Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa
File:                     d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa (raw, json)
Hash identifier:          GQ8TqtQHz23dr+Xet7Qh+r/Ui6P1fpjqE/v/jHHZKtY=
Subject key identifier:   72:61:95:FD:80:D3:A3:53:8A:F8:92:B6:30:C6:54:8F:D0:89:82:99
Certificate issuer:       /CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f
Certificate serial:       010D0C9F4328584988CF1F5C2EAC93F3CE679E80
Authority key identifier: 28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     54429
IP address blocks:        2602:fd94::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:1f:5c:2e:ac:93:f3:ce:67:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=9343c8b0-9df6-4982-9063-ced6c914bfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:69:c2:32:20:25:bd:5f:ff:0e:63:ec:ad:dc:
                    44:d0:15:73:ba:df:cd:39:b0:29:7f:c9:dc:09:6c:
                    98:4e:79:ad:09:eb:73:c2:13:65:d1:51:f1:d2:a9:
                    74:59:9e:3f:41:37:72:13:09:2c:d0:21:8e:ae:96:
                    e0:34:9e:a7:fb:49:41:be:22:53:9d:bd:49:61:a4:
                    e5:38:68:a1:5e:bf:5f:9a:e1:da:16:ea:62:d8:dd:
                    87:2c:55:3e:ad:15:79:fa:5f:96:18:63:1a:08:db:
                    4e:9c:e8:fe:f8:47:31:7c:f9:de:7e:2a:eb:0e:6c:
                    2f:87:2b:48:e5:9d:4a:30:aa:e5:ef:89:a6:65:26:
                    dd:9d:a0:0c:c4:3c:e4:1d:44:24:96:20:38:98:62:
                    9b:53:e9:b0:6e:26:a3:fd:54:b2:58:ae:ce:0c:e9:
                    1f:07:f0:36:47:74:de:73:d8:a8:f5:d1:c4:ee:2b:
                    80:39:b1:99:da:2f:a8:fb:2c:41:8d:0d:67:9e:b0:
                    aa:5f:68:ea:c8:bb:9e:c4:56:9d:98:56:7b:64:b8:
                    24:47:fb:d3:3b:ee:50:e9:9f:04:eb:60:cf:ca:a7:
                    da:05:17:bc:95:a3:be:b4:4e:2d:0f:9c:bb:e8:37:
                    12:32:18:f0:4a:3f:2a:ee:a1:cb:d7:a6:89:6c:29:
                    06:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:61:95:FD:80:D3:A3:53:8A:F8:92:B6:30:C6:54:8F:D0:89:82:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/d7e836b5-c70a-3d36-ad77-9ba28eb8e9d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.crl

            X509v3 Authority Key Identifier:
                keyid:28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd94::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:20:99:b8:c1:c7:f7:86:86:53:d8:cf:3f:b0:ce:59:ca:0a:
         4b:84:a6:4d:81:b4:43:01:c3:bb:d6:50:e8:cf:45:15:ac:18:
         68:d0:e5:bd:5d:71:0d:f6:46:5c:8f:aa:b7:43:c0:8d:6b:e0:
         16:54:78:f2:b8:20:ea:f5:cb:6b:e7:43:92:e6:0d:5c:22:47:
         31:c3:50:e7:59:52:ce:ef:2e:bd:b6:4c:3a:50:3c:cf:a0:a5:
         ec:d3:c9:5a:49:12:ce:d8:6b:dd:47:95:45:cf:5a:3e:39:68:
         8a:c7:37:9a:fd:6b:a2:c4:64:32:de:e0:b5:38:17:10:ef:37:
         d1:33:77:88:e5:26:6c:9a:3d:bd:32:54:ce:23:2c:0e:71:10:
         34:22:c4:71:aa:3e:8f:d7:b9:a6:79:95:d0:ab:17:ea:ce:3e:
         e3:f9:9b:7f:af:ac:5f:c2:84:6f:1b:bc:20:21:95:9e:c2:75:
         a4:f4:93:88:7b:4e:26:ab:f6:a3:30:0d:d3:41:d9:b6:28:53:
         ba:f0:e7:f1:6f:e3:79:d8:22:87:c3:26:37:a8:e3:93:a1:2d:
         ee:09:a4:84:64:8c:d1:f8:e0:3e:4b:bd:8c:3e:6e:c0:de:ae:
         5a:8c:fb:c3:3a:9a:ce:0e:01:51:cd:12:a9:5b:2e:36:f2:d3:
         4f:88:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:12:57 2025 by rpki-client