Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa
File:                     994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa (raw, json)
Hash identifier:          /kHOHOaZ6RrwPryDJVF4zt5ocn09CzLr4kOSb/C7Ofg=
Subject key identifier:   3E:88:1F:5A:0D:3B:08:C3:F8:8B:C8:28:74:7B:CE:AE:F6:CB:50:39
Certificate issuer:       /CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
Certificate serial:       010D0C9F43285848C2B64342EF6C6A90D43AEF60
Authority key identifier: C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     400541
IP address blocks:        2602:fb56::/40 maxlen: 40
                          2602:fb56:100::/40 maxlen: 40
                          2602:fb56:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:43:42:ef:6c:6a:90:d4:3a:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=0e67c79b-ea7f-46f3-b7b3-5474a00bd4d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:a0:9b:9e:48:b3:67:f4:5d:a7:55:c1:f5:
                    fe:e2:fb:95:b5:ff:43:16:80:18:4a:bd:85:8b:19:
                    e2:2e:89:29:d1:b0:69:c6:3b:a7:f9:6f:ba:b9:05:
                    5c:a1:bd:1a:d6:ea:33:cd:62:48:8d:aa:c8:f4:fc:
                    ab:be:36:6e:21:52:0f:82:fc:c3:76:5e:2b:ec:3e:
                    b3:db:e0:0a:74:6e:2e:85:19:f9:00:8f:2f:04:70:
                    ee:73:26:bd:71:ea:18:f8:9d:4b:6e:44:e0:f2:04:
                    84:e3:42:a2:11:2d:1b:a0:46:c5:db:ed:8c:09:d8:
                    d5:1a:1a:3b:6a:9e:1b:c0:02:06:27:8e:9b:e3:9f:
                    aa:a6:fa:97:31:b8:ae:2d:0c:1e:ff:5a:1a:4e:8b:
                    1b:9a:54:35:bf:59:92:48:ab:64:7a:fe:a8:78:da:
                    d8:04:ec:de:7e:cb:2a:90:2b:45:fc:2f:5a:ad:70:
                    d8:87:de:19:ee:26:22:6f:eb:9a:55:05:d2:45:92:
                    03:03:13:df:73:7a:3b:b1:65:0f:58:d2:35:ea:d1:
                    d5:06:6f:e6:25:ab:21:14:bf:21:c3:76:4b:5b:15:
                    fd:ae:4f:ee:99:79:43:dc:e3:2a:0d:e6:f0:6b:99:
                    f3:34:38:1b:34:1f:c6:e4:cd:75:65:b2:c7:bf:4d:
                    cf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:88:1F:5A:0D:3B:08:C3:F8:8B:C8:28:74:7B:CE:AE:F6:CB:50:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb56::-2602:fb56:2ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:76:2c:d1:ec:15:6b:b7:15:46:8d:5e:07:4c:64:e9:fa:3f:
         e9:a1:60:b5:97:b1:fc:0f:11:12:49:a5:71:0d:9f:a9:83:80:
         d9:b0:82:9a:77:89:20:f5:f5:82:ec:7f:32:5e:ec:08:99:09:
         88:e9:7f:59:62:32:1e:ba:e5:81:17:d6:6c:3b:b1:84:9a:49:
         e5:fa:a4:5e:db:3d:96:36:f1:6a:b7:2a:ee:11:70:c3:dd:9d:
         40:38:f0:49:7e:83:48:7e:df:67:c2:75:ae:04:9c:18:10:ea:
         e8:fb:51:a5:9c:ea:a9:18:21:cd:0c:8d:0e:7b:42:7d:4d:a9:
         c6:d3:13:fa:ef:4c:3c:f1:1f:32:a6:ac:2e:17:14:40:0f:e0:
         65:d3:94:73:ba:32:c0:24:d4:a8:4c:d7:a8:41:3e:59:31:65:
         ee:c6:78:40:92:9d:7a:49:e3:24:70:3d:8d:83:8d:85:a9:38:
         bc:85:d9:cf:12:e3:19:02:88:2c:2d:77:06:4a:de:6d:05:06:
         12:0f:2f:23:bd:1d:a9:c8:74:51:ae:85:e0:a4:2f:cd:e5:fd:
         09:48:93:a7:6c:b8:fc:e5:fe:74:85:ad:c0:32:8b:4a:3e:45:
         1f:8d:b6:19:a6:9b:44:8a:e9:11:db:f0:71:9c:0d:b4:43:f1:
         8e:7f:5f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:22:43 2025 by rpki-client