Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/fb533b30-7d52-3fc2-9865-814bc4c72baf.roa
File:                     fb533b30-7d52-3fc2-9865-814bc4c72baf.roa (raw, json)
Hash identifier:          3w0I316ueromMZleiFpHW3Mjwe2h07bWYZrQh+XkJYk=
Subject key identifier:   AE:10:56:24:3D:BE:96:77:71:62:30:E4:A2:C1:67:E5:A7:5A:79:FF
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F43285848D2113EE9A0AC264613D18160
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/fb533b30-7d52-3fc2-9865-814bc4c72baf.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     22295
IP address blocks:        2602:fb54::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:3e:e9:a0:ac:26:46:13:d1:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=00e689b1-7705-4792-b72b-f47979125a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:07:88:0d:3e:a2:e7:8f:5d:c1:a4:94:af:
                    26:05:1e:f1:83:ac:ec:9b:c4:60:ba:be:1b:bb:5b:
                    47:a5:97:4f:00:70:bb:cc:6b:16:c6:5a:5a:e5:92:
                    75:d4:1d:f0:7a:b3:fb:1e:55:ef:bb:b7:00:92:ca:
                    21:00:c7:c4:ca:d7:86:ad:7d:f8:cb:38:ee:43:6c:
                    c1:81:a5:18:ba:88:1b:40:77:64:f4:47:e5:db:1a:
                    cd:be:63:71:e8:83:60:eb:f8:e4:a4:6b:d3:f7:71:
                    74:18:21:25:14:93:df:90:fa:32:7b:2a:70:74:2b:
                    72:65:57:a4:5c:61:0b:65:51:d8:d1:f1:33:4b:fe:
                    ed:e0:91:07:52:62:3b:a6:06:a2:32:ba:4a:f0:35:
                    19:95:39:dd:d4:42:99:37:fc:26:87:c3:86:b9:33:
                    89:07:c1:de:76:f7:3a:77:a0:8e:d8:57:66:de:af:
                    ac:cb:ba:8d:aa:aa:9a:2d:2e:d8:34:f6:e5:2a:5b:
                    e8:81:08:73:41:d3:95:37:0f:2c:0a:fe:bb:8e:b9:
                    5e:e4:3e:af:aa:18:a1:01:67:f4:ec:71:86:07:31:
                    a2:9a:8a:16:26:9e:f9:4f:ed:42:cc:9e:3c:ad:e1:
                    06:0d:43:4b:76:f6:7e:fe:cb:82:d8:b2:56:83:74:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:10:56:24:3D:BE:96:77:71:62:30:E4:A2:C1:67:E5:A7:5A:79:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/fb533b30-7d52-3fc2-9865-814bc4c72baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:06:82:43:08:d2:3b:16:9f:75:9f:a1:f4:3b:d6:e4:63:
         55:a0:15:d4:26:15:12:5f:88:63:fe:37:5f:48:38:f4:4a:0b:
         ea:bd:83:6b:a4:4b:42:59:ac:d1:4d:7d:55:89:36:b4:a5:5e:
         af:bd:92:c2:59:61:96:fd:9b:51:78:c1:c2:0d:30:cd:16:c9:
         aa:80:3a:c4:38:38:43:78:93:2a:04:79:1b:ee:ca:ac:2d:02:
         66:6c:9b:68:33:31:7a:31:10:b7:6d:16:92:65:70:65:d6:89:
         bd:37:59:6f:82:c9:57:99:ad:74:d6:6b:50:13:d5:12:11:aa:
         7b:4e:34:e2:5a:1c:86:89:b5:9d:f3:85:38:09:bd:75:b3:5b:
         be:c9:e6:18:2e:17:86:5d:36:61:4e:8f:94:7a:c2:fb:ab:e2:
         8c:db:45:26:08:0b:f8:b7:e4:f5:66:12:c9:a8:4c:f8:d6:34:
         37:04:d1:02:15:07:a5:85:08:89:fa:b1:bc:8e:19:55:4d:23:
         a1:7e:13:8b:4d:ce:f9:dd:85:71:7c:73:83:f7:da:57:2f:88:
         e1:15:45:55:92:9d:0f:33:26:dc:7a:7d:ae:65:a2:8e:6b:a3:
         3c:3c:ec:54:83:c8:11:5e:32:aa:3f:ab:70:fa:04:5d:e9:37:
         37:0c:ec:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:14 2025 by rpki-client