Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa
File:                     5af69910-53d7-36e0-bea9-9105b0772848.roa (raw, json)
Hash identifier:          K328gxKIC0h1pOkN5Z+6YuhUSbbLsZvTZRtpsUN+aKU=
Subject key identifier:   55:4F:8E:4E:CF:2C:AE:BF:DF:81:8E:0E:6B:21:5C:E7:4E:E0:43:81
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584891DB2DBD5A98554EBD4BD300
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa
Signing time:             Fri 17 Jan 2025 02:00:40 +0000
ROA not before:           Fri 17 Jan 2025 02:00:40 +0000
ROA not after:            Thu 17 Apr 2025 01:00:40 +0000
asID:                     53727
IP address blocks:        2602:f982:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:db:2d:bd:5a:98:55:4e:bd:4b:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Jan 17 02:00:40 2025 GMT
            Not After : Apr 17 01:00:40 2025 GMT
        Subject: CN=aafe3dca-ce1e-4504-a497-c27a6739aff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:a9:4b:54:0f:15:c6:4c:ab:08:f8:49:97:
                    55:07:1b:b2:af:97:1b:40:9a:2f:40:8f:9e:fc:6a:
                    c6:83:9e:95:de:90:92:23:91:70:0f:d7:99:f3:02:
                    2b:03:a3:90:1b:54:bc:a6:07:60:c6:9f:74:7e:d3:
                    b7:50:db:ec:c3:c6:a4:d8:28:fe:88:9a:43:7a:0d:
                    a2:8e:8b:05:2f:92:9e:4d:2b:76:bc:3a:58:65:46:
                    83:2b:f1:0c:d1:0b:30:f3:e0:79:29:b8:7c:8a:65:
                    ce:c3:d3:5f:fe:b5:1a:a3:4f:bc:9a:48:15:6a:15:
                    b8:e6:ea:7d:13:05:8a:cd:38:6e:41:39:71:9b:7c:
                    0c:21:15:30:69:82:3a:ca:82:4d:4d:d7:61:07:43:
                    5d:fb:e5:ff:69:b7:b4:90:31:5d:bf:6d:ae:cd:00:
                    79:a1:96:30:8e:bb:db:23:20:45:1a:02:24:81:1e:
                    94:d9:5b:d5:c3:0e:97:09:78:63:c6:ee:2f:ed:e9:
                    5f:95:bb:b8:51:cc:3b:bb:f6:23:fd:e3:77:b7:f1:
                    8e:e8:6c:09:fd:74:59:51:2a:e1:49:6e:36:81:5c:
                    c8:7c:6a:81:64:26:ac:8d:9c:ac:ed:80:95:2a:7c:
                    ff:5f:0f:4b:d6:44:1f:53:6a:ac:aa:d6:1f:4a:ef:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4F:8E:4E:CF:2C:AE:BF:DF:81:8E:0E:6B:21:5C:E7:4E:E0:43:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/5af69910-53d7-36e0-bea9-9105b0772848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f6:21:1f:d5:7c:32:71:3f:0d:21:3e:1f:3d:fa:07:3a:22:
         a8:a9:3a:34:81:60:6a:42:df:b5:d0:27:f0:c7:da:ae:48:d5:
         0e:a3:50:b9:37:8c:c9:dc:76:a9:64:18:51:c0:70:a8:e6:3e:
         26:30:ad:1b:45:35:82:9a:4a:0d:e9:7b:10:e4:77:d6:b8:8f:
         98:fc:06:6b:37:a5:dd:dd:ca:bb:7d:e7:11:da:f5:2b:47:95:
         8c:79:f3:77:d6:c2:2d:86:8b:d1:3f:58:04:9f:c3:1a:d6:67:
         53:25:1e:a3:d5:d4:64:39:17:af:8f:ef:24:48:ac:fb:ea:b4:
         f7:c5:7b:d9:f8:8c:23:ce:9b:d2:6d:5d:41:41:1a:0a:be:58:
         7e:47:11:b7:f3:99:88:61:ae:6d:65:8b:21:19:7e:dd:63:e2:
         3e:c4:24:dd:46:e2:8c:08:9e:aa:df:e6:64:56:6a:14:8d:a0:
         3d:39:e2:a4:7b:3d:ad:5f:c3:b6:3f:b3:4d:07:c2:55:dc:77:
         b2:0c:29:dc:76:03:1d:9f:d5:3a:c7:8a:52:97:e4:ef:7a:8b:
         90:17:ab:7b:a0:67:aa:52:31:a5:3d:43:97:26:f3:c3:15:86:
         1e:f9:f6:c1:6a:fc:2c:d7:5d:b6:fd:7c:1a:31:1b:8e:d7:84:
         a1:89:54:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:08 2025 by rpki-client