Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa
File:                     84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa (raw, json)
Hash identifier:          IKO6vc6L1o/6zMEA41VLrgpnb5Dvu4pRXV6aCYIvahI=
Subject key identifier:   53:E5:7E:57:FB:48:1E:18:BE:9C:56:30:C4:39:FA:05:41:8A:55:E0
Certificate issuer:       /CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
Certificate serial:       010D0C9F43285848B6261FEDC939E56B05093600
Authority key identifier: 95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     396073
IP address blocks:        2602:f947::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1f:ed:c9:39:e5:6b:05:09:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=9dd95486-1a00-41e8-aa97-62a0d7e00f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:cb:7f:2f:36:58:ea:64:15:6b:d8:80:b3:
                    7c:eb:c5:ef:c2:d1:37:f5:af:88:20:5a:a1:5a:22:
                    f6:8e:3c:95:7b:f6:b3:74:b9:c3:3b:93:fc:91:91:
                    81:0d:56:91:b0:14:35:77:48:52:4b:9c:0b:6d:e4:
                    95:4b:fa:33:4b:79:54:a4:b3:a9:43:11:be:4d:55:
                    12:05:aa:c1:6b:64:06:b0:54:44:17:02:2c:26:8d:
                    de:83:66:0f:98:76:c7:23:4c:44:00:70:9a:b2:37:
                    02:ae:a1:3c:20:17:34:9b:3c:c3:83:ef:84:6f:37:
                    a6:14:ed:80:a1:26:95:5e:4c:52:94:af:21:a5:30:
                    bc:0e:b3:34:84:da:2c:34:b5:25:b7:23:59:73:26:
                    1f:07:05:32:05:1a:31:d8:89:87:f9:c9:df:fa:9d:
                    98:95:4d:30:9c:47:9a:ab:b7:2b:00:98:df:c8:04:
                    6e:46:06:bc:7e:70:44:bd:c6:3f:97:34:a6:c0:38:
                    d2:5c:53:b4:7f:02:b4:1b:8d:96:c7:42:c5:93:5c:
                    5d:26:e1:67:3b:d4:d8:93:15:aa:2c:54:76:da:74:
                    b1:11:85:e1:fd:39:d5:43:cc:17:66:06:b8:c7:05:
                    e4:28:c0:c2:0c:a4:b5:0c:62:2e:3f:e6:a5:1f:b4:
                    e9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E5:7E:57:FB:48:1E:18:BE:9C:56:30:C4:39:FA:05:41:8A:55:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/84c22fe6-f72b-38f7-b78f-ea8887b4eef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl

            X509v3 Authority Key Identifier:
                keyid:95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f947::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e8:ed:48:d2:15:18:21:cf:9c:d8:ff:7f:1c:da:e7:24:6f:
         1b:0d:71:91:54:52:3a:73:d9:d0:b4:43:ce:07:e4:b9:01:a6:
         bc:4d:b9:de:8b:f3:81:67:16:64:ee:f4:ed:6a:dc:f8:87:9e:
         0a:9e:a5:03:7d:05:f3:0a:9a:22:35:5a:0a:73:c6:78:54:f3:
         09:3f:93:9d:c2:63:7b:58:91:4a:f3:78:d9:bb:22:69:d7:66:
         ce:0f:fa:a5:6c:69:9f:7f:e4:92:f5:41:2d:8f:5d:ec:04:67:
         64:40:c6:98:d2:de:f4:e5:4b:f6:06:17:81:86:38:96:55:c9:
         07:45:4e:62:3f:ce:d2:14:25:85:53:e4:81:54:ba:e9:c0:ac:
         df:9f:33:e8:61:9d:02:bd:23:55:f5:4a:2e:6b:38:2d:26:12:
         2b:e1:b2:de:63:59:41:69:74:61:d4:67:c6:82:8d:a9:da:f2:
         31:3a:83:7d:90:fb:e8:40:2b:d9:fd:3c:2f:2c:e6:5b:99:0a:
         f6:0d:df:18:6c:ff:86:82:d3:71:97:49:59:f1:fa:1f:e6:09:
         d9:53:fa:b0:bb:3d:8d:01:3b:79:db:a1:66:89:87:41:c9:2d:
         dd:ed:f0:da:1b:88:66:5a:24:e8:07:48:f9:11:08:c6:72:4a:
         f2:f4:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:42 2025 by rpki-client