Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa
File:                     43aa77de-9b48-39e6-802d-8a9a94c7551e.roa (raw, json)
Hash identifier:          8K1FQJ3woxvASXbrtV3Nf0L3hQZEKX0vKZHD9+qkYn8=
Subject key identifier:   06:AF:D2:DA:4F:6A:08:44:41:A0:EE:5E:58:89:33:31:A1:63:39:5B
Certificate issuer:       /CN=1a319486-03d5-4fb1-997e-228350330847
Certificate serial:       010D0C9F43285848960B5BCE50FC7DC07C0A5180
Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        2602:815:3003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:5b:ce:50:fc:7d:c0:7c:0a:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a319486-03d5-4fb1-997e-228350330847
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=7c12eca3-2087-4095-82d4-c4c33febba5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:e1:c2:4a:ad:94:aa:98:04:06:36:9b:1a:
                    03:2d:4f:5f:92:f5:5e:2e:3d:19:f3:f6:3f:de:16:
                    75:4b:71:e4:e0:62:f5:c8:5c:a5:70:f4:ea:52:4e:
                    78:16:07:dc:f2:f9:64:06:f5:3e:1d:08:ff:18:70:
                    2a:8c:04:01:b8:c1:d6:2e:60:24:e7:9d:66:d9:c0:
                    5e:09:a2:72:92:80:12:f3:0d:d5:42:a4:0d:86:2c:
                    08:37:0f:a8:e6:c2:f4:17:aa:21:a5:b6:e0:13:2d:
                    6f:d7:3e:a2:07:8d:90:38:a1:8a:59:f6:d2:33:3f:
                    85:01:e9:d9:33:93:9e:8d:59:c5:d1:cd:07:51:6e:
                    ba:77:23:17:a4:77:97:57:e2:d1:58:66:5f:27:89:
                    59:29:58:ba:7a:e4:fe:aa:13:2b:62:e8:26:e1:2f:
                    d8:1b:da:2b:2f:20:92:78:6b:6e:32:0d:55:ad:5f:
                    ac:9c:e2:cc:b9:8b:42:e8:c3:ac:f4:46:d8:47:9b:
                    d9:96:a2:1b:ca:fd:db:b5:79:65:84:a8:05:b0:8a:
                    c2:0f:d0:75:dd:b3:d3:04:bc:71:4a:fe:17:f0:2e:
                    15:8f:f8:da:e6:33:01:81:68:0b:9b:8b:29:7f:12:
                    ee:ce:31:a5:ce:6f:c7:3a:be:06:cc:a6:22:1f:80:
                    81:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AF:D2:DA:4F:6A:08:44:41:A0:EE:5E:58:89:33:31:A1:63:39:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/43aa77de-9b48-39e6-802d-8a9a94c7551e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl

            X509v3 Authority Key Identifier:
                keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:3003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:9d:cf:13:17:60:b4:64:36:c0:4e:46:b8:63:42:be:b7:d5:
         3b:f7:e0:52:2b:a5:95:b4:e2:b8:eb:41:09:85:98:b6:7a:17:
         e5:77:af:72:2d:0f:23:31:3e:43:08:80:79:4c:bc:c5:55:9f:
         b0:71:f2:83:31:05:2b:a9:d8:3f:44:00:97:d7:92:64:45:d5:
         c2:20:7b:9f:2d:7e:de:f3:7a:a3:18:11:12:5f:83:23:32:71:
         6e:19:22:ec:b0:5c:ae:56:cd:97:f8:5a:79:9f:c7:d1:c3:12:
         37:49:73:c0:da:c8:94:5f:8a:91:eb:9e:3d:d5:5b:50:ec:cd:
         ac:d8:c5:a1:85:1e:85:c2:6d:a1:bc:9f:0e:e9:dd:0a:84:43:
         33:7c:fe:0a:c3:a1:3f:29:c7:9d:7f:8d:43:24:55:83:3c:77:
         d7:06:7b:33:83:dd:d9:66:a7:3c:46:6d:92:d7:d7:6d:0a:e8:
         f8:16:0c:8d:4a:71:bc:77:fa:de:04:5e:0c:0d:61:e1:5b:7c:
         92:15:4c:49:07:c3:f5:c4:b9:b5:66:e6:29:e5:5c:bb:4e:25:
         c6:df:7b:08:b4:26:60:5f:b9:be:b6:a8:99:1d:1e:ea:a9:c0:
         87:d4:4a:12:d2:b2:3c:21:ca:ca:d7:b0:db:39:f7:a5:8e:18:
         0e:0f:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:35:58 2025 by rpki-client