Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa
File:                     1e11158d-d12e-3742-bcfd-5fbe33e79773.roa (raw, json)
Hash identifier:          kzcLIxacKDTy2NvqqliFheoKQGzvnBKbAyfYMJrCiaQ=
Subject key identifier:   F4:D8:EF:DC:98:B3:CF:F5:6A:9B:E2:6E:69:94:D5:D0:2A:AD:26:D7
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F43285848B6262082D8FDB55B259C3BC0
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     29802
IP address blocks:        2602:f972:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:20:82:d8:fd:b5:5b:25:9c:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=e88487e1-3f70-44fc-97ee-3a32d9361488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:27:47:85:a8:b8:6e:b4:64:1b:0a:fd:a9:
                    8e:c8:b2:75:ed:88:85:24:8f:22:26:77:6c:34:f5:
                    65:a3:76:a1:0b:88:e0:8b:5b:3f:a5:7e:b7:80:30:
                    11:38:f1:91:74:4a:b2:51:00:72:11:c0:6d:08:33:
                    84:7a:fe:40:a5:57:53:71:1b:35:ba:a4:a8:5a:47:
                    06:51:51:64:fd:f1:de:b9:7e:bc:df:a8:65:d6:50:
                    e2:2e:fc:4a:3b:79:5b:fb:a1:ba:ef:c4:84:6e:a6:
                    95:ad:b4:83:31:0e:f8:15:ba:04:57:90:e3:93:0e:
                    22:ba:e1:74:0c:17:eb:b9:42:fd:2f:24:27:e8:8b:
                    56:6a:87:ba:5a:93:7b:73:c0:ee:8a:6e:6b:dd:59:
                    0d:52:d0:21:d0:2f:39:1c:ed:4d:4f:86:45:3c:c7:
                    b2:61:35:84:e8:04:3e:34:c2:82:8d:66:74:55:7b:
                    ca:f8:95:46:88:fd:39:60:b3:58:94:c2:23:a4:9c:
                    70:98:54:2f:d2:58:1f:63:a7:76:60:10:db:a5:f7:
                    90:cb:a7:b5:6a:7d:a4:39:7b:54:9a:da:1e:92:a8:
                    3c:82:3f:0a:09:4f:48:5b:7d:f7:00:33:19:6d:77:
                    63:41:3d:d1:9b:56:f7:1e:29:51:14:83:a0:ab:d0:
                    5c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D8:EF:DC:98:B3:CF:F5:6A:9B:E2:6E:69:94:D5:D0:2A:AD:26:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1e11158d-d12e-3742-bcfd-5fbe33e79773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:42:a3:94:7c:4f:96:dc:2c:2d:b4:a2:cc:85:d2:38:a4:45:
         40:01:ce:04:b9:db:0a:13:c8:34:1d:de:b2:6c:61:fd:81:4f:
         b8:db:fd:91:1f:44:86:e2:a8:60:bb:a2:95:08:2e:54:21:42:
         00:e7:f4:d8:74:fa:40:44:77:8c:9f:cd:20:1b:73:b0:9f:c6:
         d5:1b:fa:31:61:2b:91:09:3b:a4:9a:f4:9e:6d:18:8e:b3:d2:
         cf:62:f2:9d:84:d5:f5:da:49:f9:35:5a:11:ac:bc:e1:7c:79:
         28:42:4d:ea:25:20:a2:89:40:47:c5:e7:b3:88:96:77:3b:58:
         3b:b5:a8:c9:f2:c1:65:fd:b8:9e:9a:17:d2:f5:3b:73:19:93:
         f0:2e:72:36:1f:b3:ac:4b:f5:30:22:8a:dc:06:aa:da:e7:12:
         13:71:83:d2:d3:b7:60:b2:95:63:48:ac:96:7f:15:a6:b4:7a:
         e5:8c:c6:3c:fb:45:3a:d1:c4:06:94:1a:64:20:3c:3e:f8:4b:
         f7:06:f3:76:12:94:c3:28:58:07:ba:07:41:0a:1b:d7:bf:f4:
         d6:70:7a:45:ff:ae:a2:22:e9:20:37:00:48:5f:e3:15:02:74:
         07:63:1a:47:0e:1c:8a:91:96:2f:43:35:2a:e3:eb:de:05:38:
         ce:ad:2a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:39 2025 by rpki-client