Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/85808809-8170-32c7-874c-dec27c04278c.roa
File:                     85808809-8170-32c7-874c-dec27c04278c.roa (raw, json)
Hash identifier:          fkatnudLzDB/39xF4QteKFUMT4J2IvB5+fKBqr8xja0=
Subject key identifier:   7A:01:43:8C:59:65:EF:E0:45:49:C6:3F:E9:1B:01:2C:A9:39:DD:F0
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F432858495ABECCD8EFD09560CEC19D00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/85808809-8170-32c7-874c-dec27c04278c.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     399976
IP address blocks:        2602:80c:20f0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:cc:d8:ef:d0:95:60:ce:c1:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=a9b77db1-2bfc-4d0f-94aa-88b29521552c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:cb:90:d2:b0:65:f3:0b:f6:c2:7b:a9:a3:
                    f8:56:ce:e8:d6:05:2d:24:b5:3c:48:50:39:80:ea:
                    e6:d3:6c:dd:09:c0:88:aa:4a:ed:64:a0:7d:10:30:
                    1b:a2:e6:bc:3f:18:ec:9b:89:76:59:ef:29:5f:4b:
                    d7:37:6f:37:f3:40:2a:b1:ff:23:f1:28:c0:14:fe:
                    5f:fe:97:60:1a:1c:5a:a2:59:73:3c:d3:9a:35:91:
                    ea:e5:36:42:c9:32:89:ee:f7:7f:6c:dd:4a:85:b9:
                    c1:55:01:53:ec:db:6a:ae:78:0c:47:48:3f:75:a9:
                    1e:93:7e:ed:91:e5:6e:66:24:46:81:96:92:46:03:
                    ea:f5:7d:bb:12:ce:94:8e:2a:78:9f:8b:43:e6:21:
                    a7:28:ac:da:da:dd:23:4d:1a:7e:5d:e2:4c:01:06:
                    27:e1:c4:a7:19:81:64:a1:e5:fc:0e:53:a6:1e:ff:
                    0f:b9:b7:b2:c4:b6:72:cd:88:cf:f1:a0:4f:91:ab:
                    84:2e:84:ba:a7:66:1c:36:5e:bb:3f:0b:0f:45:a1:
                    80:a9:2e:cd:a4:d9:2b:d4:93:a0:aa:fa:9f:23:14:
                    fc:fd:43:d6:ab:c3:5e:f2:ee:d1:22:c3:89:b0:3f:
                    51:af:bd:51:2b:cd:86:be:4a:74:a9:f7:cd:93:a8:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:01:43:8C:59:65:EF:E0:45:49:C6:3F:E9:1B:01:2C:A9:39:DD:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/85808809-8170-32c7-874c-dec27c04278c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:59:50:df:23:d3:0f:94:3f:02:9c:90:ec:21:4a:62:f4:ca:
         ee:aa:ad:21:8f:9f:3b:7b:d1:fb:6c:15:29:5b:55:4b:23:09:
         7a:42:f8:e4:8a:68:5c:3e:18:78:9f:0b:0c:29:77:47:6a:b1:
         2f:43:d4:2a:25:11:a4:6c:1c:43:37:4a:07:2f:e1:82:a9:d3:
         e5:37:15:8e:f3:b5:c1:49:c6:36:bf:e1:32:e1:ce:50:4a:6a:
         95:a3:76:fe:a6:3c:0b:7d:46:62:31:d7:8a:e0:17:c7:7c:d1:
         a8:f3:37:f2:73:40:0f:25:34:da:d9:87:89:92:e1:db:a4:10:
         4d:67:12:19:56:0f:0b:52:eb:5d:9c:4a:e8:00:15:1b:6e:12:
         80:65:b1:44:42:73:5e:5a:60:6b:10:d9:fd:b3:d7:59:e4:47:
         ad:43:54:24:c9:38:25:69:86:51:32:f3:3b:b8:dd:79:15:0e:
         93:79:31:bd:7a:f8:da:0c:d3:55:31:46:cd:d1:e8:64:57:6c:
         3e:ad:bb:d6:d2:c8:e4:ae:31:c6:5a:9e:f5:2c:f8:a7:39:3e:
         80:cb:07:ed:64:4c:91:ea:b3:28:c5:0a:39:34:2a:53:bb:68:
         df:52:ac:fb:c2:6e:54:d2:67:da:ed:c8:03:e8:ab:db:e9:47:
         51:3e:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:08:08 2025 by rpki-client