Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f1b827ee-8ce2-367f-b286-128f6cdc4b98.roa
File:                     f1b827ee-8ce2-367f-b286-128f6cdc4b98.roa (raw, json)
Hash identifier:          vF/MLWNIZrRgDOoeLV4Qfkwe/W81KRIGaV4W45iJkEk=
Subject key identifier:   45:18:B7:5F:9F:C3:17:C8:23:03:58:11:1C:E4:27:96:7B:10:DA:1D
Certificate issuer:       /CN=7981ca6b-952a-4908-a513-7b300be24271
Certificate serial:       010D0C9F43285848E16BE509F689E981176DEA80
Authority key identifier: 89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f1b827ee-8ce2-367f-b286-128f6cdc4b98.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     396950
IP address blocks:        2620:139:7000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e5:09:f6:89:e9:81:17:6d:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7981ca6b-952a-4908-a513-7b300be24271
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=c392ac47-debc-4052-b6bb-34969182d696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:ee:e7:8c:c4:dc:5a:f7:f7:db:bd:b5:68:
                    9f:7f:8b:69:38:b4:aa:a7:db:36:12:73:86:69:e4:
                    9f:86:be:46:77:8e:24:c6:b3:4d:fc:86:4e:11:8d:
                    5c:a7:11:dd:9c:d1:14:33:51:18:aa:d4:57:79:c7:
                    bd:77:4a:ac:8c:9f:1b:8d:8c:df:6c:01:31:72:66:
                    ec:2b:18:0a:1f:f6:e4:86:cf:57:81:32:89:60:c6:
                    99:ac:17:75:7c:93:62:53:46:d0:92:a4:01:2e:83:
                    b7:fc:76:3b:73:9c:ac:d2:93:b9:8f:9e:eb:f4:de:
                    21:2f:75:ef:f8:06:a3:67:cc:38:bf:39:ac:d2:1c:
                    1c:7c:ba:e0:79:02:f3:ae:7b:0f:6d:b5:ff:aa:c7:
                    70:cc:f7:21:64:10:c7:86:6c:58:d8:73:db:d0:04:
                    70:71:2f:59:0d:b8:2b:20:ed:ee:0b:89:e2:b4:e3:
                    35:66:78:fb:27:2b:49:7e:bf:9e:7b:63:14:fd:54:
                    86:87:59:74:53:ce:e8:5a:51:ed:e7:8c:f1:78:2c:
                    89:b9:9c:e6:78:cc:ca:53:0d:0b:85:be:d1:df:c3:
                    7c:bd:c0:8b:81:ba:4e:9f:12:21:ab:01:9e:e0:44:
                    34:3f:34:50:a3:2c:ab:db:76:16:d9:38:0b:14:dd:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:18:B7:5F:9F:C3:17:C8:23:03:58:11:1C:E4:27:96:7B:10:DA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f1b827ee-8ce2-367f-b286-128f6cdc4b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl

            X509v3 Authority Key Identifier:
                keyid:89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:139:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:fb:d0:2f:e9:a2:58:63:e0:6d:ff:a2:6f:d9:a3:a0:06:e0:
         80:76:fd:98:aa:94:44:43:63:84:0f:40:20:df:9b:a6:74:4b:
         93:f4:e8:c7:0c:90:9b:be:fc:0f:72:5f:ab:ec:42:26:30:be:
         f7:00:37:8c:36:23:ba:9c:7c:ed:27:79:4d:56:c9:42:ae:ce:
         eb:41:3c:2f:f7:61:e1:bd:1a:91:07:28:20:09:0e:78:3d:ed:
         86:01:0b:63:b8:49:05:f2:01:49:ad:b2:d3:5f:08:a7:9b:2d:
         75:78:19:5f:38:65:30:b6:0a:66:39:02:d5:36:6d:e1:75:7b:
         37:cf:c5:47:70:02:3c:08:b5:1d:5a:ba:24:cb:7a:3b:33:0a:
         58:b4:1f:92:3f:ec:c4:ac:25:6f:45:bb:53:ab:64:f6:6e:3b:
         67:b2:95:08:c9:5d:e7:09:a9:bc:ca:b4:19:00:33:01:61:68:
         57:81:74:27:ff:11:03:40:7d:15:ed:c5:77:9e:89:aa:4a:66:
         6b:d8:e7:1c:8f:29:84:9a:da:63:8e:40:37:b5:55:03:ee:be:
         29:7c:50:de:6f:a3:2e:fc:31:15:9b:56:cc:21:27:96:d7:54:
         10:52:4a:f5:ac:2f:b1:1d:3d:cc:e3:a3:a0:77:2d:aa:d7:2f:
         cb:bc:97:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:04 2025 by rpki-client