Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/6afcfeb5-bd02-3d84-9e48-39dea0ecdb5a.roa
File:                     6afcfeb5-bd02-3d84-9e48-39dea0ecdb5a.roa (raw, json)
Hash identifier:          arvtVn+Omm+9SxKZE0BC59xx5G3YqxbuRlVBjISnnDM=
Subject key identifier:   BD:0C:39:93:88:74:F5:CB:0B:79:4E:4E:AE:DC:52:3A:15:07:CA:81
Certificate issuer:       /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial:       010D0C9F43285848E26DDA64BBA5758CFBA89840
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/6afcfeb5-bd02-3d84-9e48-39dea0ecdb5a.roa
Signing time:             Fri 14 Feb 2025 22:40:55 +0000
ROA not before:           Fri 14 Feb 2025 22:40:55 +0000
ROA not after:            Thu 15 May 2025 21:40:55 +0000
asID:                     399970
IP address blocks:        2602:fc3b:300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:6d:da:64:bb:a5:75:8c:fb:a8:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
        Validity
            Not Before: Feb 14 22:40:55 2025 GMT
            Not After : May 15 21:40:55 2025 GMT
        Subject: CN=88239cbc-f0f1-4f42-8117-ec9c6cc6975f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:18:06:2f:07:fa:74:d5:2a:88:db:32:a5:b1:
                    52:15:67:bc:a8:25:66:6f:65:93:3e:81:ba:4b:90:
                    d6:01:06:f3:9d:76:ef:2e:ef:62:26:bb:b4:0f:f5:
                    da:9f:46:b1:06:13:1c:40:04:18:89:a6:55:47:40:
                    71:a0:cd:e4:56:18:db:36:bf:84:70:e1:8f:bf:50:
                    cb:0a:28:50:82:f9:00:0a:b9:33:03:e3:f0:78:d9:
                    db:a5:c3:b1:52:90:6b:e5:c8:69:31:bc:cd:05:66:
                    53:d9:91:21:11:8a:ad:f7:ec:5a:41:a0:1d:4c:e2:
                    a1:40:2e:c6:4c:2f:31:70:5b:90:50:54:36:ec:cf:
                    aa:0a:12:06:d4:0f:6d:de:a6:d3:c9:cd:b9:0f:60:
                    31:c4:4d:92:cd:98:16:94:18:3d:57:91:00:79:0a:
                    54:f6:62:db:c1:b2:d9:a0:2a:6e:7c:e4:b1:04:f8:
                    fe:3a:e3:14:7f:f6:b9:cf:28:1f:a8:3d:56:b0:43:
                    7e:47:43:55:ec:1a:ba:fd:dd:1d:18:d8:a2:87:e8:
                    70:7e:5e:ad:04:65:43:29:59:de:6a:d5:5b:98:4a:
                    5c:b9:e9:e5:84:84:df:a5:d7:99:18:2c:46:87:7a:
                    84:04:90:15:a5:d6:c6:d8:49:a4:18:b4:74:96:31:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0C:39:93:88:74:F5:CB:0B:79:4E:4E:AE:DC:52:3A:15:07:CA:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/6afcfeb5-bd02-3d84-9e48-39dea0ecdb5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl

            X509v3 Authority Key Identifier:
                keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:37:26:48:98:30:ed:99:1b:8d:01:6e:cc:78:e6:38:5a:5c:
         a6:97:56:83:f6:c7:77:0b:15:c4:fa:2a:f6:47:52:a8:4e:b2:
         9f:1e:5d:a6:52:0e:0b:2c:e6:78:82:3c:f0:3e:1a:3d:4b:ff:
         47:3b:3a:5c:a9:80:5d:82:4a:75:99:5c:a9:f5:d0:07:1f:9e:
         c5:a0:18:b1:75:46:c5:8b:33:f5:68:9b:3f:9d:c5:99:49:c8:
         5c:13:cb:d7:b8:39:ed:01:02:fe:44:d9:ce:fa:48:b8:c6:54:
         a8:5f:ad:22:51:42:7d:58:15:57:1d:1e:e3:ca:ba:48:ee:09:
         58:03:81:b5:f7:67:65:31:4a:0a:7f:c4:f8:e6:20:39:09:57:
         4a:e1:80:2a:00:82:e0:c3:66:86:d5:16:fe:1d:e4:54:c0:78:
         ff:3a:c1:f9:67:1e:70:62:e0:88:c9:a7:05:26:1c:7c:b9:3a:
         9a:1c:1a:3a:86:9d:82:c8:d0:70:43:23:a9:f8:5e:d3:f0:ab:
         95:f1:93:ac:46:c2:4d:25:60:9a:31:77:ed:29:1f:7f:95:1e:
         31:97:24:7f:d7:74:d7:64:00:34:85:e3:f4:e9:9e:d9:bc:4c:
         da:0d:d6:c3:6f:b4:97:25:88:0f:d2:19:99:08:33:b3:4c:bf:
         fd:4d:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:45 2025 by rpki-client