Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/51543945-6eec-3f2f-877f-9d724376ec79.roa
File:                     51543945-6eec-3f2f-877f-9d724376ec79.roa (raw, json)
Hash identifier:          +Oa87hSzVzMwsZx9asATKfbVVDlBmLvCaalpBz5BcFY=
Subject key identifier:   AF:D4:CA:88:E1:61:A4:A9:95:F1:08:22:92:F8:70:6B:83:57:6A:1F
Certificate issuer:       /CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
Certificate serial:       010D0C9F4328584937D9383B8E7844317ABF3000
Authority key identifier: C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/51543945-6eec-3f2f-877f-9d724376ec79.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     139257
IP address blocks:        2602:f969:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:38:3b:8e:78:44:31:7a:bf:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=90cf0bad-219b-40f1-9463-a9e9681a50d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:5d:8d:a0:ab:da:34:09:73:23:ca:ed:07:
                    a8:d6:12:16:45:8b:1e:e4:33:29:96:8b:2d:54:68:
                    98:15:28:2f:87:04:f0:d5:da:8b:17:49:d4:64:6b:
                    53:b8:71:5b:2b:34:98:42:e4:24:49:38:63:49:bb:
                    a8:91:46:3b:d7:a2:14:68:c5:4e:f2:2e:f1:f6:74:
                    93:97:1c:01:c2:ac:27:b8:7a:18:4c:ea:e1:51:97:
                    52:4f:32:c9:b6:e2:fe:e0:3f:55:36:8d:75:26:18:
                    1a:b5:b8:5d:54:07:92:cb:a8:1d:87:ac:28:e9:4d:
                    2a:f0:91:50:01:7a:b7:18:27:54:d2:fd:5b:62:7e:
                    95:b7:52:7b:bc:ae:1b:94:17:f1:be:d6:77:03:04:
                    8b:49:62:07:03:8b:0b:93:cb:3d:d6:a7:ef:93:9a:
                    cb:10:07:3d:cd:4b:96:0b:9a:8e:b5:6d:64:e8:40:
                    9f:74:e1:69:17:77:fa:75:d6:9c:05:09:72:3a:a7:
                    c0:78:87:8d:8e:b9:20:b9:0c:7b:d4:6b:9e:32:e7:
                    c8:50:33:88:77:72:7a:be:fb:e4:5b:96:89:44:ed:
                    a8:52:d1:98:22:3d:88:61:cf:b6:a7:85:95:b3:5f:
                    1c:ae:98:7f:26:d8:dd:31:5e:df:85:d0:4c:49:b4:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D4:CA:88:E1:61:A4:A9:95:F1:08:22:92:F8:70:6B:83:57:6A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/51543945-6eec-3f2f-877f-9d724376ec79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl

            X509v3 Authority Key Identifier:
                keyid:C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f969:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:74:46:79:77:bb:f5:68:90:7a:b5:0a:de:48:c8:a6:1e:05:
         c8:98:f4:f2:1b:0e:fd:c4:87:73:0c:07:18:2d:60:3c:80:0e:
         ef:5b:1b:f0:5b:36:1b:10:62:f3:55:e1:1a:74:96:31:8a:f5:
         6a:7e:35:9a:fd:dd:c6:31:45:e6:a1:0c:5a:26:9f:e4:6b:a6:
         9b:b9:97:e6:4a:60:8c:15:4e:5f:8e:9f:3d:70:18:2f:c2:a4:
         36:71:ef:15:03:b3:71:85:ac:85:1e:20:81:cf:ab:7b:60:31:
         b1:3d:33:ed:3e:aa:a0:c9:b1:03:12:d3:74:33:f7:3d:dc:91:
         70:3c:bb:38:c3:fa:93:24:95:65:c9:07:40:10:af:b7:28:9f:
         6d:95:0a:79:37:3a:ed:f0:aa:7d:e2:0f:2d:0b:cd:93:b1:90:
         65:b2:c7:88:1d:94:88:fb:4b:92:ec:6b:5b:e9:24:da:7f:58:
         5b:cc:ea:8f:87:2e:ba:6c:4d:af:50:0b:80:2e:59:db:f4:2f:
         f6:c2:32:06:c1:bb:e2:57:3e:bf:24:d3:81:26:60:b4:4e:48:
         39:81:79:1b:eb:fb:97:18:ba:b9:a9:4e:a9:e7:45:f0:41:b3:
         bd:eb:a5:1b:c0:ff:5d:17:f7:18:65:34:9a:74:54:ad:af:60:
         ad:8e:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:43:45 2025 by rpki-client