Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa
File:                     ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa (raw, json)
Hash identifier:          bOvUNNVirj1lXDaxWA1uXccCgOEq+e4KbMerDpLoW5Q=
Subject key identifier:   F6:3D:B6:36:9C:50:30:D6:62:F2:DA:79:10:50:7A:B6:C9:8B:B1:C0
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F4328584925B3A9A1740FF24EF1D296B8
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     215207
IP address blocks:        2602:fbcf:d0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:a9:a1:74:0f:f2:4e:f1:d2:96:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=c751329b-db04-4e7e-ab8b-100bfd9c43e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a3:4a:5e:31:a8:83:b3:ed:45:93:cf:30:fe:
                    fa:70:53:ea:92:6c:2d:72:46:90:89:60:3c:9e:c3:
                    88:84:49:da:b8:e0:31:62:e6:07:e7:80:0e:a7:6a:
                    6c:4e:d4:da:12:d5:3a:97:7f:1b:cc:1b:72:85:18:
                    a3:ab:6b:b6:87:37:53:4d:17:fe:6e:ee:fa:34:fd:
                    5b:d5:db:91:76:4c:75:1d:5a:e1:c6:d8:9a:d0:f9:
                    3d:1c:00:1d:07:c1:50:24:0e:4e:8f:58:50:93:5f:
                    79:40:f6:77:00:a2:e9:b4:02:08:04:16:13:bf:4a:
                    73:db:15:25:db:6e:87:d7:43:f4:2e:a7:4c:51:3c:
                    9f:6a:1c:61:d0:03:46:2a:d5:4b:a5:d5:49:5e:37:
                    10:1f:1d:0f:34:1b:ac:92:b9:9a:ab:91:f8:cb:c2:
                    66:39:8f:58:da:55:da:ed:e4:b9:40:9c:4b:f3:9a:
                    99:51:d7:33:f9:c1:e2:87:07:4e:e0:4c:85:fb:aa:
                    e7:b8:8a:e0:d6:2c:1c:05:ef:e2:0b:b2:b4:fe:55:
                    b7:47:b6:47:2c:91:93:d2:ea:b3:03:83:a0:57:02:
                    68:93:0d:7e:3e:02:e5:f3:b7:e1:ee:84:1c:d0:e5:
                    87:98:0f:b2:8f:3f:e4:1b:df:e8:62:f1:e9:56:a6:
                    99:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3D:B6:36:9C:50:30:D6:62:F2:DA:79:10:50:7A:B6:C9:8B:B1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/ca868e76-7e6e-3c1a-addd-82e56c8b3c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcf:d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:c4:e8:e4:19:2a:e1:40:e4:ce:21:2f:35:4f:a6:ab:4a:
         fe:04:92:ee:f7:83:9c:60:9b:e6:ff:73:05:9a:1b:a9:ac:32:
         c3:d1:e3:18:21:fa:25:c6:59:66:9f:26:18:03:f9:00:fa:52:
         15:a3:64:f6:46:3f:bc:b5:75:29:ea:b7:64:bf:fc:1c:90:8a:
         16:65:3f:b3:74:24:df:7d:fb:7c:07:95:fc:6b:95:de:71:6a:
         85:b6:2f:6a:ea:20:d0:6b:e4:1a:53:b4:00:fa:13:12:22:72:
         94:9e:75:40:50:34:1a:0e:fa:1d:de:c6:4a:1c:c7:1f:8a:18:
         fe:43:f9:1b:3f:67:68:44:0e:4e:62:27:21:b8:df:69:55:21:
         de:ed:e7:70:b3:01:2c:f6:2b:5f:79:d1:80:8c:5e:32:81:6e:
         5b:10:3d:7b:46:e0:12:1e:f1:b0:a0:1a:97:c9:b7:66:d6:21:
         47:db:58:fa:89:f3:f5:13:30:05:9b:e5:73:12:1e:37:bb:f6:
         af:0c:df:4a:66:d3:69:f0:93:e2:75:5c:eb:85:cf:b4:61:8c:
         54:63:ee:e9:6b:d6:6c:9c:68:55:a8:37:ed:32:2e:b5:42:01:
         e1:5e:a7:8d:77:2b:a7:65:dc:44:fd:ae:64:63:4f:76:7a:4f:
         8a:49:5c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:21:05 2025 by rpki-client