Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/c31d987f-788a-3bff-9d84-07e4a0f638df.roa
File:                     c31d987f-788a-3bff-9d84-07e4a0f638df.roa (raw, json)
Hash identifier:          6z7oeEvOb2ZxHWshU2lkCwrTE7vbPzKf6gPwf7r8CL0=
Subject key identifier:   38:B8:B3:40:99:6D:D7:05:FF:D9:25:0B:8B:EF:BF:1B:67:1E:5F:64
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F43285849350E9EBB6F6DBA90B9A20920
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/c31d987f-788a-3bff-9d84-07e4a0f638df.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:80c:2058::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:9e:bb:6f:6d:ba:90:b9:a2:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=94aecbc3-78aa-4ef7-94e3-a989d1396020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:76:ba:6f:6b:40:73:56:8f:0d:bc:66:88:b4:
                    36:79:db:05:fa:a8:69:6e:9a:27:90:2a:43:79:8a:
                    0a:6d:fb:dc:4c:a2:22:06:ee:5c:b1:55:4d:59:0c:
                    34:54:b3:7e:95:7b:34:2e:a5:5e:2f:14:5a:54:36:
                    0e:e3:a8:ca:37:3f:50:85:73:e5:9e:bd:04:a4:d6:
                    5d:e1:07:87:93:fe:8b:c4:31:b5:c4:e9:fe:f1:f1:
                    29:6b:1a:6b:03:c3:97:10:34:38:db:c1:f4:c9:53:
                    5d:4b:a3:dc:a0:60:b3:23:67:bf:62:20:73:8e:c2:
                    7a:a9:ca:33:8f:47:ca:3e:63:d8:7f:1a:4c:7a:60:
                    68:ac:ea:c7:74:ce:ab:f7:e8:72:37:c3:6e:81:c9:
                    9d:d1:90:1e:fe:2c:76:0a:6e:2e:b7:17:bd:ba:f3:
                    d2:7d:5b:26:3e:d8:f1:98:c8:b3:5f:12:b4:7a:f4:
                    e7:42:87:09:72:db:b7:2f:b9:ad:dc:cc:6a:6a:76:
                    41:55:5a:a0:d4:23:47:aa:b9:dc:c8:3d:5d:89:c3:
                    39:c8:3e:34:53:6c:30:a3:eb:be:21:59:ff:62:9a:
                    ce:93:9c:27:70:06:ff:d7:6a:3f:81:04:90:25:c4:
                    08:67:de:d2:c6:d8:b0:aa:95:29:a2:0f:32:9f:0a:
                    8c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B8:B3:40:99:6D:D7:05:FF:D9:25:0B:8B:EF:BF:1B:67:1E:5F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/c31d987f-788a-3bff-9d84-07e4a0f638df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2058::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:e1:f9:02:1e:81:0f:ae:78:a8:6e:d3:6b:79:2e:bf:2f:
         81:20:12:2e:1e:9b:33:76:6e:02:55:b6:97:78:34:d3:77:2f:
         b9:da:8f:c3:bd:16:7f:f7:49:46:a0:23:c3:2a:8c:4f:9a:57:
         9c:fb:2c:4a:b8:ae:a7:6e:83:8e:ea:20:06:ce:47:e9:61:27:
         7b:8f:10:54:57:f2:f6:00:c4:9d:84:55:bb:46:38:11:a8:35:
         0b:55:d1:37:e3:99:9c:36:5a:72:04:00:6f:e1:f3:d5:87:62:
         e3:f5:89:55:da:b0:1b:13:9c:bc:f0:3d:71:50:a3:74:4f:6e:
         3e:f3:f7:45:aa:f4:55:19:c3:05:0e:56:54:c6:3c:fa:df:f8:
         99:7e:4e:b1:98:f7:98:99:52:5d:d4:37:26:71:5c:b6:a2:b8:
         47:3e:04:c5:f4:8b:6c:1e:5d:21:7d:d6:73:39:2e:89:9e:9c:
         51:64:aa:6a:a3:96:58:9c:ec:48:92:49:8e:ce:1e:7d:d6:5c:
         8b:b6:2b:6d:62:08:c5:b2:a9:68:41:ab:35:ce:e2:dd:ab:b1:
         a7:14:67:ca:d3:f5:04:54:a1:8f:d4:dd:66:53:5c:0c:4c:9a:
         40:aa:0c:d1:37:cb:e9:ef:af:57:c3:52:1c:ae:ee:27:d9:42:
         e2:9b:f2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:57:55 2025 by rpki-client