc:9a:
                    a0:a7:11:20:d7:9b:a1:3d:6f:2f:56:24:74:14:11:
                    a0:af:b0:3b:6f:af:5c:df:a7:f2:c2:42:07:29:81:
                    3d:36:e8:15:f9:da:89:77:a1:8c:7d:7d:f3:a4:ea:
                    1f:5a:28:17:92:be:41:ed:88:5f:c6:bd:12:17:1e:
                    5e:23:90:a0:f9:53:3c:15:fc:c7:43:53:30:0f:53:
                    c3:b0:2e:b7:a4:7a:e7:47:2f:bc:cd:4a:1d:c2:ce:
                    5b:51:14:ba:92:df:88:76:d7:9b:03:03:3a:94:7f:
                    a7:8d:1b:ac:5e:80:c6:5b:6f:09:d2:38:ea:ef:d2:
                    04:10:cb:7a:8f:47:12:66:df:6c:ca:75:5d:97:d1:
                    82:c5:bc:86:2f:a8:2e:2b:ab:29:44:17:da:0b:c2:
                    42:eb:b7:0d:1b:a7:1c:e6:ce:0c:4f:ee:3f:dc:2a:
                    d0:d2:57:86:77:bb:bf:0f:17:8b:10:03:c3:58:67:
                    7b:9c:4c:3f:69:49:26:af:c6:32:80:d9:10:ca:e8:
                    75:d5:97:0d:07:33:03:b0:56:ea:bc:ea:bb:6c:d2:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:58:0E:53:B1:74:33:B0:9C:EA:45:22:29:99:4B:A2:AE:D9:19:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/95512bac-8d7e-3402-b33f-ca96cf6891f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b/e1045712-9a23-40a5-87f8-41b31ddbe93b.crl

            X509v3 Authority Key Identifier:
                keyid:52:C7:1E:5E:7C:7A:67:A5:37:10:1A:FC:22:A5:24:29:AB:2C:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e1045712-9a23-40a5-87f8-41b31ddbe93b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fca7:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:83:d0:45:10:46:73:94:a8:9b:70:ef:32:07:13:57:17:23:
         9f:1a:3c:77:82:8a:61:d3:bf:a0:23:19:8e:9e:e2:88:22:15:
         fa:98:ea:ee:04:14:ec:77:80:5f:08:d4:46:6d:49:65:58:8f:
         a5:dc:4f:84:88:98:7d:45:fa:94:88:48:de:9b:db:2a:57:c1:
         8b:80:fe:85:6e:52:ce:a6:86:60:41:b8:3c:53:4c:91:bc:b4:
         d9:fd:40:a2:99:02:b3:7d:5e:ca:e3:d2:57:f3:dc:4a:6b:99:
         a8:d2:11:cd:c3:a2:8b:d8:eb:98:cf:d4:91:01:11:ae:89:80:
         69:84:22:0d:86:a1:db:d6:e9:dc:f1:4a:34:86:aa:02:df:36:
         3b:de:45:b4:fa:82:73:03:d4:2b:a1:55:18:7f:43:65:ef:48:
         10:bd:df:64:85:67:4f:80:5e:0b:d6:4f:48:67:ae:be:01:0f:
         2f:09:42:00:ab:e2:84:97:1a:4c:e6:5b:4f:3a:b3:8d:5f:43:
         02:a2:ac:5b:a1:38:47:0c:bf:8e:78:43:7a:42:f5:42:81:c2:
         7e:17:bc:a6:f2:0a:d1:88:cf:ce:f2:b7:e3:6a:bc:9c:c9:f0:
         a9:c2:59:0b:36:2a:24:3d:56:fc:9b:b6:0f:ad:76:71:a4:b1:
         c2:15:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:55 2025 by rpki-client