Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa
File:                     cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa (raw, json)
Hash identifier:          r6KHNO57MZ6ybjID8bdRN49x5P1AtkCVV62J66UBvu0=
Subject key identifier:   B9:38:E3:41:41:1D:3D:F4:72:01:87:9E:79:52:7D:30:43:EB:98:B2
Certificate issuer:       /CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
Certificate serial:       010D0C9F43285848A565FA9129080AAAC8CB31D0
Authority key identifier: DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa
Signing time:             Fri 24 Jan 2025 02:00:39 +0000
ROA not before:           Fri 24 Jan 2025 02:00:39 +0000
ROA not after:            Thu 24 Apr 2025 01:00:39 +0000
asID:                     393746
IP address blocks:        2602:f95b:3::/48 maxlen: 48
                          2602:f95b:f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a5:65:fa:91:29:08:0a:aa:c8:cb:31:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
        Validity
            Not Before: Jan 24 02:00:39 2025 GMT
            Not After : Apr 24 01:00:39 2025 GMT
        Subject: CN=73365d01-444e-4ecb-9708-8bfe254f8583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:25:f8:88:01:03:c1:b1:6d:32:02:65:28:
                    d7:0b:55:13:26:a6:fa:6e:7b:3e:98:b6:56:f5:f9:
                    ed:1c:a9:23:c2:e5:57:38:01:ce:2c:b4:a8:20:13:
                    c3:50:3b:75:88:16:13:f9:44:36:a9:c2:29:f1:25:
                    53:e8:70:5b:c9:86:cc:b8:df:b4:79:61:ca:11:17:
                    72:5b:09:d4:89:8f:3a:1e:d8:de:97:e0:e7:28:2c:
                    10:9a:ce:44:3e:48:20:d9:ec:a3:9f:fe:68:b3:db:
                    9a:58:64:89:54:e2:b6:1e:1b:94:7b:8c:e5:ce:37:
                    25:18:f5:c1:70:03:9d:4b:96:27:fa:cc:3b:5d:ac:
                    46:ad:d7:16:41:2f:c1:9a:ca:03:41:42:d9:c4:76:
                    b4:cb:36:3c:0e:32:b3:18:16:4d:35:ea:4f:52:75:
                    9e:af:c1:97:3e:17:83:59:ce:17:ff:7d:8b:db:67:
                    1a:e4:ff:a5:13:25:82:9b:a7:2f:41:4c:f1:a5:d7:
                    60:f5:a6:d0:42:dd:ba:17:aa:3e:24:79:b5:5b:e7:
                    bb:38:69:b6:42:ce:70:d4:4d:21:22:f5:97:97:ea:
                    5a:ec:3a:a1:67:28:3b:ea:70:14:fa:7e:de:fd:98:
                    2f:1c:39:74:67:b5:13:7b:8b:a3:30:7e:be:a6:a4:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:38:E3:41:41:1D:3D:F4:72:01:87:9E:79:52:7D:30:43:EB:98:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl

            X509v3 Authority Key Identifier:
                keyid:DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95b:3::/48
                  2602:f95b:f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b9:9f:53:96:0c:25:7a:16:d9:3a:72:51:05:7b:96:02:93:
         0b:21:49:9d:b2:9c:0c:94:f3:7e:99:e8:13:70:4c:e7:e7:38:
         a4:e7:cd:b0:8b:36:bf:cc:45:00:51:2f:5c:5b:eb:74:b3:e1:
         a1:cc:3b:06:f9:92:a0:0f:bb:ba:96:71:02:12:25:b5:28:66:
         cf:53:6f:6d:07:f2:13:01:08:4a:98:be:36:b3:36:e2:c0:b8:
         ed:58:5b:ee:bc:22:4a:0d:27:32:2b:2a:ae:00:34:66:33:97:
         9f:a5:c5:91:97:7f:52:8b:83:4b:4e:d7:8b:d3:c2:0b:30:70:
         29:ba:30:2d:ff:09:a5:21:16:df:9c:d4:9c:81:98:b8:ae:fe:
         aa:fb:1a:39:d8:29:48:6a:a4:a0:a9:bd:bc:23:40:61:ca:fb:
         ca:a1:17:2a:47:ef:13:48:a4:eb:d1:d7:f5:3d:03:c2:3e:ef:
         5c:0c:94:c4:03:04:15:50:bf:6a:c1:4f:c1:e9:47:3e:52:87:
         8d:ba:fe:28:43:a1:f7:b9:03:4c:a8:97:7e:a4:a7:dd:d5:8c:
         7f:7f:2b:1b:be:ce:80:07:cc:b5:e9:51:24:a5:c8:31:c3:d5:
         43:98:21:a8:aa:e6:fc:ce:74:5a:7f:fc:87:ab:0b:35:3f:64:
         66:c1:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:38 2025 by rpki-client