Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/ce053d09-f21c-3334-839d-0508d243d566.roa
File:                     ce053d09-f21c-3334-839d-0508d243d566.roa (raw, json)
Hash identifier:          pokvyaHS3wQLecBi0O2wd8uyrUMQfOaYpLqKNJvVL3g=
Subject key identifier:   95:2D:73:A2:13:B3:34:0B:48:FC:34:84:3A:99:7F:6C:2F:1B:F6:D6
Certificate issuer:       /CN=cb37a4d1-f648-421f-ac14-b83d37a0c615
Certificate serial:       010D0C9F43285849ABB49EC8BCEFB1B645A6D700
Authority key identifier: 72:08:4E:86:A9:1B:7D:76:23:E1:97:80:06:A1:8B:05:D9:7A:4C:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/ce053d09-f21c-3334-839d-0508d243d566.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     398399
IP address blocks:        2602:810:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/cb37a4d1-f648-421f-ac14-b83d37a0c615.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/cb37a4d1-f648-421f-ac14-b83d37a0c615.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:9e:c8:bc:ef:b1:b6:45:a6:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb37a4d1-f648-421f-ac14-b83d37a0c615
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=450e515d-77a5-4d58-b9c3-c6f01b39923e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:93:87:09:e9:1c:59:ce:e8:ff:71:fe:c4:
                    51:bd:96:91:d8:98:ae:64:9e:f4:87:f1:75:47:25:
                    db:4f:2c:c6:3d:63:56:d7:de:60:24:db:90:65:29:
                    26:6c:2a:69:5d:aa:16:bb:83:82:c8:b2:1c:0c:14:
                    7c:52:46:3e:8d:2e:b9:11:70:26:28:2d:a1:8a:2a:
                    34:1e:45:35:fd:06:aa:c5:6a:a3:e1:63:cc:7c:30:
                    e0:ef:e2:bb:8b:1a:40:2d:c6:79:8d:b4:0b:57:25:
                    a5:b7:b7:75:66:fe:3b:36:59:2d:4e:a3:c2:61:ad:
                    6f:7c:1b:1a:d5:e9:aa:16:2a:59:dd:81:19:45:e6:
                    a3:ae:a7:56:43:f1:60:7a:85:4f:e2:f7:ed:2a:7c:
                    b5:df:f4:5b:f9:48:a9:00:24:73:47:79:71:be:f8:
                    85:a9:73:5f:94:18:b5:7f:7c:0d:08:46:18:0f:e4:
                    5f:48:20:6b:51:e2:33:74:d2:a6:70:a2:b5:d2:4d:
                    5e:48:1f:db:5a:62:e4:59:a3:00:4a:db:7c:95:83:
                    ba:7b:16:2d:1a:9d:60:fc:56:25:5e:58:04:e0:1d:
                    a7:85:01:a1:ae:3d:a8:45:01:13:39:fc:e8:a0:78:
                    64:81:f9:83:f1:be:7b:0e:a6:8c:43:79:91:e2:a6:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2D:73:A2:13:B3:34:0B:48:FC:34:84:3A:99:7F:6C:2F:1B:F6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/ce053d09-f21c-3334-839d-0508d243d566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/cb37a4d1-f648-421f-ac14-b83d37a0c615.crl

            X509v3 Authority Key Identifier:
                keyid:72:08:4E:86:A9:1B:7D:76:23:E1:97:80:06:A1:8B:05:D9:7A:4C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e7:67:92:dd:44:ee:02:92:09:e7:eb:33:96:8c:70:13:2c:
         e8:a5:a8:0f:83:2e:72:15:5a:4c:ea:21:34:6e:9f:17:25:78:
         10:35:29:4d:05:a2:54:2f:fe:65:7b:f2:a6:5f:ae:2f:96:10:
         17:b5:8d:93:12:3b:e4:52:fd:20:81:fe:24:10:4e:0a:4a:c6:
         17:5d:a6:d8:36:ea:32:89:89:45:be:e8:80:31:4d:67:59:b6:
         9e:a4:62:33:7e:26:c1:34:45:47:ea:35:49:2e:90:9e:8e:2a:
         20:60:ed:d6:d3:79:7f:de:6f:be:27:2e:38:6a:a3:8b:5b:9f:
         a1:99:19:e9:4e:53:12:8e:40:8f:ff:28:49:e0:25:bd:85:91:
         a8:b3:b0:7d:7d:7c:6e:1c:cb:67:f1:5e:ea:11:f4:4e:65:df:
         61:8c:c2:de:88:2c:74:6c:68:34:e4:66:f3:99:10:90:fe:3d:
         fc:39:10:4a:05:75:2e:21:b4:27:cc:7b:88:26:58:0f:35:18:
         2e:f1:4f:24:65:f7:f0:1e:da:66:13:9d:ea:ea:0e:64:4a:5e:
         32:43:3b:1a:16:38:84:e9:bf:62:3e:53:95:72:0f:21:e8:1d:
         d5:19:fb:ce:e9:a2:bf:da:23:ba:c4:bc:11:3a:70:81:0d:cd:
         0c:43:96:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:30:49 2025 by rpki-client