Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5627e100-c664-3915-9d0e-2b2a862911a1.roa
File:                     5627e100-c664-3915-9d0e-2b2a862911a1.roa (raw, json)
Hash identifier:          wj5QZAadOLtFKCD/ahpsk7GOD4Hk/jRC7GsEdyTMAGg=
Subject key identifier:   E1:98:2E:96:50:9E:DE:D0:85:34:BB:ED:79:BB:CC:13:D7:CD:6B:6B
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F43285848E0065F0D7AF730EF61515900
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5627e100-c664-3915-9d0e-2b2a862911a1.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     38047
IP address blocks:        2602:f83b:55::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:5f:0d:7a:f7:30:ef:61:51:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=bf6da589-ccbd-40da-a38a-c1f72e430e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:b1:65:d6:97:89:72:4e:9d:6a:8c:b8:2e:
                    15:07:d5:2c:78:ff:6b:e6:0a:50:5a:4b:60:87:41:
                    3c:4b:b5:89:8f:4d:8b:1a:fd:6f:64:40:25:b3:f0:
                    44:a6:92:da:50:76:79:17:17:b5:47:a1:a2:f8:77:
                    af:44:06:1d:85:71:d8:14:c8:bd:20:ee:74:0a:0e:
                    76:ff:b3:58:e2:9d:8d:e5:f7:4f:5d:2a:4a:dd:cf:
                    3d:9c:96:15:e2:22:cd:a1:3a:c3:30:3a:a6:ee:c3:
                    be:d5:99:d7:ed:ea:08:e6:e2:d1:c0:ff:c8:6a:4a:
                    47:ea:b8:46:d8:12:c7:1d:6d:43:f2:25:31:19:0e:
                    0c:6b:ee:84:30:b9:ff:06:50:bd:0d:d4:a3:2d:b9:
                    70:48:b0:41:41:52:76:4c:1d:7f:96:44:a3:46:3e:
                    56:89:32:4f:45:0c:95:ed:e5:2f:30:6d:a4:a5:71:
                    e4:ac:13:7f:7d:0f:b0:1f:93:c2:f7:d7:88:f0:c5:
                    b6:ac:0f:1e:99:5b:d7:69:44:a5:d0:5c:6e:49:1b:
                    6b:54:ef:47:31:c5:68:24:be:e9:1d:11:c1:d9:42:
                    dd:75:f6:ed:37:8b:0a:51:5c:61:17:2f:b5:11:4f:
                    66:c6:7c:2b:89:1c:aa:70:92:2d:94:51:01:d6:48:
                    ae:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:98:2E:96:50:9E:DE:D0:85:34:BB:ED:79:BB:CC:13:D7:CD:6B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5627e100-c664-3915-9d0e-2b2a862911a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:55::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:84:db:d2:e9:85:77:ce:5d:45:9d:01:6f:f6:48:6a:f8:e9:
         74:b5:4e:1b:15:d9:43:e7:5d:2c:0d:fa:09:ac:65:c5:62:e5:
         de:e7:e8:4c:e7:b5:6d:ef:cf:13:b1:01:24:88:14:5a:c3:a5:
         e6:30:9b:77:29:66:be:df:22:80:5f:4e:e4:88:62:1f:53:92:
         f9:8a:a2:35:0b:4c:6c:be:5a:91:6f:4d:1a:85:56:7d:d3:03:
         6c:16:6d:59:b7:d1:03:c2:34:f0:75:18:08:eb:4f:2f:3e:eb:
         c0:b9:9b:b7:00:5c:f2:74:28:ee:cb:8f:78:ac:f4:c8:87:b5:
         85:bd:da:3b:1c:b0:72:d9:db:42:a2:12:5a:86:32:1c:46:6b:
         5d:aa:37:97:18:54:a7:b6:49:08:5b:0b:7b:1c:b5:f0:24:a6:
         f2:78:3f:d1:ac:30:13:95:6c:f1:e2:d9:6f:b6:64:5a:9c:dd:
         55:8f:82:56:94:48:03:37:8c:51:8b:43:27:71:22:d5:53:f7:
         02:41:87:9c:f6:56:b2:ef:d8:8b:a1:70:48:b8:6e:ff:d5:6e:
         56:09:c3:dd:fa:64:12:ce:7b:a1:14:35:3f:d9:0c:87:4e:03:
         8d:cd:c2:3a:89:54:ef:75:d2:13:ca:56:4a:af:d1:84:93:86:
         af:54:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:06:19 2025 by rpki-client