Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/7edafa5e-1e70-347d-bc5a-d7d0740c4301.roa
File:                     7edafa5e-1e70-347d-bc5a-d7d0740c4301.roa (raw, json)
Hash identifier:          rNkW/RUVg8BcGDxpoPpNm7C4vGRw3yJ5tNIK2iByelQ=
Subject key identifier:   11:24:7A:B7:F4:9C:61:96:56:B4:1E:CE:E3:03:2D:D8:30:DE:33:B9
Certificate issuer:       /CN=5c7a2328-dcf6-422c-86d8-1338335ce380
Certificate serial:       010D0C9F4328584A050A6DFC53D174F0FE17EF80
Authority key identifier: 3D:92:EA:B1:35:C9:66:55:3C:1A:19:BE:AC:96:B7:C7:7B:92:45:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/7edafa5e-1e70-347d-bc5a-d7d0740c4301.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     20473
IP address blocks:        2602:f831:c1::/48 maxlen: 48
                          2602:f831:c2::/48 maxlen: 48
                          2602:f831:c3::/48 maxlen: 48
                          2602:f831:c4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/5c7a2328-dcf6-422c-86d8-1338335ce380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/5c7a2328-dcf6-422c-86d8-1338335ce380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:6d:fc:53:d1:74:f0:fe:17:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c7a2328-dcf6-422c-86d8-1338335ce380
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=2ebbdf53-cb59-448b-b061-a83e93cba8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:ed:de:cc:ce:30:5c:ef:72:1f:84:08:af:
                    f0:36:8a:ed:b5:20:a9:e2:44:34:ec:2a:66:fa:b1:
                    97:80:c6:3a:97:44:d0:3e:62:eb:47:f5:b1:07:97:
                    29:b6:02:be:1e:9f:a3:c8:48:e8:10:f2:71:90:93:
                    9c:c2:23:96:a3:a7:36:a7:a9:e1:46:64:0e:f1:da:
                    9d:fa:2e:02:e9:43:47:a6:54:92:10:5c:ab:d1:63:
                    3a:9b:b7:cf:eb:15:1e:80:fb:07:33:57:41:d9:64:
                    d4:dd:3d:54:37:42:dd:1d:ea:d4:2e:77:22:92:73:
                    73:6c:42:06:2f:dd:9b:30:dd:cd:f2:92:f8:8a:70:
                    2b:e4:55:e3:1e:2e:13:f8:bd:7c:f4:dc:9f:08:7d:
                    99:d3:9e:e5:ee:ba:6d:65:36:73:f3:62:99:f8:a9:
                    5b:84:7e:4f:49:f5:50:f4:45:10:c7:60:4a:8a:55:
                    d4:6c:c5:8a:31:b6:86:45:0d:34:74:f0:23:34:5a:
                    52:ff:14:d0:ce:00:b9:bc:be:fc:e0:18:32:47:86:
                    7e:50:fb:dc:27:f0:16:67:51:82:fd:bd:5c:02:08:
                    16:02:a9:1f:07:3b:1a:3c:9d:2f:2a:15:4c:3e:ad:
                    c2:7b:2c:aa:8f:aa:f5:28:61:a1:b3:5c:41:c9:a7:
                    03:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:24:7A:B7:F4:9C:61:96:56:B4:1E:CE:E3:03:2D:D8:30:DE:33:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/7edafa5e-1e70-347d-bc5a-d7d0740c4301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380/5c7a2328-dcf6-422c-86d8-1338335ce380.crl

            X509v3 Authority Key Identifier:
                keyid:3D:92:EA:B1:35:C9:66:55:3C:1A:19:BE:AC:96:B7:C7:7B:92:45:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c7a2328-dcf6-422c-86d8-1338335ce380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f831:c1::-2602:f831:c4:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:09:0b:f7:6c:eb:79:a1:46:99:88:49:27:a8:cf:6a:0e:f4:
         4c:9a:5f:e6:ad:7f:3b:a6:95:5b:f4:ce:2c:cf:36:fc:e1:a8:
         eb:7c:e9:df:e3:12:95:5d:5b:4f:a2:52:03:04:bf:61:c4:a4:
         d7:a3:bf:20:fb:57:a6:b3:bb:3d:e6:f0:d3:9f:d2:9a:59:84:
         8a:46:1b:10:3f:79:70:94:4e:a3:ed:7f:c9:26:b7:61:6e:9b:
         3c:38:22:a1:4b:93:8e:dc:c7:23:c8:76:a6:bd:57:a9:da:b2:
         49:65:5e:b1:8f:0e:52:80:d6:80:1e:96:5d:31:39:3f:50:59:
         a4:f9:39:cd:be:92:c7:bb:03:b9:e5:e2:6b:88:07:e7:df:fb:
         f4:a0:27:9c:7f:e9:c5:de:bf:91:d5:da:ee:8e:c4:da:3d:1d:
         23:b0:17:54:bb:80:fb:09:77:5f:79:34:6c:3b:77:1d:d5:2f:
         48:b3:78:09:b3:b5:e6:b3:3f:f8:79:40:ad:f2:b3:02:7e:71:
         13:89:da:65:43:99:33:fa:26:4d:de:36:04:49:f9:ef:e0:60:
         9c:ff:e1:f9:5e:e0:6a:9d:d3:ee:c7:a6:a3:da:55:5a:ec:9e:
         e5:89:5a:eb:de:da:c3:d9:59:ba:64:83:45:c7:28:6f:2f:0a:
         ef:11:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:54:51 2025 by rpki-client