Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/18958e14-27fd-3a98-aa4b-fdebb1f21993.roa
File:                     18958e14-27fd-3a98-aa4b-fdebb1f21993.roa (raw, json)
Hash identifier:          Kpzqs7zpxESNbFBGBZxnhShFt66kRYI7T/8bBH0TIHY=
Subject key identifier:   7F:A9:69:C5:A5:3C:97:08:D8:15:77:76:7F:7C:62:4B:F5:BE:48:01
Certificate issuer:       /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial:       010D0C9F4328584975446185554C69221AB61B80
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/18958e14-27fd-3a98-aa4b-fdebb1f21993.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     51089
IP address blocks:        2602:2db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:61:85:55:4c:69:22:1a:b6:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=884b00b8-1337-4e9a-9e81-a391166e9eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:c7:f6:29:74:5c:2c:fe:a2:0a:68:cb:49:
                    4c:74:72:f3:8e:c1:14:a2:ee:2c:fa:19:ef:57:fa:
                    63:00:ef:7d:7d:0d:37:2e:db:a2:c8:28:5f:97:90:
                    c0:7a:d4:77:4a:a1:d4:9a:90:5e:eb:5d:31:4d:73:
                    68:c3:f0:b0:4d:45:29:dd:5c:07:74:35:19:75:ba:
                    25:f7:94:d1:76:2d:80:8b:28:3f:9d:49:82:8b:87:
                    1e:c0:cc:54:5e:35:42:1c:bc:78:5d:3c:0c:60:91:
                    0b:43:e4:7b:ec:8f:f2:c2:18:52:23:db:20:3b:12:
                    24:e6:f9:1f:0a:83:72:29:cb:4d:2b:5e:d3:ef:93:
                    b8:12:16:a3:b6:e6:8e:3c:81:c4:e6:96:00:4c:0a:
                    a4:b9:ab:2b:da:00:b9:4f:5b:1b:9b:1b:05:75:9f:
                    15:c5:c1:3d:cb:5d:89:4a:69:50:f0:ae:6e:6c:b7:
                    36:65:64:8c:37:a6:ec:50:e6:79:ed:a1:22:a7:38:
                    b7:f8:80:6f:be:a9:b7:41:2e:82:38:e6:f0:8d:d0:
                    c3:f1:d4:1d:96:1f:65:67:bb:bb:4d:0f:59:ab:c1:
                    08:67:50:67:82:cb:77:99:33:72:57:15:5d:19:b0:
                    76:7c:0b:31:dc:b4:94:06:e8:a2:14:be:58:98:4b:
                    a8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A9:69:C5:A5:3C:97:08:D8:15:77:76:7F:7C:62:4B:F5:BE:48:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/18958e14-27fd-3a98-aa4b-fdebb1f21993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:67:c1:a7:0c:c5:8c:dc:83:f3:87:ec:8d:89:a6:6b:7b:2b:
         e5:f2:04:ce:75:20:8f:97:66:1f:a7:5b:88:dd:6f:4e:bb:27:
         63:8a:72:3f:e6:f6:61:cb:58:85:34:44:8c:26:57:7d:cb:23:
         7e:6f:1c:8c:d1:e7:72:2f:f2:f8:bb:1a:b3:d8:9e:de:95:58:
         96:d8:f2:8b:88:7c:26:02:00:5d:f4:31:28:11:c2:4b:56:40:
         f9:f6:a4:87:51:17:65:3e:85:8c:cd:05:20:48:4d:59:6e:7d:
         7e:57:d4:9b:8f:f8:48:82:35:70:40:5a:ac:6f:99:fd:a6:7d:
         e1:85:f0:ff:50:3e:bf:a1:14:36:3d:22:b4:9e:c9:d3:2b:bf:
         fc:03:3b:00:02:c1:8e:e9:79:51:68:2e:e6:12:d0:7a:0e:fc:
         01:9d:e2:d5:cc:15:1b:a6:3d:dd:01:3d:7c:ac:8b:02:64:f9:
         06:47:a3:ad:f8:5f:2a:e0:d6:7d:da:4d:38:50:50:2f:d1:36:
         8f:43:9c:91:30:66:15:9b:57:22:e1:3b:31:30:9e:9e:0c:23:
         d6:f4:d8:38:ab:8e:ef:16:61:0b:ed:43:4c:45:03:30:cb:35:
         4b:0e:f7:73:a2:62:05:4c:ad:45:2b:42:b1:21:a0:8a:69:1e:
         4a:32:7b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:16:15 2025 by rpki-client