Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa
File:                     88777c11-cebf-398b-9cd2-dcb17df89b2d.roa (raw, json)
Hash identifier:          saFmrmoo3OpDUaV7LftvuqIyDGQW1utXxveBOiJbakI=
Subject key identifier:   55:B1:42:FF:C1:31:5A:FC:FA:17:53:49:64:87:9A:39:1A:B5:D5:14
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F43285848B4C0D3650428BB6679C71040
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     62711
IP address blocks:        2602:f921::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:d3:65:04:28:bb:66:79:c7:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=daaa28f7-1e22-4b4a-9d54-20f5654167bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:90:9c:d6:a4:12:8c:c4:1d:1c:d1:3e:aa:ef:
                    d5:ee:42:c6:be:41:0f:76:a6:e6:bf:6a:5f:22:02:
                    42:b7:5b:1e:3b:a4:89:8a:93:f6:3d:42:7d:13:1e:
                    82:f0:81:c2:f2:b9:a7:f1:9c:94:d5:69:63:3f:5a:
                    0b:41:6b:09:65:c2:5a:de:a7:73:29:18:7f:cf:e0:
                    28:81:85:83:76:6d:c5:6f:3a:a5:fe:55:dd:d3:0b:
                    c8:2d:42:f1:98:95:fc:b7:cb:07:76:81:1b:52:f5:
                    ed:53:f4:dd:14:75:d2:49:5e:19:ef:b9:a4:ae:04:
                    a2:01:c2:93:de:52:f3:d9:14:d8:8e:57:9d:05:93:
                    58:8e:a0:4e:33:4b:40:14:14:db:67:1b:0a:fb:3b:
                    97:97:53:48:b6:ef:53:67:b7:e2:e5:79:25:7e:9a:
                    b1:e0:c8:59:8e:d2:94:ad:00:08:bb:b9:4f:33:31:
                    a3:43:7c:03:41:c4:72:a3:55:af:b5:7d:41:45:24:
                    39:0e:5f:b3:e5:54:40:25:39:93:64:b3:39:65:42:
                    df:c8:33:40:02:ca:c4:41:8c:56:cf:f1:ab:43:24:
                    35:b0:a2:fd:55:0d:4f:a3:10:8f:45:f3:b1:1d:55:
                    a3:d3:02:3a:bf:9f:fa:16:4c:b3:7e:c5:fc:ec:eb:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B1:42:FF:C1:31:5A:FC:FA:17:53:49:64:87:9A:39:1A:B5:D5:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:be:49:44:3a:84:2a:ee:60:64:ee:f3:a3:79:81:43:10:13:
         28:93:eb:15:c2:12:ce:48:97:c4:ee:7a:f9:a5:b0:d8:07:d7:
         2c:58:67:ed:b6:6a:7f:ff:98:a7:c0:01:b7:c5:21:28:c3:05:
         94:f1:da:a8:89:a3:b4:76:9c:45:c4:26:43:ac:5a:61:5a:74:
         dd:68:b4:4c:9c:1c:d9:a2:b6:96:80:4a:f6:38:19:44:16:33:
         88:5a:df:6d:92:9e:96:25:c4:53:f0:d8:83:7b:79:5d:55:8b:
         d2:56:08:51:03:44:8c:8c:80:1e:77:09:17:47:16:6e:71:e0:
         53:2e:a6:b5:64:9e:35:4d:56:0b:da:a3:c6:30:ec:45:b6:ee:
         a4:7e:69:62:3c:65:56:6b:aa:28:4c:e7:6c:f7:26:c3:83:67:
         27:26:10:d7:f2:98:9e:be:d2:63:5d:35:8b:b8:eb:ea:0d:c1:
         eb:7e:21:a1:d0:6b:c6:33:14:5e:07:47:e3:c6:83:b5:fc:97:
         ab:f0:f2:7b:83:fb:e3:8a:50:8e:5c:dc:eb:af:5b:58:ee:b3:
         09:a9:77:46:77:5d:f5:f6:15:ba:2d:c4:be:7b:91:e5:b9:a5:
         6a:eb:b6:28:60:e9:2d:95:42:79:bc:27:58:7a:0d:6b:72:93:
         32:aa:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:47 2025 by rpki-client