Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa
File:                     43b737f8-5d33-38f5-9659-04f92c5f69ec.roa (raw, json)
Hash identifier:          yoxStVBAyvQZ0BaYXJtKfgxcICozQGRoqAFlmQyCohI=
Subject key identifier:   86:56:FA:81:38:ED:CF:09:ED:8D:12:BC:F4:7C:F2:F4:9B:7D:D4:56
Certificate issuer:       /CN=a076692a-65ec-4598-b231-91f6d6e63c63
Certificate serial:       010D0C9F432858488038131979892114CF034A40
Authority key identifier: D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa
Signing time:             Fri 10 Jan 2025 18:23:20 +0000
ROA not before:           Fri 10 Jan 2025 18:23:20 +0000
ROA not after:            Thu 10 Apr 2025 17:23:20 +0000
asID:                     401418
IP address blocks:        2602:f7d0::/48 maxlen: 48
                          2602:f7d0:1::/48 maxlen: 48
                          2602:f7d0:2::/48 maxlen: 48
                          2602:f7d0:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:80:38:13:19:79:89:21:14:cf:03:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a076692a-65ec-4598-b231-91f6d6e63c63
        Validity
            Not Before: Jan 10 18:23:20 2025 GMT
            Not After : Apr 10 17:23:20 2025 GMT
        Subject: CN=1cd60821-9409-4ffa-8d57-3a491cd3da2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:28:6a:36:ab:0b:7c:17:52:fa:a9:c8:aa:2a:
                    af:7f:df:56:f4:9e:df:ca:4d:c7:35:8c:ea:f4:b6:
                    63:98:39:f4:bf:13:ee:41:fc:d6:6b:f9:be:f1:c2:
                    27:f8:36:59:b8:ef:d7:f1:5a:dd:6f:3b:bd:a1:7c:
                    d0:2d:9d:26:66:88:b5:ea:0b:d4:9e:64:c3:6d:b5:
                    0f:3e:16:67:31:1f:42:97:aa:0f:c8:92:55:11:4a:
                    09:22:3c:ba:3c:c4:8a:d9:c6:df:15:bf:22:40:f3:
                    39:f2:f4:d5:bf:d8:7e:d5:7a:7c:25:a9:a4:e2:bb:
                    89:f5:81:a3:c7:b9:6c:39:63:2f:43:ff:fd:07:55:
                    b9:ab:38:9d:63:5e:72:ff:49:da:45:2b:16:a4:f5:
                    cf:ba:ae:de:80:1d:2b:ea:43:84:3c:1c:d8:03:7c:
                    d4:0b:6f:92:a6:d2:d9:11:7e:39:72:a6:49:bc:e3:
                    13:0f:28:05:4c:a8:8e:3b:36:0f:23:ca:08:72:6e:
                    84:8a:6c:28:f6:5f:dc:db:33:e3:10:6a:b0:79:8c:
                    39:54:cb:a6:ad:40:5e:7c:a4:b4:ed:5b:b9:6d:3f:
                    f3:a8:b3:4b:f0:5d:eb:e6:b5:37:3c:54:d1:53:4a:
                    e3:3a:1d:19:f4:90:6e:4b:4b:d7:e7:34:db:06:1e:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:56:FA:81:38:ED:CF:09:ED:8D:12:BC:F4:7C:F2:F4:9B:7D:D4:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl

            X509v3 Authority Key Identifier:
                keyid:D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7d0::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:67:73:53:cd:9b:9b:75:52:a1:1c:25:1f:f6:01:63:b7:f8:
         8e:6d:94:f5:41:3a:16:ae:75:aa:8a:ef:d7:f5:66:64:bc:59:
         48:56:f3:41:e3:07:53:27:37:79:08:3f:48:b0:7a:4f:a3:da:
         05:b6:3b:49:9d:2c:98:9a:27:45:1e:2d:46:29:f3:5e:88:d4:
         a8:fa:dd:03:b6:dd:f9:5b:63:65:0f:21:d3:45:e1:a1:14:cc:
         64:7e:df:48:f0:cb:4a:c0:9c:1e:b4:6d:ca:27:7f:a1:a5:de:
         c8:18:1a:03:33:97:c5:bc:80:fb:7f:e8:66:8c:74:68:3f:71:
         a6:81:f1:a8:82:c7:06:6a:cc:04:f4:d4:7e:12:19:31:75:9c:
         50:13:80:c2:94:81:13:04:5f:3e:7f:53:dc:38:52:dc:d3:e7:
         85:55:87:8d:34:36:74:1a:f2:d3:28:92:f3:7c:09:71:67:2d:
         b8:cb:21:23:86:02:75:7e:01:ec:a1:36:b0:97:5e:2c:f8:8a:
         16:43:fc:4c:00:bd:30:ee:7e:1b:12:03:50:9e:95:52:8c:b7:
         50:f9:fb:5d:dc:f6:88:e6:68:1b:74:1d:b1:cd:1d:b8:cd:56:
         8e:69:94:66:45:54:d8:12:a6:7c:80:12:a9:fb:00:cf:2f:99:
         78:a6:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 15:51:31 2025 by rpki-client