Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/bb62e037-28c9-3670-9fc9-341fc40d906c.roa
File:                     bb62e037-28c9-3670-9fc9-341fc40d906c.roa (raw, json)
Hash identifier:          6dnsWl95VEFWrwX04XQQVDiM8H9pqSrWhEarPTwlXz0=
Subject key identifier:   FC:FC:3A:3B:21:01:A9:94:3D:13:B5:90:9E:99:45:6E:87:ED:6A:0E
Certificate issuer:       /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
Certificate serial:       010D0C9F43285848F92686B17C249D943B617240
Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/bb62e037-28c9-3670-9fc9-341fc40d906c.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     401113
IP address blocks:        2602:f964:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:86:b1:7c:24:9d:94:3b:61:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=eabaadeb-3f32-45d1-a4a9-7fbb3abdde48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cc:26:5e:b4:77:11:ad:25:11:c3:db:52:ea:
                    dd:32:33:29:dd:12:d0:8b:05:c9:83:17:ac:2d:3e:
                    32:6e:79:5f:ed:0e:6b:52:8d:e5:67:bb:ba:bf:34:
                    b6:e2:10:9c:44:16:ce:16:47:61:4f:6b:25:e3:da:
                    e6:e6:c9:aa:f2:4e:56:88:cc:30:2f:7d:94:fc:ec:
                    5d:91:31:53:43:ba:ac:bc:ef:fe:cc:63:19:96:93:
                    6e:04:42:34:1b:aa:4c:15:7e:80:70:be:e3:e0:f4:
                    d3:43:81:80:8d:27:5f:71:96:b0:2d:df:f6:1e:62:
                    22:d8:7b:28:02:f8:3a:af:25:5b:63:ce:48:98:c5:
                    71:82:58:3d:c1:8c:4f:34:6a:ae:14:f8:d7:aa:9d:
                    c9:00:0e:57:4f:f2:d3:24:f8:12:f0:ff:0a:47:c9:
                    17:d5:e2:7d:20:24:96:f0:cb:6b:50:45:e9:80:50:
                    1e:23:ea:2a:f3:3e:1d:bd:b3:ea:a7:6f:69:c3:15:
                    f9:75:22:50:2a:58:17:cd:ce:03:af:63:4e:62:fa:
                    7d:42:a6:17:99:a3:b7:8c:b2:89:cc:49:e8:79:c4:
                    35:fd:d1:d0:59:08:7e:8f:e7:ea:96:11:f5:4a:55:
                    c1:ef:0d:a8:e6:43:cf:fd:0c:11:9f:ed:ac:da:d8:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:3A:3B:21:01:A9:94:3D:13:B5:90:9E:99:45:6E:87:ED:6A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/bb62e037-28c9-3670-9fc9-341fc40d906c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl

            X509v3 Authority Key Identifier:
                keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f964:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f2:03:ee:2a:69:86:a8:9c:f6:d9:22:68:6d:af:63:fa:22:
         54:d9:b8:ec:4a:90:79:04:0d:27:d0:78:56:0f:8f:ab:0a:0c:
         d2:24:35:f9:ca:19:6f:76:94:a8:26:74:95:49:28:d9:21:7b:
         f8:1f:49:b2:7c:76:c6:b1:c5:9a:35:03:a6:fe:d6:c4:ee:24:
         a5:93:12:93:e8:83:f8:4e:3d:77:79:f5:f5:6b:12:e2:c0:b7:
         48:99:77:09:5a:45:94:40:1e:f6:b7:06:51:2a:f1:b3:df:3d:
         79:af:4c:0a:cc:4e:ef:76:9f:2b:11:63:80:50:83:2c:bc:0c:
         0a:4b:42:2d:07:7a:13:41:b7:d0:0c:59:6b:96:3f:80:bf:d2:
         84:06:88:b6:cf:19:78:1f:e4:ed:e0:1a:3d:ba:a7:da:4c:01:
         75:11:7b:98:72:7a:59:1d:a8:7e:32:7a:f6:5c:81:d0:fe:5c:
         4b:70:c9:7e:ae:0c:d7:4b:80:fa:c8:77:ab:34:ad:80:97:fb:
         17:c3:76:f1:72:33:f0:8e:24:eb:b6:d2:13:10:b9:cb:9b:cc:
         84:24:99:f9:42:98:c4:fc:89:a2:dd:66:b6:6f:2d:63:12:1e:
         ee:0a:24:c2:e9:50:76:48:40:5c:8e:de:1a:5d:19:88:ec:33:
         69:da:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:42 2025 by rpki-client