Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/c152d8fd-e1b8-35bd-a0a0-c3e008c5b7a9.roa
File:                     c152d8fd-e1b8-35bd-a0a0-c3e008c5b7a9.roa (raw, json)
Hash identifier:          rkYwLhWsjVvcKIRnQKl0pqdWQvx3BO4DF3mM54cE+qM=
Subject key identifier:   AD:3B:F2:A4:FF:3F:1E:6C:AE:C5:A0:4A:2A:C5:4D:B0:FC:15:A2:4B
Certificate issuer:       /CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
Certificate serial:       010D0C9F43285849272482602CE4208931378380
Authority key identifier: 67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/c152d8fd-e1b8-35bd-a0a0-c3e008c5b7a9.roa
Signing time:             Tue 11 Mar 2025 13:23:55 +0000
ROA not before:           Tue 11 Mar 2025 13:23:55 +0000
ROA not after:            Mon 09 Jun 2025 13:23:55 +0000
asID:                     63066
IP address blocks:        2602:fa4c::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:27:24:82:60:2c:e4:20:89:31:37:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
        Validity
            Not Before: Mar 11 13:23:55 2025 GMT
            Not After : Jun  9 13:23:55 2025 GMT
        Subject: CN=0a5067ea-7171-47ea-a1c6-145862292314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:3c:bf:73:33:e4:e9:f2:6b:aa:8d:45:b3:83:
                    26:3f:3c:5e:8d:ef:13:bb:43:7f:68:6b:ba:69:1c:
                    61:72:8a:31:2a:f9:0a:3e:01:5d:cd:fe:fe:86:14:
                    b6:23:f7:7f:d2:e8:f7:72:6c:9c:b6:84:c2:14:0c:
                    58:05:f7:f4:d4:21:ff:24:8c:ab:ee:5e:b5:d6:90:
                    f2:e0:56:5d:ba:a5:3a:90:a1:3f:c4:01:f1:43:03:
                    ea:43:84:99:ab:45:63:0b:88:f3:c4:f5:5b:43:35:
                    9c:d4:15:b9:ce:2a:2f:0d:f1:fc:36:c4:39:8b:97:
                    ca:5a:ac:55:11:d0:c4:31:02:13:98:0e:a5:9d:0b:
                    3d:ed:32:17:65:e9:82:e0:05:26:a7:59:8b:3c:e9:
                    19:39:6b:ed:ce:4b:dc:6c:83:f4:a9:c1:60:1b:dc:
                    22:e9:23:2b:b0:36:a7:a5:0a:cb:88:fc:51:95:e8:
                    3d:52:64:fe:ba:20:dd:70:17:8a:a9:fc:8e:fc:a2:
                    93:00:51:fe:34:12:89:12:0d:ad:c1:9d:ac:c7:5c:
                    44:9d:65:73:0f:c7:fb:1f:b1:f4:18:cb:76:f4:11:
                    1a:d0:03:6c:f0:6d:47:03:48:7e:56:d5:dd:6e:de:
                    26:c8:7e:17:55:90:39:aa:35:6c:0e:34:65:fb:fa:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3B:F2:A4:FF:3F:1E:6C:AE:C5:A0:4A:2A:C5:4D:B0:FC:15:A2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/c152d8fd-e1b8-35bd-a0a0-c3e008c5b7a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl

            X509v3 Authority Key Identifier:
                keyid:67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:9c:41:1b:99:3f:fb:be:a1:f6:ff:59:9a:05:88:80:1a:5b:
         8c:92:3c:db:87:a0:c5:3e:71:ae:ca:b4:7d:b6:d9:f0:dc:ea:
         ad:80:73:2b:04:52:53:e8:46:1e:4b:b7:f4:7b:5e:78:8f:20:
         92:24:23:ba:1f:d9:e3:c0:cd:74:42:37:9b:4b:e4:79:da:4a:
         34:5c:d0:9c:5d:e5:a0:e8:ac:c8:ad:09:04:09:47:e1:77:9c:
         f6:5e:61:d9:ed:c0:07:39:c1:dd:29:07:7f:c5:9b:39:05:45:
         4e:9f:02:4c:24:58:91:18:d9:62:83:b4:b5:3f:9c:6a:3e:b4:
         30:16:fd:db:11:61:37:f5:da:92:9e:35:86:3f:8f:05:98:cc:
         69:dd:87:19:14:af:c5:23:79:a6:89:85:ed:a3:11:bf:7d:29:
         26:4e:fd:9e:5d:d5:06:43:04:d0:95:de:09:7f:5f:03:10:7e:
         05:24:d4:ff:79:e2:34:11:1a:fa:a3:4b:1f:bd:68:65:c2:a2:
         91:5c:d4:02:dc:ef:da:a4:cf:35:46:34:ec:3b:25:45:ce:55:
         70:25:36:ce:cf:58:3b:a9:12:b3:c4:fb:56:f8:82:d0:b2:0d:
         f9:61:38:33:b4:34:31:d7:f4:36:a1:14:a8:2d:f0:f1:c3:30:
         e3:08:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:32 2025 by rpki-client