Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa
File:                     1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa (raw, json)
Hash identifier:          T1PlVZY3Wxl2XrvmIRGsinJOoM0kq2lUlVMB8k5xb/0=
Subject key identifier:   D5:B3:50:3C:50:F2:48:27:1E:0A:59:EB:56:2B:90:93:28:3A:C7:22
Certificate issuer:       /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
Certificate serial:       010D0C9F43285848B8F0BDF224B85F6704BA0E00
Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     401466
IP address blocks:        2602:f874:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:bd:f2:24:b8:5f:67:04:ba:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=3e377e2a-3eb3-43c2-95a0-4336008a94f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c3:33:96:69:b8:86:6b:85:69:e0:78:e6:50:
                    28:5d:89:9c:17:f1:07:13:42:fe:0b:38:0d:e6:e3:
                    57:fd:3e:ef:f5:31:c4:7c:98:07:b5:98:2d:23:0b:
                    da:f3:2e:4d:32:33:30:71:c8:85:7d:10:71:17:0a:
                    e4:b3:1e:45:9f:b4:12:8d:f4:e6:99:8e:8e:e5:4d:
                    4f:63:11:9e:77:65:45:c4:10:15:1c:1b:71:32:7d:
                    60:6f:92:c3:3b:4b:f7:4a:ca:19:98:7a:17:36:d5:
                    d3:c5:bd:43:8f:f6:14:ec:49:58:82:57:78:fb:d8:
                    77:b1:fe:2b:cb:81:da:7c:6f:e8:db:87:00:60:1c:
                    e3:24:2f:9b:b6:d0:f2:6c:ce:4b:5b:d9:a1:d4:8c:
                    3d:b9:85:1d:14:27:3c:1f:7a:dc:65:27:38:d4:90:
                    cb:45:89:27:7d:ec:e2:67:12:e9:3b:7c:7c:0e:96:
                    d3:58:70:ce:9a:f5:d1:b5:29:d5:65:4b:b5:19:c1:
                    95:41:8f:8e:dd:da:e8:34:78:ff:ad:a0:05:5f:e5:
                    63:f6:70:f9:fd:98:89:4b:d0:9e:1f:91:14:d8:e7:
                    5c:ee:cd:23:d0:e3:03:a6:12:83:ed:a2:52:79:0c:
                    77:77:5e:7f:53:03:b6:4c:f2:d8:8d:fa:9f:64:48:
                    8a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B3:50:3C:50:F2:48:27:1E:0A:59:EB:56:2B:90:93:28:3A:C7:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/1e9f133c-923a-30d1-8dd8-ab00fb72eb4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl

            X509v3 Authority Key Identifier:
                keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f874:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c9:ba:87:58:62:09:e1:37:2b:57:bd:35:7e:e1:ce:65:bd:
         cd:fc:ae:07:07:36:cd:40:7d:d6:90:0a:46:99:cd:ff:55:82:
         5f:f4:7f:3a:cc:5a:de:31:4f:c9:5b:bc:7b:ce:f4:5f:be:03:
         02:ca:80:5a:02:f6:ce:f5:5a:be:b8:a9:38:67:0b:e6:bf:66:
         66:22:9e:61:d3:b7:0d:77:07:6a:1f:09:b0:ec:12:41:76:2a:
         f5:20:22:99:f7:c6:13:20:c2:71:fb:50:f6:f0:ca:9e:4c:b9:
         63:02:21:07:e8:d0:f9:b8:ec:d4:0c:b5:d8:eb:c1:61:c9:9b:
         ec:d3:64:69:e8:4c:85:ef:f9:e0:18:18:f7:5d:b6:ef:e9:32:
         f7:95:ca:ca:be:86:7b:31:3c:ff:c6:35:0c:f6:1e:5e:0f:1a:
         17:58:ee:f7:e0:ee:96:0a:15:b4:c9:6c:f7:88:0d:d2:90:39:
         9a:99:e0:15:7f:0c:fc:dc:aa:a4:7b:97:d5:ed:ce:95:fd:fc:
         fc:2b:08:94:58:b6:1e:0b:e3:1c:aa:60:45:eb:1c:a2:10:43:
         2f:71:6b:8b:5a:e8:ad:f5:4e:4b:46:2f:31:6d:a2:93:42:b5:
         84:08:9c:63:67:7e:01:ff:b2:f3:6a:ef:3d:0e:6e:3b:60:25:
         ac:90:3b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:24 2025 by rpki-client