Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa
File:                     3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa (raw, json)
Hash identifier:          wA7h+A+9/DeEApC2O5uXswx/xAqYGq1V+APmLsbwar8=
Subject key identifier:   08:6E:43:DF:F0:30:AB:77:BB:F2:69:D3:36:AC:C2:88:B8:AD:A6:81
Certificate issuer:       /CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
Certificate serial:       010D0C9F43285848E2D11235A82BF73C14D86700
Authority key identifier: 8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     2635
IP address blocks:        2620:115:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:12:35:a8:2b:f7:3c:14:d8:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=49766902-9505-4b78-8986-681468033e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:66:36:41:4a:7f:c8:7d:18:d8:03:5a:ab:
                    9b:fc:b8:3a:be:d3:a3:0a:6e:16:a8:9c:d3:be:7e:
                    b7:20:d2:25:da:94:50:c5:56:c8:69:f0:d4:2b:0e:
                    e3:22:a1:0d:83:e6:a6:45:c8:27:a4:c5:ea:34:90:
                    ce:b0:dd:53:3a:8e:23:fd:21:ab:c7:6b:e6:d6:90:
                    64:58:95:0a:fe:de:c8:94:6b:2e:d2:1c:8c:f6:d9:
                    7a:56:2f:1b:6e:78:ba:c7:2c:ad:46:4a:e7:05:9f:
                    b1:f9:f4:fe:f7:62:c8:c2:ef:33:78:08:e9:c0:70:
                    1a:88:1d:b2:4a:7d:a5:d7:af:2c:48:36:21:07:75:
                    c9:02:04:70:98:1f:42:56:2c:f7:0a:76:10:c1:91:
                    d2:04:0f:95:29:14:c4:57:7b:72:7d:49:ed:2e:e0:
                    1c:7e:49:81:f4:a8:f9:14:1b:2a:77:9f:3d:e6:dd:
                    48:10:af:03:cc:ed:e3:3b:ac:4c:43:6c:64:a6:9b:
                    7d:1e:ce:84:8c:03:7a:95:8e:4a:b2:fa:b1:ce:07:
                    22:c2:6b:a0:61:64:6d:f2:d5:d1:58:a3:02:49:ac:
                    e5:0e:3b:60:90:05:a5:80:b0:28:00:1b:60:50:89:
                    0d:b9:27:dc:ad:fe:5e:0b:b8:70:50:57:1e:d0:10:
                    3a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6E:43:DF:F0:30:AB:77:BB:F2:69:D3:36:AC:C2:88:B8:AD:A6:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/3f72cbe7-6e99-37b3-b11d-c8fb21d4bb16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl

            X509v3 Authority Key Identifier:
                keyid:8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:115:c000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f8:2a:fd:14:f9:16:60:8b:61:31:38:99:29:55:84:5c:71:
         17:77:e0:39:b7:4d:75:46:f1:7c:9c:3e:d1:ed:57:70:ff:e8:
         5e:51:62:f1:d5:11:6e:92:78:41:d2:ae:4a:85:f0:8b:f4:da:
         cd:9a:b3:70:ba:d6:51:a7:e0:09:a3:87:d4:43:66:4b:ed:92:
         45:51:0a:83:df:41:66:70:5e:42:69:ae:c0:d7:01:4f:4f:28:
         9e:dc:b4:9c:d0:ef:42:04:27:76:20:a8:82:a6:d1:85:93:2f:
         e2:bc:66:5d:55:be:6b:b0:8a:fe:2b:d6:43:59:68:c2:fa:70:
         86:be:f9:b0:0f:95:59:2c:76:2c:da:a6:4b:86:85:fb:f6:de:
         06:60:1e:b4:29:1e:bf:90:d1:11:fd:dc:89:8b:ea:27:7b:6d:
         74:77:ab:17:6d:f4:bb:4a:66:d5:ff:b4:70:51:f0:ae:e7:e0:
         8b:5c:43:d6:3c:64:fe:5d:6a:b6:fd:54:34:9f:0f:7f:2e:ce:
         c0:8d:62:41:07:98:20:29:5f:27:1f:9a:69:fa:bb:f5:f9:2d:
         68:96:78:ed:81:3b:34:3f:1d:da:ab:28:aa:6d:1b:4e:7e:cc:
         8e:3b:1d:35:b3:a6:57:99:71:67:4d:5b:e5:83:ac:be:42:2e:
         83:17:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:39:41 2025 by rpki-client