Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa
File:                     30e1b526-edb4-3408-90ff-b3883c8f9b14.roa (raw, json)
Hash identifier:          VvmjhW8Fz5P3gcEwOHMenvb9sbRd93fJQseAeYBUUDU=
Subject key identifier:   A3:06:96:3D:59:4E:A8:DA:0D:54:6F:F3:42:73:A8:AB:35:C7:BC:22
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584949FE981DBFE0B8908C474940
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     142594
IP address blocks:        2602:f919:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:98:1d:bf:e0:b8:90:8c:47:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=ddcb4239-c313-4f26-ac2e-9b9147ab91ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:11:51:44:f9:b7:47:f6:b8:f6:9c:41:89:
                    fb:11:27:89:6c:fc:97:ad:59:9a:87:4d:7b:fc:84:
                    48:f4:56:67:4c:81:bf:1c:a2:2a:33:af:17:64:9c:
                    fe:6d:c0:26:8b:85:75:6a:b4:0c:93:99:71:8a:73:
                    86:3a:f2:01:23:83:73:bd:33:55:52:90:54:2a:59:
                    ab:ed:52:0a:32:7f:1b:6d:55:70:66:4c:df:48:21:
                    e2:cb:dd:7f:d0:e7:da:c5:29:94:23:29:f7:15:d8:
                    83:09:22:86:af:b9:4a:d6:ef:ae:70:b9:22:b8:f1:
                    24:f5:b9:57:6b:e0:52:f2:77:d2:8b:ae:b6:53:3a:
                    63:10:c1:5d:da:d9:d8:b8:d7:90:a9:d6:ab:5b:74:
                    b5:a2:36:fc:9f:8c:92:c9:fd:26:84:1d:eb:ce:38:
                    da:19:32:55:d9:4b:2a:ad:28:b0:1a:67:57:07:d3:
                    be:11:6b:32:6d:83:12:91:ef:cf:80:9d:ef:5e:6a:
                    e9:46:cd:8a:73:2c:51:0b:f2:f4:45:25:1f:01:e2:
                    8c:3f:b8:56:ac:f2:14:c4:e6:92:36:ec:d9:f2:40:
                    b7:81:0e:5e:14:74:b0:ba:f4:7f:67:00:85:5d:af:
                    e1:2e:ba:99:fc:8e:8a:70:4a:9b:2e:c4:81:1a:c3:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:96:3D:59:4E:A8:DA:0D:54:6F:F3:42:73:A8:AB:35:C7:BC:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:c7:7c:0c:aa:c9:a8:5b:f1:44:00:d0:bb:b8:df:88:11:f0:
         18:c9:d5:2e:bc:0e:31:fd:e5:ef:9d:24:78:09:c6:76:37:e6:
         ad:8b:32:cd:08:69:93:80:ed:58:b3:b0:5d:12:85:d8:b6:cc:
         2d:84:51:6f:67:00:56:ad:6a:7b:f5:92:f2:8a:15:bb:72:8f:
         0a:18:1e:af:8a:15:af:6d:8b:57:b9:ee:29:8c:e2:8a:f2:17:
         d1:f2:7b:47:0b:b6:3d:bd:bd:95:43:e3:29:6b:6e:95:e2:0d:
         a4:01:ee:c0:63:a4:94:a3:bc:c9:1c:98:0d:4b:cc:cc:c3:2b:
         58:00:57:3d:32:cf:8f:c3:01:2f:52:cb:91:90:49:e5:18:63:
         70:38:e4:82:4f:7c:bd:96:e7:90:78:b3:d3:4c:59:7f:46:82:
         f3:09:b4:36:20:01:ca:77:71:49:c3:02:95:c0:e0:6f:1e:32:
         b3:94:b6:ed:68:40:cf:76:85:72:93:f4:e7:08:ee:50:ce:db:
         4c:bd:4f:43:e1:39:ea:1e:5e:89:a2:ac:37:df:e0:28:a9:44:
         d2:54:42:07:de:ab:75:f9:c6:23:fd:a4:c5:46:b6:36:74:cc:
         2b:1c:88:3f:20:f3:d5:fb:d7:e5:38:40:c5:b4:7e:7e:6d:54:
         86:b4:33:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:10 2025 by rpki-client