Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa
File:                     481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa (raw, json)
Hash identifier:          mJoxwHI2p53T8H3GWOLcDPoMkgq9GpNRUuaFWBMP+ys=
Subject key identifier:   35:F5:49:37:19:00:29:C8:3C:F8:B6:74:E9:E4:66:24:72:CD:71:74
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285848D4DB9448B47782B92997E680
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa
Signing time:             Mon 10 Feb 2025 02:00:38 +0000
ROA not before:           Mon 10 Feb 2025 02:00:38 +0000
ROA not after:            Sun 11 May 2025 01:00:38 +0000
asID:                     1288
IP address blocks:        2620:171:25::/48 maxlen: 48
                          2620:171:26::/48 maxlen: 48
                          2620:171:b1::/48 maxlen: 48
                          2620:171:f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:db:94:48:b4:77:82:b9:29:97:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Feb 10 02:00:38 2025 GMT
            Not After : May 11 01:00:38 2025 GMT
        Subject: CN=ffd058c4-0664-4031-8c6b-55023d7c66fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:5d:cd:18:87:6c:e9:cb:20:fe:57:89:0f:
                    c7:30:45:31:f5:d0:03:da:4c:87:c6:88:30:90:cb:
                    0e:7b:6a:b1:69:6a:02:15:70:2e:db:b6:e0:00:f2:
                    ab:de:b8:cc:8b:88:ac:b1:6f:13:e1:11:22:01:23:
                    9e:8f:4c:1c:19:df:08:ec:b3:af:66:8c:3e:fe:70:
                    02:6f:02:83:67:87:f3:b9:2f:1e:5a:2b:23:80:97:
                    5b:b2:af:f1:96:22:93:50:c5:fc:39:3e:db:72:c1:
                    ab:6e:06:b1:07:ec:ad:33:8a:06:ab:dc:08:03:d7:
                    20:0d:07:da:da:2d:8a:f8:bc:c0:7e:1e:98:5b:ea:
                    bd:24:ca:cb:5b:66:8d:c2:32:27:c7:74:f8:13:6c:
                    0e:70:5d:3f:ef:b4:66:34:d5:d9:8c:8a:6d:3e:1a:
                    bc:5f:7a:d9:08:81:28:75:dc:1a:10:b3:ac:55:15:
                    89:d1:9e:4e:4f:36:55:fd:71:1e:21:3a:2a:45:38:
                    d7:d8:ae:a7:f5:20:a7:97:8c:4b:9b:fc:5a:94:41:
                    9a:d4:16:b6:fe:40:62:c3:77:03:bb:95:6c:7c:57:
                    9c:c8:8c:3f:d1:ea:93:98:3d:37:13:42:99:66:9e:
                    c1:29:2e:d2:18:c6:14:b2:31:00:eb:bb:83:42:40:
                    f4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F5:49:37:19:00:29:C8:3C:F8:B6:74:E9:E4:66:24:72:CD:71:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/481d97c4-7e9a-3cea-bb3f-dbd78665a0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:171:25::-2620:171:26:ffff:ffff:ffff:ffff:ffff
                  2620:171:b1::/48
                  2620:171:f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:33:ae:3d:0b:db:d4:00:29:9b:63:35:e3:f7:04:a5:07:
         37:77:37:4c:6b:d2:dd:a6:77:78:34:b5:e8:1b:1f:16:2e:8d:
         34:fd:93:fe:e6:b7:bf:e1:c9:18:8a:28:7f:90:f9:aa:8c:aa:
         64:9c:a9:88:0d:40:f8:aa:05:c1:07:26:89:2e:df:a9:91:e4:
         60:98:06:1d:74:f9:e8:c2:73:32:1c:33:f2:01:fa:00:4e:2f:
         b8:00:06:f3:0a:24:65:0d:8b:07:01:4a:1a:bd:5f:01:23:21:
         51:02:3a:56:9a:01:dd:36:3c:14:45:ad:5f:87:1d:8b:f9:12:
         ab:9c:35:0b:47:e7:f6:f2:b8:9e:5f:cb:aa:51:6d:09:41:f1:
         49:ba:bc:6b:4e:c2:57:37:d8:1e:44:2d:d9:b1:8f:d6:a9:24:
         4b:a7:51:bf:7c:fa:65:c8:d6:c3:93:97:90:7b:16:f8:e8:c5:
         91:a9:1c:8c:20:38:2d:63:69:bc:19:51:be:b7:73:e7:77:b0:
         0c:85:97:7f:07:32:f6:0a:ed:d8:33:db:3c:2f:64:4f:78:a1:
         c1:16:18:c7:80:a7:a6:f2:60:0f:19:70:c2:6e:03:c1:77:4e:
         f5:a4:b8:41:e2:b3:a3:1d:31:c5:01:1d:bb:27:a5:63:40:30:
         39:4d:f5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:50 2025 by rpki-client