Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/a3b1da18-47d3-3cd0-8b80-5ce291cd004d.roa
File:                     a3b1da18-47d3-3cd0-8b80-5ce291cd004d.roa (raw, json)
Hash identifier:          4DSjQIYv+TnjR2PXnv3mGIq7rXEXr3ii1pztR7H4new=
Subject key identifier:   30:F7:DA:98:1B:70:6C:B2:A8:AE:41:96:D7:79:3F:2A:62:C4:24:2F
Certificate issuer:       /CN=0c061d8c-3838-415d-8bbc-20962c789d81
Certificate serial:       010D0C9F4328584902E495A1D2DCEECDDB77B000
Authority key identifier: 65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/a3b1da18-47d3-3cd0-8b80-5ce291cd004d.roa
Signing time:             Wed 26 Feb 2025 13:46:01 +0000
ROA not before:           Wed 26 Feb 2025 13:46:01 +0000
ROA not after:            Tue 27 May 2025 12:46:01 +0000
asID:                     61228
IP address blocks:        2602:fb0d:22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Mar 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:e4:95:a1:d2:dc:ee:cd:db:77:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c061d8c-3838-415d-8bbc-20962c789d81
        Validity
            Not Before: Feb 26 13:46:01 2025 GMT
            Not After : May 27 12:46:01 2025 GMT
        Subject: CN=d2798870-a769-494c-825c-777b988d0550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:ed:93:f0:c5:c3:e5:ec:79:b9:de:9c:b3:
                    0a:a3:21:52:6b:eb:e2:e5:07:8d:54:53:8e:b5:55:
                    b4:9c:e8:43:be:64:5c:c0:a5:10:46:14:2c:11:17:
                    5d:9c:ad:22:4b:1d:59:d0:dc:d0:96:ac:0b:5c:bb:
                    21:3b:c9:76:ae:8e:62:12:13:02:7f:d7:ac:ca:1b:
                    c8:d5:44:ce:78:3c:60:6b:4f:cb:98:2f:fc:68:0e:
                    e9:77:6b:9a:bd:13:fa:95:6a:cc:72:c2:70:ef:62:
                    83:e5:50:0e:19:8e:85:01:f1:85:05:2d:51:a0:27:
                    f3:cc:57:40:d0:b7:55:a9:de:66:9d:d8:4b:13:d2:
                    ea:da:28:c8:b6:29:b5:46:e8:ac:ef:64:1e:f9:d2:
                    bd:73:9f:c7:d3:0e:f7:3a:1c:a5:c7:56:a5:7c:6a:
                    ee:3e:ae:ed:cb:4b:de:c7:f2:03:7c:9e:34:a8:8c:
                    b0:6b:8b:e9:9e:b5:27:ec:16:82:0b:5e:3a:0c:4a:
                    c5:e5:ad:8e:32:c7:0d:21:89:de:d8:79:ed:f0:b8:
                    11:fe:5c:6b:46:77:88:70:f0:c7:9b:a7:b4:66:c2:
                    c6:d4:7e:db:1e:68:54:3f:08:90:04:dd:91:d6:75:
                    2b:95:a8:26:75:c9:26:67:c4:38:e0:43:83:fc:d7:
                    82:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F7:DA:98:1B:70:6C:B2:A8:AE:41:96:D7:79:3F:2A:62:C4:24:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/a3b1da18-47d3-3cd0-8b80-5ce291cd004d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl

            X509v3 Authority Key Identifier:
                keyid:65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0d:22::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:00:cd:1b:ff:1a:54:b9:f2:d3:f1:e0:86:81:47:42:21:f2:
         f6:6f:4a:fc:4c:fe:c7:08:9f:fd:9e:fe:81:17:10:67:e3:d7:
         31:3a:f7:9f:0d:cd:ce:11:68:25:6a:78:85:81:e4:37:f4:b9:
         0e:e2:58:ea:d7:8b:11:70:20:26:b4:9e:80:3a:b5:51:00:41:
         83:d6:6c:5d:d0:36:32:e9:0b:6d:75:9e:45:c0:04:e2:34:14:
         13:27:0d:7c:a2:21:05:f7:a4:ad:5f:b6:ee:4d:46:d2:a4:62:
         c8:74:2d:dc:e1:1a:ad:c8:3a:45:90:d2:ec:73:83:e5:b6:9f:
         43:c7:d3:39:7b:b0:a8:41:cb:69:73:c4:89:33:7b:07:05:2b:
         1f:47:45:fd:c8:1a:1a:21:70:ce:d0:10:77:a7:33:92:25:3f:
         9e:37:fc:a3:73:6d:51:eb:73:68:ad:b8:1a:ec:98:fa:0c:50:
         d7:b6:13:f8:05:6a:56:0a:ed:08:a0:da:24:bf:a9:5d:41:30:
         2d:3f:c6:45:9c:dd:b4:c6:48:02:1b:7e:13:15:c8:36:6c:c2:
         0d:e4:55:02:04:60:37:78:12:68:fc:0e:8c:88:9b:0a:d8:f9:
         be:7f:4f:09:83:13:14:28:5d:c8:cf:0f:20:3d:a7:c5:20:f6:
         63:e6:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:05:57 2025 by rpki-client