Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d825415-a280-3181-81a2-705dc42f29fb.roa
File:                     3d825415-a280-3181-81a2-705dc42f29fb.roa (raw, json)
Hash identifier:          Xm0foD+YaOR4r/nfg4hDWGHLGD4sr3Wli1gH2D7jj1o=
Subject key identifier:   66:CA:02:D9:F3:60:1E:00:3A:46:7D:8A:9B:7B:30:E4:C2:86:64:7B
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584921840B4497F592093C2D3A40
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d825415-a280-3181-81a2-705dc42f29fb.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     63150
IP address blocks:        2602:f988:86::/48 maxlen: 48
                          2602:f988:87::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:0b:44:97:f5:92:09:3c:2d:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=ce3678b7-80ec-442b-bfcd-9ef6140eeb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:6e:7f:48:0c:0f:91:d2:c3:70:f8:89:35:
                    80:71:71:24:a2:e1:ec:c0:62:16:38:07:00:ef:fe:
                    d4:6d:7c:c7:9b:ad:f8:33:7e:53:5c:34:72:84:35:
                    a2:bb:94:93:b2:52:d3:7b:82:49:4f:43:f2:b4:2c:
                    d6:da:29:96:86:ca:12:04:b5:cc:d0:20:17:63:b2:
                    62:40:32:fa:a8:93:2e:40:25:72:e8:e5:01:31:41:
                    69:24:90:5a:94:63:aa:01:de:51:ba:55:47:5a:97:
                    fa:1a:35:74:63:b4:63:e4:3c:48:c3:a5:08:3b:2e:
                    bc:3c:46:f7:b7:7f:28:25:b0:05:84:02:cb:c1:dc:
                    3a:01:4a:f4:78:7c:21:ce:56:3d:09:78:57:53:36:
                    4c:9b:fa:80:ff:6f:70:a9:af:68:6d:80:bb:05:98:
                    61:ea:6d:92:40:89:6b:2c:e2:92:da:33:5e:21:19:
                    e1:f6:78:2d:66:9b:2d:99:a6:28:c3:f8:4f:20:aa:
                    3e:52:8f:fe:21:0b:80:d4:ef:2b:a8:24:6b:18:16:
                    59:cd:d5:f5:3f:6a:b2:b2:5f:e5:83:d8:e6:04:ef:
                    58:d3:83:3e:70:71:06:3e:1d:6d:d3:7a:58:88:5a:
                    ea:b2:13:6f:57:28:88:b2:83:64:c8:3d:e8:6f:c4:
                    3b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CA:02:D9:F3:60:1E:00:3A:46:7D:8A:9B:7B:30:E4:C2:86:64:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3d825415-a280-3181-81a2-705dc42f29fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:86::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:56:fd:99:8d:67:e4:bc:3f:22:14:ab:f9:f1:03:02:c5:80:
         18:05:a4:f5:d0:2d:84:3f:07:fd:4a:3c:02:07:a4:a6:c6:34:
         4b:4e:54:20:83:37:5a:1f:26:d0:6d:89:73:3a:db:db:bb:37:
         f3:24:a3:c4:bd:ca:de:5a:30:8e:89:5f:fc:94:78:e6:13:8e:
         65:9a:69:c0:8c:52:67:49:dc:56:ed:24:0a:ad:76:95:d2:1e:
         43:0e:7b:88:2e:92:ee:e7:ab:03:6d:16:b4:8e:23:f8:22:f3:
         a2:6b:e4:0d:21:38:f0:0a:d6:46:aa:bd:02:91:45:22:bd:31:
         8b:1c:4d:8b:b4:5c:91:6a:38:0b:dd:c8:3e:2b:88:1a:01:65:
         ed:22:a5:8a:70:2e:c2:ce:9a:c4:a7:d7:bb:83:fe:34:43:c2:
         b7:17:81:ee:28:59:1f:71:be:6e:bd:8c:eb:6b:64:c9:f0:02:
         0d:81:ea:3f:b4:d9:be:95:26:e5:47:b4:3b:ea:0b:db:4b:59:
         e1:fe:b9:67:f4:37:5f:3e:69:59:9c:a3:99:75:c1:f7:12:95:
         cf:00:cd:e2:f2:c5:ee:73:01:9e:5a:ae:b2:75:17:3f:a8:a0:
         69:47:90:8c:2b:3b:34:54:1c:72:de:13:4a:09:ad:2f:4c:b9:
         5e:dc:f0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:17 2025 by rpki-client