Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/cbc2e1d6-73e8-34d6-bd8b-fec52c3e947a.roa
File:                     cbc2e1d6-73e8-34d6-bd8b-fec52c3e947a.roa (raw, json)
Hash identifier:          AUOEh0AnE6K613zIrOOqeMuFzDCWD0+w5lBWL2thy64=
Subject key identifier:   68:89:18:6F:EC:55:54:3F:AD:86:65:02:89:E4:AC:C2:C0:45:9E:AD
Certificate issuer:       /CN=de32cd27-0bbb-460a-8587-7a885bed28db
Certificate serial:       010D0C9F43285848DEA135179CAAB8051037B280
Authority key identifier: BC:01:45:58:74:D3:73:01:E1:F7:E9:2A:C5:0D:44:A0:1B:02:FB:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/cbc2e1d6-73e8-34d6-bd8b-fec52c3e947a.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     14440
IP address blocks:        2602:ffbd::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/de32cd27-0bbb-460a-8587-7a885bed28db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/de32cd27-0bbb-460a-8587-7a885bed28db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:35:17:9c:aa:b8:05:10:37:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de32cd27-0bbb-460a-8587-7a885bed28db
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=6609ad31-26db-4fa8-ae0c-53a823ba62ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:b7:01:42:49:d8:2f:b8:86:22:90:ec:6f:
                    8a:cf:7d:81:63:2a:ac:ea:7f:21:24:26:22:95:2a:
                    26:be:7d:36:db:7b:9e:0a:f9:d3:ae:bb:b6:05:cb:
                    69:39:09:e4:1f:0f:86:09:ac:e3:73:e0:7b:5f:c0:
                    74:bb:26:73:81:33:b6:a4:e3:97:4a:52:8c:ed:fa:
                    f9:e7:68:cf:e6:46:65:07:59:71:24:b8:66:1c:bf:
                    bd:19:4f:85:96:65:8e:59:af:e8:0e:40:1f:5e:02:
                    34:df:b3:7e:f2:22:ee:38:8d:e6:a3:7c:ff:f8:94:
                    28:33:6f:34:ea:0e:0e:6b:c5:79:f2:ba:60:2c:bb:
                    5f:de:e0:48:17:8c:d3:6b:fd:ed:6e:29:f8:60:c7:
                    5f:3f:bc:c6:b8:13:cf:e9:d4:d7:c3:47:a2:0a:f4:
                    74:de:54:84:6d:1e:a2:16:87:7e:93:a1:1f:05:e2:
                    e3:eb:bb:be:b9:fc:c9:f4:41:41:da:4a:08:58:99:
                    8e:dc:46:07:91:1e:88:09:cf:10:8a:14:d4:4b:65:
                    75:be:cf:a4:4d:68:b0:64:2b:53:11:c8:27:a3:41:
                    a7:e8:8d:bd:d6:1a:df:5d:d8:5c:c8:c3:5e:e0:43:
                    af:7f:fd:5c:dd:00:f3:73:35:3c:bc:05:99:d8:2f:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:89:18:6F:EC:55:54:3F:AD:86:65:02:89:E4:AC:C2:C0:45:9E:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/cbc2e1d6-73e8-34d6-bd8b-fec52c3e947a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db/de32cd27-0bbb-460a-8587-7a885bed28db.crl

            X509v3 Authority Key Identifier:
                keyid:BC:01:45:58:74:D3:73:01:E1:F7:E9:2A:C5:0D:44:A0:1B:02:FB:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/de32cd27-0bbb-460a-8587-7a885bed28db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffbd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:3e:23:75:94:c3:56:0a:a1:fd:ea:22:b8:4a:fe:3f:59:26:
         a0:81:41:14:37:79:5d:75:b7:2a:5f:85:da:df:db:13:dc:2d:
         6a:03:ca:cf:79:4b:97:62:06:fa:7e:12:ca:0f:95:27:c3:91:
         a0:e3:aa:a6:ad:0c:b9:d4:ba:0a:e6:95:ec:5f:e6:6d:aa:8a:
         46:13:46:88:c5:44:66:b4:e9:76:64:e4:28:9d:38:90:ec:72:
         19:96:fe:b4:f7:7b:d7:0c:76:c3:54:8f:b1:60:38:58:6f:72:
         88:e8:86:1f:5f:da:1e:fa:e1:83:e1:05:a4:da:e1:f9:6d:d2:
         52:91:51:06:99:55:0e:07:f3:f1:02:71:8d:a2:e1:cb:dc:97:
         37:2d:c6:66:50:7c:6f:e6:4b:7b:88:a0:ff:e7:28:3a:c3:d6:
         fa:42:e8:25:a8:c4:27:d3:79:a3:dc:f3:9a:02:e6:03:4e:6a:
         88:74:64:e6:47:65:d9:5e:5d:b5:25:9d:1a:48:df:f3:08:fd:
         99:6b:c2:46:ae:d2:13:f2:77:23:2e:a8:69:98:bd:52:46:7b:
         4e:1d:2c:34:b8:d6:b9:4a:24:f2:b9:61:a8:0c:f4:84:ea:fd:
         eb:19:b3:b5:8e:82:7c:02:e2:af:b3:d7:75:25:20:a9:07:0c:
         ac:b9:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:27 2025 by rpki-client