Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/520c3b1a-f279-31b1-ba65-308eb39e5402.roa
File:                     520c3b1a-f279-31b1-ba65-308eb39e5402.roa (raw, json)
Hash identifier:          4SNdZw33E0l1g28T7ms4nXtXTMRbeqKkclB6gA/uhMs=
Subject key identifier:   67:F0:3B:BA:20:F0:F6:A7:A9:7F:23:FE:99:64:A0:59:1B:D4:E1:38
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584944692DB469356C1A0C8ADA00
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/520c3b1a-f279-31b1-ba65-308eb39e5402.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        2602:fdeb:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:2d:b4:69:35:6c:1a:0c:8a:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=2a5d9a2c-085f-46a6-8b7f-16ef35a1056f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:83:3d:ee:93:e7:bc:31:67:cb:56:7f:94:
                    f1:c0:3f:6d:5e:25:b2:66:8f:2e:2d:a5:71:2e:5f:
                    61:78:69:3a:34:45:00:8b:f2:57:12:ba:b0:92:df:
                    11:7b:f2:5b:a4:5d:73:ae:84:7d:55:81:60:27:67:
                    ab:b1:91:8c:65:14:9c:16:38:68:84:77:fd:7c:e5:
                    ff:99:7f:ec:cd:2c:92:07:be:c3:2b:02:07:2d:12:
                    aa:51:ec:cf:d4:17:b0:d5:4e:a2:b3:71:b1:53:3c:
                    1d:fc:76:e6:e7:8f:03:7b:41:f3:0e:15:4d:7e:62:
                    1a:33:b8:9d:ab:8d:74:cc:f4:fb:35:e4:33:91:c7:
                    89:14:af:37:2e:4e:01:22:fb:0d:c5:29:b3:1d:53:
                    1c:02:fd:21:c2:22:76:87:bc:ec:d6:dc:cc:b3:75:
                    b2:5f:23:83:93:4b:fb:2c:cb:96:63:d9:b8:07:2a:
                    a2:cc:02:f7:51:a2:41:1c:c9:e3:43:24:c9:a3:d3:
                    fc:5a:d7:93:e7:32:2d:81:0b:92:c1:4a:1f:0a:08:
                    75:12:84:69:7c:a2:c4:ca:95:72:d8:c1:cd:85:f1:
                    50:2c:28:9a:b7:bc:42:a3:5f:6b:35:10:35:aa:c3:
                    79:71:d1:49:27:88:2b:9f:ea:4f:24:7f:32:22:9d:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F0:3B:BA:20:F0:F6:A7:A9:7F:23:FE:99:64:A0:59:1B:D4:E1:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/520c3b1a-f279-31b1-ba65-308eb39e5402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdeb:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:2f:9e:a1:c7:df:49:03:e5:0d:5e:83:3a:7e:bb:bb:88:
         08:84:6e:86:1f:eb:09:ab:e4:de:6f:dd:ea:ea:4e:10:14:74:
         69:68:8a:aa:a4:41:6c:46:19:e2:b8:cb:78:1c:bd:19:cd:aa:
         84:d5:96:e4:c3:1b:f3:c6:44:eb:85:ce:7c:73:f8:bf:51:7b:
         7f:bf:ca:e1:f9:49:7c:85:c0:6b:8e:ae:97:5f:c7:06:c9:82:
         6c:b3:6a:66:9e:29:f4:d5:e6:91:7c:f1:3f:bc:5b:7d:12:63:
         a8:36:ed:88:b4:68:51:7f:71:40:b4:5d:ee:e4:24:4c:ee:bf:
         28:5f:4a:04:12:d4:d1:98:af:ab:dc:15:19:0a:34:31:c2:3b:
         68:55:5c:a0:e2:03:5d:7a:b3:ef:cf:8f:9f:e9:ad:a0:69:0b:
         13:e8:3f:a7:06:55:87:f3:c6:e0:e2:7e:1c:23:c7:ba:93:32:
         b9:ad:69:55:f6:90:30:10:06:ab:32:ea:0e:45:00:88:d7:77:
         c9:6d:50:6b:c4:49:aa:fb:b8:32:fb:aa:71:5e:e6:e4:49:66:
         c5:4b:d5:5e:c2:8a:dd:85:b3:4b:b1:ab:e1:d9:f1:d2:60:86:
         60:b7:49:95:e4:8a:59:1f:ba:bd:57:83:00:66:6b:97:bb:94:
         49:69:58:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:56:50 2025 by rpki-client