Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa
File:                     8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa (raw, json)
Hash identifier:          b3uVF3IONblrRq1ILUhwv420lHgFF/Q/QkIbcMTXAbg=
Subject key identifier:   78:A5:35:AC:59:CE:25:8D:00:CE:EA:14:A2:C3:71:0F:8B:9C:57:6E
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F432858491246AC8833826AF9B331EC80
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     20454
IP address blocks:        2607:fe80:1000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:ac:88:33:82:6a:f9:b3:31:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=fc6ecf4e-891a-474e-91c1-4b70f092f4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:8d:8a:b2:ad:bf:2a:d6:e4:17:52:cc:9e:
                    23:d0:a5:aa:bc:5d:25:e6:83:2b:c2:ba:87:f9:a7:
                    35:bd:6b:92:08:b3:be:01:6a:60:54:1d:18:ca:90:
                    46:f8:92:04:a0:53:ab:5c:99:7c:a6:0c:b5:d2:49:
                    1b:b5:61:72:bd:76:6c:9d:2d:54:6d:19:28:4e:93:
                    a4:88:0c:9a:f0:2d:7e:20:65:6f:7a:0a:fe:3f:28:
                    38:e8:64:3d:dc:80:8f:f6:0b:1b:b0:87:9b:25:d6:
                    31:d0:5d:72:ed:4c:8e:80:f6:1c:fa:26:58:98:97:
                    5c:7f:84:ac:b6:6a:52:0e:a2:f2:d3:a1:db:db:ef:
                    f4:31:f1:1a:f7:24:11:44:b9:dc:42:1b:8d:28:9a:
                    cc:52:90:63:b4:aa:b8:9c:f9:29:aa:ee:1a:73:ac:
                    c8:1a:62:7e:c1:32:bf:74:95:ce:5a:2b:43:d4:e3:
                    d6:8e:7f:be:f7:b1:b0:2b:0d:69:05:d3:0a:b4:69:
                    e3:b4:93:ec:d3:98:da:e4:24:57:9f:0f:16:4f:e3:
                    17:6c:6f:5e:9a:66:7b:ab:e7:fc:f8:9b:24:50:88:
                    d6:c1:a4:ba:40:6e:d4:f4:9a:4e:d5:01:8a:16:75:
                    d3:b8:3d:9d:47:15:aa:74:1c:c8:e2:b2:7e:0c:c1:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:35:AC:59:CE:25:8D:00:CE:EA:14:A2:C3:71:0F:8B:9C:57:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/8f0d3524-a4a4-3c12-80ba-e1f0377004f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe80:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c0:18:64:8b:3d:d5:e2:c8:cf:ff:cf:8a:58:18:a2:27:e9:
         48:6f:5b:77:d6:34:b9:e1:14:15:08:5d:b2:5e:44:35:ca:62:
         4c:78:58:a0:7a:69:55:07:f4:3b:a8:fc:3c:8e:53:24:0c:f9:
         36:7d:52:7b:bf:d0:25:34:0c:25:34:dc:06:4c:5a:25:59:35:
         59:d1:a7:7e:54:6e:2f:c5:c7:08:9e:02:2b:cd:ed:e6:92:fa:
         70:9d:80:60:50:ba:43:5a:39:11:2d:2a:bf:07:a0:1a:4a:b6:
         78:ba:7f:4d:23:44:42:af:f7:d4:12:56:cb:07:f9:75:f4:b8:
         85:b4:a1:77:dd:03:53:b9:fb:af:33:44:10:a6:5d:ec:eb:b7:
         d1:d3:b1:99:ac:a3:a3:47:29:bf:f8:86:1d:69:07:80:7a:ae:
         16:d9:ca:ae:01:7a:55:ce:1c:d1:8b:dc:55:bb:a6:40:bd:18:
         bc:da:1e:8e:b8:55:87:f8:a3:bd:d5:68:2c:a9:0e:ca:56:1b:
         75:9c:d8:c1:d5:3b:40:a4:f6:3d:04:f2:40:74:c4:6d:ef:61:
         63:70:13:0f:52:bd:a0:a7:3b:be:52:32:d8:23:16:52:95:a8:
         c0:c5:70:8d:e0:b1:03:85:40:32:36:9b:c9:e4:87:68:b5:dc:
         d9:26:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:31 2025 by rpki-client