Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/2f87e556-cd20-3582-a238-c3d71f78eb10.roa
File:                     2f87e556-cd20-3582-a238-c3d71f78eb10.roa (raw, json)
Hash identifier:          MFMcdn8EQko/nm5TkrdXyTcjrE9DfWC4NeRIU1m3Xc0=
Subject key identifier:   94:B9:99:6F:DC:04:15:C0:3B:F8:2A:21:A0:B7:36:40:17:FF:6E:9C
Certificate issuer:       /CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
Certificate serial:       010D0C9F432858495ABEE3346FE22BEA2C4B9F00
Authority key identifier: D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/2f87e556-cd20-3582-a238-c3d71f78eb10.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     398291
IP address blocks:        2602:fb10:5f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e3:34:6f:e2:2b:ea:2c:4b:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f9cfef-e787-4c93-b24d-29ad31dc2128
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=85299cb4-533d-46e4-acd5-aee785f1c43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3f:35:13:66:2b:ce:93:50:7e:c2:3b:68:61:
                    fa:22:ee:55:e2:36:bc:56:4a:4f:a2:b3:1a:44:8a:
                    72:75:ea:3c:fc:e9:47:98:5d:ca:ff:04:14:6a:14:
                    cc:a6:43:1d:ed:d9:a6:4c:20:91:6b:29:67:42:c6:
                    30:b5:cb:52:a2:f2:d1:2b:5c:d9:98:6e:51:33:dd:
                    1e:d8:f3:c8:5b:07:9b:c0:0f:bd:46:86:ea:15:d9:
                    fb:82:56:b0:ff:05:59:61:3a:fc:b6:65:f1:df:c0:
                    3a:53:42:30:0b:f2:38:45:e4:34:d2:07:6b:bb:96:
                    23:9a:6f:43:8d:5d:29:56:69:9b:5e:80:7e:f7:78:
                    06:df:94:68:77:7d:f9:9d:08:b4:d3:ee:12:95:7f:
                    3d:b2:a8:d4:43:36:65:4f:31:b3:cd:a2:f8:db:3c:
                    63:a0:07:95:e2:4e:7f:af:13:06:30:f5:72:7e:fe:
                    cc:c6:87:9e:0f:88:5b:9b:ba:29:e8:22:c2:47:49:
                    9a:6c:23:dd:ba:d1:e7:81:57:cd:66:d2:4c:25:19:
                    51:db:56:b2:30:2f:b5:4d:f0:ce:a8:a3:9f:52:3e:
                    cf:d6:cd:25:0d:23:05:70:44:aa:37:1e:1f:45:98:
                    6d:bd:78:7d:62:05:bb:91:ee:14:0e:c1:a8:9e:9c:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B9:99:6F:DC:04:15:C0:3B:F8:2A:21:A0:B7:36:40:17:FF:6E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/2f87e556-cd20-3582-a238-c3d71f78eb10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl

            X509v3 Authority Key Identifier:
                keyid:D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb10:5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:33:36:f9:f2:4f:93:73:ee:a4:c5:d0:d7:06:a6:c3:9d:06:
         60:8b:f1:99:bf:c6:e2:9f:75:7a:4a:4f:27:cd:ee:10:9d:14:
         ea:e4:1b:58:26:86:be:35:76:c1:b3:8d:3f:80:ae:04:f0:9d:
         b9:42:98:05:d9:17:d8:2a:2e:d7:6a:46:f0:f5:6b:ff:28:7d:
         c5:61:d6:96:84:2c:92:a6:cb:75:cd:cf:ee:85:42:79:4b:70:
         b9:9e:a0:50:06:4d:1e:77:e5:85:ef:ee:86:fc:d7:b6:ba:7f:
         72:b8:69:ca:a5:59:5c:6c:40:c5:a5:f7:89:80:55:7b:4a:d5:
         ee:a7:26:2c:79:85:ea:c4:a0:96:79:ff:bd:78:2a:b0:f2:f6:
         93:29:7f:28:b1:ca:72:be:36:55:92:32:08:87:71:79:40:cf:
         0d:12:d9:1c:0a:13:34:d3:18:f1:70:d2:5d:95:54:e5:d1:86:
         1a:a3:be:73:58:a9:1c:30:37:8c:21:3b:2f:31:86:3e:df:02:
         7e:06:5d:78:e0:62:81:fd:a5:09:86:00:a6:44:b4:e4:b4:bd:
         74:6b:a3:5f:f9:c4:a8:0f:48:9b:cc:9e:5f:5b:de:10:b3:bb:
         f5:39:77:80:f0:38:a2:c4:3d:ff:cc:c9:16:6f:47:e9:52:64:
         b2:52:41:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:50:00 2025 by rpki-client