Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa
File:                     94b3319a-658a-3317-bf87-91c877d6dd90.roa (raw, json)
Hash identifier:          TAYkE/wetseOSuODXKgEFKYUHYCKODSrPk0P2zhFlVY=
Subject key identifier:   4D:C8:94:2D:27:D3:A0:8C:78:1E:BA:51:EF:8D:B4:BC:FD:50:22:EA
Certificate issuer:       /CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02
Certificate serial:       010D0C9F4328584913AC3A99E152076D77E84740
Authority key identifier: B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     396350
IP address blocks:        2602:f950::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:3a:99:e1:52:07:6d:77:e8:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=5ad0cb71-af0d-4b26-aa3d-ea7db9ac0407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:bd:bf:aa:7b:ad:94:bb:e3:ae:96:0e:fb:
                    d2:e8:60:dd:f0:fd:68:40:b9:c5:ba:19:1d:c6:59:
                    ff:65:1b:90:ce:60:dd:d7:14:da:cb:ad:f3:0d:de:
                    84:b6:e1:6e:1a:2b:27:dc:b9:b4:4e:50:e5:ed:d6:
                    0d:98:b8:ec:0e:17:8f:5d:94:f8:fc:12:d6:5e:26:
                    0f:80:3e:f9:4a:55:b5:ed:38:aa:bf:42:0e:9b:98:
                    36:b3:12:1c:57:d2:72:3d:17:a7:f0:22:4e:cd:10:
                    64:f1:fe:89:81:23:44:28:12:c7:88:ee:9c:34:a7:
                    9a:49:26:c0:ab:c2:29:ab:80:9e:38:00:8d:8f:7f:
                    50:60:5b:71:ae:3b:3c:ae:b6:6a:86:94:22:9f:49:
                    b9:fb:f4:8e:a3:63:a3:3d:05:7e:0a:f3:91:4b:3a:
                    35:14:da:a7:5e:17:0c:ec:f6:e5:77:38:53:96:bb:
                    83:5f:0b:7f:a6:77:b2:93:5d:67:9e:ae:56:b8:54:
                    67:5b:ab:9a:17:cf:f0:0a:b8:7e:78:83:c3:d4:a7:
                    d8:3c:06:fc:2a:e0:05:6c:e5:76:ee:6e:36:f1:da:
                    6f:da:c9:93:32:cf:f8:30:9b:ee:cb:87:d9:84:06:
                    db:71:5a:70:53:61:5e:9e:64:11:ed:4f:a4:41:d4:
                    40:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C8:94:2D:27:D3:A0:8C:78:1E:BA:51:EF:8D:B4:BC:FD:50:22:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/94b3319a-658a-3317-bf87-91c877d6dd90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.crl

            X509v3 Authority Key Identifier:
                keyid:B4:70:B6:11:7A:C8:5F:02:8A:BE:94:C6:6D:5C:9C:24:BA:C6:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e3b52c7-b7a5-45b0-a2a4-f8242b2b6e02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f950::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:87:ac:07:96:81:b7:09:25:4c:a8:56:0a:20:1c:d1:8e:5b:
         c3:95:a2:23:70:f3:14:fd:54:95:df:f0:2b:80:4c:18:53:ad:
         fa:c2:8a:fe:3c:5d:61:74:39:a8:ea:34:e7:9e:d1:ea:c1:aa:
         e9:0f:b7:4c:14:82:54:81:dd:7f:e9:6c:cc:a5:ff:6d:6b:3c:
         19:60:ab:4a:39:3b:94:93:82:85:de:c9:0d:ea:ee:b4:7b:ff:
         ad:d6:65:fc:a2:d4:d4:7b:c5:45:e2:e1:4b:c1:ab:33:8b:4c:
         f9:bf:60:8a:5f:a9:1d:eb:c9:68:f8:b9:9c:44:43:6b:e2:c9:
         e6:69:6a:56:23:e4:3c:06:40:a3:a4:3a:79:b7:3e:d6:e9:cb:
         a6:e2:78:1b:1d:81:3a:0b:56:e8:a0:ab:60:25:ea:4b:65:d0:
         05:96:3f:86:5b:67:9f:a2:92:fb:f4:40:a6:7f:4a:69:5f:29:
         58:a1:ee:a2:8f:40:ad:d7:57:fc:f7:27:b9:76:eb:b4:f2:d9:
         1d:c0:58:8d:cc:9a:ad:33:86:3d:57:26:b5:61:e2:ff:a1:6e:
         33:04:24:35:74:3c:af:4d:90:61:cb:0c:18:3d:5d:71:c8:3d:
         b2:78:ea:9a:71:9e:8f:30:5e:ac:8d:e8:20:c1:03:05:a5:b6:
         45:4a:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:21:34 2025 by rpki-client