Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/456e2110-489e-31a1-a7c5-156e1df7e226.roa
File:                     456e2110-489e-31a1-a7c5-156e1df7e226.roa (raw, json)
Hash identifier:          p1G/vV/sQU2ohueSEXAzCxgNUNudxUXkd9T1dv4wCzg=
Subject key identifier:   1F:59:1D:88:55:43:F6:8D:CD:A3:1E:C2:55:46:3F:07:C1:FB:FB:17
Certificate issuer:       /CN=2a2190d0-2edf-4b5e-a6f6-c788ca636585
Certificate serial:       010D0C9F432858491D718992C71E680CF30CB500
Authority key identifier: 50:09:31:6F:BA:FD:0F:52:FB:AA:67:0B:4C:76:D2:DC:90:EF:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/456e2110-489e-31a1-a7c5-156e1df7e226.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     198949
IP address blocks:        2620:104:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:89:92:c7:1e:68:0c:f3:0c:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a2190d0-2edf-4b5e-a6f6-c788ca636585
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=117f6760-4343-41f7-873e-448b1966b5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:28:f4:aa:01:8c:b9:71:9c:a9:26:18:70:
                    43:49:76:0e:a3:e4:5b:d0:49:e9:d6:1e:d3:2d:b2:
                    08:90:98:25:e6:fe:c8:fc:86:89:eb:cc:3d:45:c2:
                    0b:aa:fb:70:fc:39:72:60:c3:bd:b2:d3:c5:b4:e7:
                    3f:35:74:e4:51:26:a2:95:bf:cb:ef:b0:68:3f:4e:
                    be:8b:a8:71:88:70:6f:10:29:59:8c:f9:f0:0a:b3:
                    5d:22:fc:74:a5:c4:02:16:36:67:07:ca:e7:60:e6:
                    6f:2c:fe:31:27:2f:60:49:36:b0:08:38:9d:a9:c6:
                    43:64:69:46:4f:39:9f:71:14:e7:97:7b:3c:da:31:
                    06:ae:71:9d:fd:90:6c:c5:19:d3:22:c6:6f:6c:95:
                    a7:2a:51:67:e7:bd:c6:f3:67:a2:36:bc:ac:3e:59:
                    ed:25:cd:da:96:b1:88:48:8a:0c:78:57:03:a2:ed:
                    15:9c:fc:a0:47:48:71:ee:7a:cc:75:f5:71:95:75:
                    a7:ed:53:e4:38:99:14:c8:00:3d:74:60:92:07:1c:
                    b5:79:3d:8b:bc:47:51:f6:d3:92:94:77:e1:36:8f:
                    75:91:db:62:23:13:0b:9a:f6:0c:7b:79:b2:3f:4f:
                    43:16:9b:8b:27:50:f1:c0:34:26:cb:4a:62:e9:95:
                    aa:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:59:1D:88:55:43:F6:8D:CD:A3:1E:C2:55:46:3F:07:C1:FB:FB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/456e2110-489e-31a1-a7c5-156e1df7e226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.crl

            X509v3 Authority Key Identifier:
                keyid:50:09:31:6F:BA:FD:0F:52:FB:AA:67:0B:4C:76:D2:DC:90:EF:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:90:85:35:29:96:4e:8d:ed:f7:92:0c:0c:3f:60:b6:c3:8d:
         00:a9:77:d0:96:b8:bb:2e:10:73:17:8c:8a:ab:1b:aa:f3:02:
         22:b7:bc:c0:8f:11:71:a6:9f:b1:ba:36:e1:28:4f:1f:a1:7b:
         da:d5:e8:00:30:ef:b4:a5:0f:35:29:bb:fb:5e:ce:49:5b:ad:
         38:79:48:c7:19:00:17:00:c9:1d:16:3b:77:05:c9:aa:1e:4f:
         d2:3e:25:f6:9d:54:79:22:89:18:1c:90:4c:d7:78:2f:de:da:
         1a:b9:4c:de:cf:fa:4c:f4:36:78:c2:d9:c0:cf:6b:11:7f:d6:
         3e:7a:ad:70:57:fa:a7:ef:ea:f9:3d:cd:11:58:ee:10:30:8a:
         19:b7:da:e6:7e:56:ca:dd:32:0d:e5:29:30:10:e6:51:39:f9:
         19:e2:91:b6:f7:c1:96:2c:4f:c1:e8:9a:c5:9d:82:8e:b8:a3:
         52:b7:47:65:5b:62:07:4d:7d:cd:bd:00:ea:09:13:ae:6f:37:
         1d:ad:08:e5:cf:2f:c9:46:9e:40:17:7b:b2:ef:d2:5c:69:33:
         dd:32:7a:0a:89:0d:fe:73:6d:75:30:c7:5a:98:a0:21:57:77:
         f0:04:e5:38:6e:be:60:6a:fa:c3:76:67:a3:c3:9b:ca:03:b7:
         5e:b8:51:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:52 2025 by rpki-client