Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa
File:                     bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa (raw, json)
Hash identifier:          Q1aGurZee7QSlNgf/yiK8xEVKUm4ggUtVsUVocs9PgI=
Subject key identifier:   2F:D5:B5:EA:31:4B:87:71:94:4E:7E:F4:FC:6B:BF:95:C3:85:F8:1B
Certificate issuer:       /CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
Certificate serial:       010D0C9F4328584944693860A2265E7E0313C400
Authority key identifier: 37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     14478
IP address blocks:        2602:fb65:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:38:60:a2:26:5e:7e:03:13:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b01f829-1ce6-47d5-af2d-f61a257f023f
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=42885fba-c308-41c6-a446-5e695c978736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:2a:63:c0:ce:03:1b:29:6c:63:f4:ec:da:
                    c5:36:62:54:d2:71:8a:7e:ca:52:de:b0:b5:f6:50:
                    a2:8b:38:04:eb:2a:66:e0:98:9e:28:f7:07:c4:87:
                    5b:dd:e2:f4:7b:d6:58:41:6f:68:da:1a:2b:65:6e:
                    2c:c3:77:2e:a9:4d:6c:4e:31:67:e3:ae:41:f1:59:
                    01:57:be:a7:e3:41:81:d5:1d:b8:d7:9d:77:60:fa:
                    42:c0:df:77:2c:70:69:5f:8b:29:06:86:66:0f:0e:
                    1b:8c:1c:08:47:30:59:c1:32:4e:bf:ff:ec:ca:30:
                    74:d3:cb:30:5a:28:83:76:63:d2:39:a1:70:c1:5e:
                    bf:bb:d9:88:93:6e:35:7f:45:2e:02:56:af:e7:47:
                    bf:83:0b:d3:9f:5f:91:66:a7:98:cb:6f:01:f5:fd:
                    eb:c2:d4:f5:19:71:79:ea:9b:b3:78:d0:45:19:9c:
                    d8:d4:cb:96:53:04:c8:ca:d6:dd:fa:13:5e:9c:4b:
                    0d:63:43:70:60:63:b1:e3:0b:c3:0c:f3:06:68:9f:
                    dd:6e:1e:8b:6b:10:a0:e9:61:a4:a4:3c:fe:b7:d6:
                    00:04:18:fb:52:44:2f:bb:3e:7c:d1:8b:5a:33:35:
                    61:ca:6f:09:93:b2:4a:4f:62:e6:e9:62:93:32:7c:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D5:B5:EA:31:4B:87:71:94:4E:7E:F4:FC:6B:BF:95:C3:85:F8:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/bd6b9ef4-4d13-3bfd-b0fd-212d7fc9a44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f/8b01f829-1ce6-47d5-af2d-f61a257f023f.crl

            X509v3 Authority Key Identifier:
                keyid:37:A5:20:1E:1E:FE:C4:2F:B6:6D:D4:EA:E3:16:F7:30:FE:EF:91:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8b01f829-1ce6-47d5-af2d-f61a257f023f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb65:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c5:ed:91:9b:81:78:c5:0e:38:44:33:49:ca:b8:bc:6c:50:
         73:8e:c6:a2:38:9e:1a:82:29:46:d0:2e:6e:fe:dc:87:77:88:
         d0:59:f9:e5:56:ac:96:1e:97:a0:29:94:f1:fc:dc:a2:50:41:
         b5:3d:ac:b0:2d:69:7f:af:64:d1:00:93:52:44:c6:7b:ae:cf:
         b2:12:2d:0c:74:c9:f9:ea:24:fc:43:4d:06:f6:62:08:50:af:
         8b:f8:fd:40:27:9c:c5:db:a7:5a:a4:29:d3:d8:ef:97:ba:33:
         01:5c:b3:7e:6f:1f:0b:fa:72:b2:d2:6d:06:64:ed:69:30:35:
         d9:c1:8a:f4:2d:f0:09:a3:8b:37:2f:03:4d:01:e5:80:3c:a2:
         40:3f:51:51:76:4d:5e:6f:80:15:15:a8:35:4a:dc:d3:32:7f:
         5f:76:bd:e4:1d:d5:13:3c:38:52:99:41:38:1c:ce:e1:2c:43:
         16:fb:8a:f4:ca:06:7b:f8:dd:6a:9e:8e:e2:00:20:3b:58:94:
         79:23:5e:81:85:cc:4f:9f:97:22:0d:0d:e1:ca:e1:a7:bd:d8:
         97:3f:80:49:d5:70:47:3b:aa:2b:04:b3:6b:01:13:46:5b:e5:
         7d:11:0a:a7:49:74:f1:1c:b2:c1:e5:49:81:4d:87:73:6e:39:
         10:c1:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:18 2025 by rpki-client