Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa
File:                     85899aac-123c-38d4-9753-27300cdd4d92.roa (raw, json)
Hash identifier:          LT1axqjMmSOzopCpDWQ40zuKy/fGlVyMEeBel0my1/U=
Subject key identifier:   2C:F2:70:DD:3D:0A:D9:35:C5:E5:56:C7:B4:70:A2:BF:54:F4:14:DB
Certificate issuer:       /CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28
Certificate serial:       010D0C9F43285848E9CBECF1352FA5F1D9D248E0
Authority key identifier: FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     34
IP address blocks:        2604:580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:ec:f1:35:2f:a5:f1:d9:d2:48:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c81fa5f-3f6d-47db-a504-aceb54f93c28
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=92131156-857f-4d27-8dce-c3dc316beab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:f4:c9:f4:e5:1f:e3:f9:f0:b3:57:e6:f7:
                    2d:1f:f1:15:7f:34:33:df:2e:bd:38:9d:5d:21:2f:
                    2b:77:04:75:e1:45:f3:fc:49:40:69:f2:57:ef:1b:
                    55:26:8b:52:c2:64:f0:74:d6:6f:c6:ab:c9:37:47:
                    3b:3e:f5:bd:fa:22:0a:6a:52:98:80:6a:ea:81:18:
                    97:fa:66:1f:2f:df:a3:44:6a:fd:85:5e:46:7b:9a:
                    dc:66:05:c3:0b:62:97:d6:23:5e:7d:46:ab:1f:e1:
                    17:a9:4d:81:f4:94:f6:d1:0b:64:0d:79:87:22:43:
                    11:ce:b8:a2:36:ce:e1:36:62:cc:12:79:c9:54:0d:
                    8f:49:48:66:34:6a:22:d7:19:5a:cc:9e:93:85:2c:
                    4b:67:fb:89:fc:76:fa:bb:65:c3:6a:30:2d:ec:59:
                    26:f2:17:29:ee:aa:66:5a:b6:54:64:de:c4:aa:e0:
                    0d:d0:76:17:ec:88:06:45:56:33:fc:fb:24:de:6e:
                    21:fa:92:c3:03:93:4e:a2:0b:b8:d7:59:77:0d:a5:
                    d3:47:24:39:14:ee:62:46:bc:05:c5:6b:72:a2:ef:
                    6d:35:13:6e:0c:cd:b0:2a:63:c5:3a:a3:64:85:31:
                    fe:c0:48:6f:47:5f:98:7b:90:95:0a:f2:a4:ac:f6:
                    56:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F2:70:DD:3D:0A:D9:35:C5:E5:56:C7:B4:70:A2:BF:54:F4:14:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/85899aac-123c-38d4-9753-27300cdd4d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28/4c81fa5f-3f6d-47db-a504-aceb54f93c28.crl

            X509v3 Authority Key Identifier:
                keyid:FF:52:D5:49:D2:57:57:81:09:49:15:FC:0F:18:CF:61:E7:D7:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c81fa5f-3f6d-47db-a504-aceb54f93c28.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c2:29:36:b3:c3:79:e0:39:a5:7a:cf:c1:27:63:95:ee:11:
         d2:b9:00:e0:e9:c4:5c:5e:c0:5a:4e:7d:98:ea:df:ca:15:81:
         27:58:d8:17:d7:82:50:4b:98:c2:5e:b9:63:13:39:d4:c8:12:
         c3:21:1e:ea:f6:26:fa:88:8f:b3:05:32:44:53:b1:a9:22:32:
         cf:0c:8d:61:6b:ac:19:5a:71:63:aa:d9:a3:23:c1:3f:5e:69:
         2b:76:8f:11:92:9d:3a:c9:5f:0c:27:4d:50:a6:40:2f:ee:50:
         05:ef:66:4e:f4:49:44:41:e0:17:b8:21:2a:cc:66:25:cc:d9:
         1e:c6:8a:26:f4:fe:e7:4a:6c:6a:84:58:41:9a:b8:a1:c4:a9:
         53:1d:ad:3c:3c:6f:13:33:d5:a0:60:44:0a:24:64:51:09:a2:
         d7:1c:4a:63:27:d0:b2:25:63:f0:69:fc:2b:9f:fe:a3:59:dd:
         19:0f:1e:64:89:b8:ac:73:8d:32:26:49:15:92:21:69:c0:f3:
         cf:25:2c:01:dc:18:36:cf:33:be:1f:04:a0:e9:bd:25:cc:b7:
         4a:fa:df:d5:04:b6:5d:15:ca:4d:f6:e8:3f:67:b7:54:de:f0:
         97:76:e3:ad:78:d0:5c:ac:6e:e7:69:cb:81:77:77:a0:98:f3:
         b9:07:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:49 2025 by rpki-client