Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa
File:                     4a2c271a-6692-3179-941a-0d087d280308.roa (raw, json)
Hash identifier:          jJ3AfPBz7AmhIqMoWrOiRJxZA0ELOGLfSqx9Dt0BZ1E=
Subject key identifier:   78:14:FF:B8:C0:07:4B:53:98:AA:C2:7D:AB:D0:AF:27:EA:F6:8D:C4
Certificate issuer:       /CN=8baf6f06-4472-4c79-8a01-5c338d64c402
Certificate serial:       010D0C9F43285848C84BA1EDCE9E63F1C3E80B80
Authority key identifier: 95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     401082
IP address blocks:        2602:f8b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:a1:ed:ce:9e:63:f1:c3:e8:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8baf6f06-4472-4c79-8a01-5c338d64c402
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=87384504-4db7-4aac-ab1e-a4e65eda1672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5b:1f:83:02:2c:08:a6:2a:c9:be:0d:4a:c2:
                    0b:89:eb:28:6e:07:63:1b:d6:b1:a3:89:8c:df:ba:
                    c5:d3:d1:9f:53:9b:9c:1c:80:7e:7d:4b:3f:b8:a1:
                    68:87:8f:6b:d9:b3:fc:6d:48:13:7f:30:28:5b:00:
                    a0:85:55:9d:e2:6e:7c:29:5b:45:0c:9c:48:72:0d:
                    20:08:3b:a5:51:23:68:7a:bb:58:ce:87:34:e2:bf:
                    10:f8:88:fd:ee:ff:6d:b2:27:26:80:9e:76:c3:de:
                    17:98:8f:b0:bf:09:3b:25:38:fe:54:1a:da:b2:cd:
                    5a:e8:97:13:d4:2a:83:b3:ac:d7:79:88:e7:26:68:
                    ca:a5:3c:ef:c7:01:1a:ff:72:e0:06:f9:66:b8:86:
                    fb:1d:80:d4:3c:ab:56:dd:29:ad:bd:a7:9c:21:4e:
                    18:bb:0a:2e:01:76:f6:0b:40:41:f1:fe:55:97:38:
                    38:62:71:bb:bd:9e:52:b4:01:a4:1e:35:ae:a9:9b:
                    69:b0:26:ca:4f:13:b2:c2:8f:fb:6e:31:7a:e6:92:
                    f2:e0:fb:4f:2c:54:11:83:41:33:4f:ff:8d:c9:33:
                    20:c8:f9:4d:88:f9:f1:17:9a:06:7a:74:de:20:41:
                    c2:1d:b1:d2:b0:87:0d:14:cd:b2:78:20:ad:d2:a7:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:14:FF:B8:C0:07:4B:53:98:AA:C2:7D:AB:D0:AF:27:EA:F6:8D:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/4a2c271a-6692-3179-941a-0d087d280308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402/8baf6f06-4472-4c79-8a01-5c338d64c402.crl

            X509v3 Authority Key Identifier:
                keyid:95:D3:B5:8C:0D:5D:5F:85:19:CD:8F:FA:39:F4:82:C2:33:BB:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8baf6f06-4472-4c79-8a01-5c338d64c402.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fc:33:54:c4:cd:8e:df:0e:cc:cf:df:25:7b:0f:81:87:d7:
         b3:38:f2:4a:18:8f:c4:80:84:53:1c:ad:c0:f2:f9:d3:67:db:
         5c:da:a1:ce:7c:82:fb:af:37:d5:aa:24:b0:9e:88:53:9e:b2:
         0d:8c:5d:fd:e7:33:05:4b:0f:9f:7d:05:b2:d6:3f:40:6e:3c:
         a4:a7:ff:93:53:0b:f7:b8:2f:f7:43:03:f6:57:a6:f9:3e:07:
         c8:56:e9:fa:8e:d5:e9:a2:41:38:e2:07:ac:71:69:96:1e:1e:
         ac:13:05:42:fc:3f:1e:23:67:b6:88:f9:7b:2b:95:db:92:34:
         d2:0a:ff:74:e8:be:6c:e3:50:3c:2d:54:0b:92:26:71:5a:2b:
         af:11:0b:83:90:c3:62:ac:e2:71:10:4b:82:15:54:da:8d:19:
         b1:ca:0b:eb:a1:2f:07:5c:20:5f:c2:e7:13:74:e5:b3:c2:0f:
         f6:60:06:45:88:9a:48:aa:dc:5f:79:63:01:89:00:51:9a:60:
         bd:f4:4e:de:52:ce:e9:37:a8:80:b9:1f:09:fe:8d:fc:a8:c9:
         45:37:b5:53:99:2c:aa:dd:fa:62:25:87:85:00:19:31:b9:9a:
         3b:c5:d2:45:fb:b4:3b:e6:37:d8:3a:d5:e6:29:b6:9a:b9:f2:
         e7:81:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:14:25 2025 by rpki-client