Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/c40d1b6f-7d48-3bfa-b57e-900f863667f0.roa
File:                     c40d1b6f-7d48-3bfa-b57e-900f863667f0.roa (raw, json)
Hash identifier:          xBV0AYbXKdikBJ64e1spPLkdkpCzzBM8r5L6lbM7Xdo=
Subject key identifier:   31:11:7F:45:F0:68:83:6F:4D:49:B7:1F:F5:4A:0C:7B:D8:A4:99:1F
Certificate issuer:       /CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
Certificate serial:       010D0C9F432858495ABECCA3CD2D9134EC51B780
Authority key identifier: A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/c40d1b6f-7d48-3bfa-b57e-900f863667f0.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     25735
IP address blocks:        2602:fb40:90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:cc:a3:cd:2d:91:34:ec:51:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=fd7ba1fb-e6e5-4346-9a73-45aa55d98f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0a:5b:1b:75:51:cb:36:55:6a:41:c9:13:73:
                    c1:67:48:0a:40:7c:12:53:2d:28:b4:80:a4:f2:63:
                    19:32:fb:55:12:ad:7f:23:31:26:d4:10:37:f6:10:
                    24:83:4d:f3:34:7b:ef:a4:59:2d:dc:58:28:62:87:
                    d0:07:f5:01:6d:b7:96:30:a0:15:43:71:ed:ed:80:
                    38:c3:99:01:ef:38:9e:79:36:fa:f7:0d:9a:33:14:
                    7f:91:19:bd:84:23:b4:4f:00:36:98:c5:04:37:4b:
                    67:da:b0:99:b2:40:4e:fd:96:d3:a0:70:a6:cc:23:
                    7c:6b:6c:8a:5e:85:14:14:ba:55:97:d4:75:4d:47:
                    02:31:6c:c7:b3:11:4e:03:85:87:59:ad:b7:cf:cf:
                    ee:00:dd:b1:4b:1d:73:16:84:07:57:83:5c:7c:ca:
                    ee:47:eb:f6:36:22:8b:72:7e:d5:4e:86:50:0d:47:
                    4d:ff:d0:87:16:9d:5b:b5:e3:76:66:f0:f3:74:0e:
                    dc:be:3f:92:d8:e0:10:96:58:b9:4e:9d:9c:28:b8:
                    9a:38:5f:de:f2:cc:ef:dd:2c:70:cb:99:61:cf:25:
                    4e:a6:3c:19:ae:36:9f:f3:71:5f:b7:9e:6b:ea:4a:
                    0b:fb:82:b4:19:ac:7d:fc:d1:72:ee:7f:4d:32:5f:
                    a7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:11:7F:45:F0:68:83:6F:4D:49:B7:1F:F5:4A:0C:7B:D8:A4:99:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/c40d1b6f-7d48-3bfa-b57e-900f863667f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb40:90::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:ba:32:bf:4f:51:2b:61:44:f6:67:7e:5d:26:95:b8:ad:8d:
         11:dd:47:62:c2:ae:7b:4b:fe:8f:3d:c2:6a:9d:26:6c:14:6f:
         77:d6:87:15:9f:3a:ab:a7:e3:cc:ff:50:f8:9a:2a:ad:06:a7:
         1c:90:e6:89:84:98:2f:04:30:a6:aa:bf:1e:c4:2f:db:66:47:
         81:bc:10:54:97:8f:e3:d2:f6:2b:2b:b5:c0:7d:1a:25:e7:fe:
         a8:ad:e9:3e:db:c1:f7:ce:d9:8b:c4:02:4a:16:51:d5:b8:cd:
         b3:03:89:7c:00:63:74:8a:1f:87:ec:87:68:16:e4:63:fa:96:
         0c:9b:de:05:9e:f8:99:8f:46:65:34:95:9f:26:9f:2f:47:5d:
         0c:d7:11:e1:e4:44:85:94:4f:8f:27:f7:f1:6c:e4:3b:5e:86:
         75:60:f7:ea:f3:2e:8b:15:4b:43:31:95:6e:5b:37:c6:af:14:
         1f:a8:77:44:66:e9:6a:f5:a3:2e:a0:32:1b:94:e6:26:0c:19:
         23:20:91:29:a6:2b:7d:26:87:ca:fc:d9:0f:41:04:1e:53:1c:
         ce:23:f9:2c:20:78:76:b4:0b:c5:9a:4e:8f:21:2d:98:e6:68:
         1a:a2:38:8f:ac:7e:51:44:41:3d:22:ca:46:2d:f5:41:d1:ea:
         93:c9:bd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:22 2025 by rpki-client