Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/a847dbd4-56b3-34f7-8a9d-0ee415227c7a.roa
File:                     a847dbd4-56b3-34f7-8a9d-0ee415227c7a.roa (raw, json)
Hash identifier:          hX5ZNA867ZCu36zOCtQhBUVedhGQV6qH2ubTDs3OPAo=
Subject key identifier:   8B:63:8D:DF:58:BB:05:00:76:71:69:F1:54:6B:D7:CD:F4:2D:AC:A9
Certificate issuer:       /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Certificate serial:       010D0C9F43285849071BF46BEA6DDEE44F79ED80
Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/a847dbd4-56b3-34f7-8a9d-0ee415227c7a.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        2602:f805::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:f4:6b:ea:6d:de:e4:4f:79:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=7196dced-1bdf-41da-a0fa-8e84f63a68db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:9d:1a:eb:ae:85:33:27:0f:2b:4f:0b:21:
                    b6:af:70:60:2b:9f:a2:03:94:13:0e:dc:dd:08:2a:
                    03:2b:fb:b1:1d:95:91:88:f3:d1:de:61:18:a1:8e:
                    32:34:a0:e0:58:90:9b:5e:27:f3:08:35:29:a8:5e:
                    fc:94:6d:2d:a9:07:64:42:81:50:ba:9b:8c:df:1c:
                    3b:b7:22:85:37:a0:c1:0a:d7:2a:5e:12:54:48:4d:
                    30:f3:9f:92:cd:f2:88:f8:c1:9f:c0:06:61:66:51:
                    7b:50:fb:6b:f8:8c:e6:8c:51:94:04:c9:66:4b:9f:
                    3c:b6:26:9a:3f:f8:da:d5:84:a8:be:89:81:b9:47:
                    da:e9:a5:92:0a:a1:6b:65:fa:21:28:9c:30:82:83:
                    3f:0b:df:49:6b:4a:06:24:06:68:19:f7:8b:9a:bb:
                    bd:d0:f9:76:da:d7:8e:5d:cf:fe:1f:0f:fc:33:c9:
                    0d:32:0c:43:05:6f:92:96:bf:cb:22:17:19:c9:ec:
                    5f:23:83:1b:48:c7:48:d3:e6:52:b6:d3:64:0f:4a:
                    48:f4:b1:43:2d:34:8b:23:44:e1:15:eb:4b:5b:22:
                    08:58:f1:03:b5:52:35:e2:8f:ac:14:2e:32:5c:12:
                    55:6d:62:d2:88:15:89:64:12:6b:c6:d3:95:6e:79:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:63:8D:DF:58:BB:05:00:76:71:69:F1:54:6B:D7:CD:F4:2D:AC:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/a847dbd4-56b3-34f7-8a9d-0ee415227c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl

            X509v3 Authority Key Identifier:
                keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f805::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:62:87:c7:ce:b5:33:24:1d:b9:fb:c0:31:4d:ca:cf:86:5d:
         d3:35:41:52:ec:44:7b:29:3d:e3:29:bb:9a:4d:ca:90:79:05:
         c0:9a:d8:48:7d:e2:11:3f:16:38:70:88:95:c2:de:7f:22:7a:
         f9:a1:62:ec:4a:cf:1e:b7:3a:4d:fe:cc:ca:c3:9a:a5:80:46:
         1a:57:52:02:5d:e9:97:4a:f9:7a:a8:00:c8:e1:19:8e:ba:56:
         60:77:f9:cf:bd:98:ca:62:57:c0:27:65:57:8c:76:f4:86:1f:
         66:5b:34:b2:d9:e8:d3:3a:74:19:20:6a:93:4d:f3:af:cd:ca:
         5c:e9:8f:56:52:f6:9c:10:d3:1f:35:b1:d8:72:64:df:cf:eb:
         fb:c3:ef:81:e5:4e:26:88:28:7d:98:e8:af:7b:18:41:0f:90:
         de:32:eb:21:c9:42:1b:3a:77:d7:af:f4:74:2c:b6:f0:f2:65:
         9e:c5:7c:90:80:90:a5:f9:97:a5:60:31:be:b7:0e:e3:0c:1a:
         1c:c1:19:11:21:57:9d:d3:22:8c:7f:ad:ea:07:1a:eb:58:e5:
         18:95:bd:5a:1b:7c:0c:a5:22:8c:ca:ed:a4:21:22:1e:66:6c:
         f8:9d:0b:c2:90:c5:30:8a:f2:4b:8b:11:6a:3d:28:da:bd:67:
         a3:76:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:24 2025 by rpki-client