Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/99a6120f-79f5-3510-b656-c65e64170adc.roa
File:                     99a6120f-79f5-3510-b656-c65e64170adc.roa (raw, json)
Hash identifier:          u+vmdqKxiPN/xO8LfPhdOb/ZHUolwPJVO95XXXnraxI=
Subject key identifier:   4F:18:F3:6C:26:36:BF:EF:A9:AC:99:C6:A8:54:DC:72:E2:CE:FC:8A
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F43285848FBF12AB37C4EDCBC5F919640
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/99a6120f-79f5-3510-b656-c65e64170adc.roa
Signing time:             Mon 24 Feb 2025 02:00:38 +0000
ROA not before:           Mon 24 Feb 2025 02:00:38 +0000
ROA not after:            Sun 25 May 2025 01:00:38 +0000
asID:                     401485
IP address blocks:        2602:f777:400::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fb:f1:2a:b3:7c:4e:dc:bc:5f:91:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Feb 24 02:00:38 2025 GMT
            Not After : May 25 01:00:38 2025 GMT
        Subject: CN=58b3d88c-1047-411e-8c92-b45e2846be28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9e:76:a3:d8:87:ac:0a:6a:ce:3c:96:15:bd:
                    f4:26:82:aa:63:39:80:0f:2a:e7:14:34:2a:db:9b:
                    03:14:fd:d1:c1:eb:21:62:9f:1f:37:24:95:63:13:
                    9b:03:14:57:1a:21:57:9b:56:7d:ab:81:5d:30:ff:
                    e9:48:8c:3e:01:7c:b1:2e:a9:de:d3:12:80:5d:31:
                    b0:43:e1:2c:b8:5b:b7:5a:37:52:16:3f:8f:8d:00:
                    e3:09:c5:d1:bf:84:d3:83:fd:7d:d7:80:4f:14:69:
                    6f:7f:5d:e5:0f:82:b8:8a:6d:00:4b:75:75:22:e8:
                    a6:f0:e2:7d:8a:51:b7:eb:0a:8a:89:41:09:65:ef:
                    cf:21:ff:9c:1c:07:1d:c7:a5:d3:53:24:29:ae:18:
                    6b:57:e0:9f:33:2c:b0:fc:82:e6:b3:a2:3d:59:21:
                    52:ac:b1:ce:16:a0:67:8b:b7:0e:18:89:11:c2:79:
                    f4:c2:76:cd:5e:23:f9:21:15:99:b3:72:52:17:04:
                    88:90:7e:39:b2:8f:42:c0:a0:d9:61:b4:3f:8b:0e:
                    be:56:73:8e:2f:4b:01:7d:80:0b:95:c2:92:0c:21:
                    d8:b1:76:80:0b:12:03:54:d9:4d:9f:3b:3f:59:2c:
                    35:7d:ef:d5:fa:91:26:7b:af:47:db:ec:a3:50:1f:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:18:F3:6C:26:36:BF:EF:A9:AC:99:C6:A8:54:DC:72:E2:CE:FC:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/99a6120f-79f5-3510-b656-c65e64170adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f777:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c6:bb:77:09:bc:2b:82:d6:24:bd:7e:7b:0b:af:59:6e:29:
         ed:81:39:71:7d:df:0d:18:7b:ab:78:58:65:9e:9d:ff:63:38:
         26:05:8b:fa:41:24:e3:bf:50:21:f4:76:a7:86:1b:24:0b:e1:
         c4:e9:24:33:53:27:ed:2b:ee:1c:e8:dc:a1:cf:6a:e3:aa:fb:
         bd:c6:50:48:63:99:58:d8:b5:46:be:24:4d:a2:9b:80:10:9a:
         67:c4:11:66:d5:9a:6c:78:3d:20:cc:84:7c:95:7c:4a:eb:91:
         40:8f:78:9c:26:4d:5e:71:71:d7:f9:cb:1c:cd:df:16:b3:d7:
         78:ab:11:37:58:78:c1:ce:2e:ae:b9:b8:09:74:8d:e5:7e:dc:
         8d:0d:b5:10:43:53:d9:2e:66:a6:2c:27:7b:e1:79:0a:75:8b:
         ed:6e:76:39:6d:b0:30:58:73:cb:b9:54:26:c7:25:92:42:ea:
         0b:28:8e:c8:8f:a7:bc:fb:c1:fc:cb:9f:6e:a5:95:2c:66:5a:
         a5:0e:4a:70:0e:73:61:5f:c6:9f:ab:a8:a4:9f:8c:d9:10:df:
         45:75:32:91:f7:a1:cf:5c:a0:4b:16:9b:78:fb:11:d7:ef:91:
         7f:74:9a:ba:42:b8:44:ae:02:f8:eb:ce:46:dc:7f:30:ec:5e:
         73:0d:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:19:43 2025 by rpki-client