Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/04c7054b-dac9-3d0c-91be-28e2112a6b5b.roa
File:                     04c7054b-dac9-3d0c-91be-28e2112a6b5b.roa (raw, json)
Hash identifier:          SDglfyl9r+bE/q5e390L5LSytq0nxjoh42YwRdQP08Y=
Subject key identifier:   32:9B:22:92:C5:A7:F4:C7:F2:9C:F3:44:49:52:44:B3:AD:BE:97:2F
Certificate issuer:       /CN=8ed6b206-848a-41c7-8e44-d095394ff9fe
Certificate serial:       010D0C9F4328584953C44EDAAD6B8E7DF6F22400
Authority key identifier: 53:04:C9:27:03:E2:6D:C7:C3:AC:47:17:00:EC:10:34:D7:72:5D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/04c7054b-dac9-3d0c-91be-28e2112a6b5b.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     33617
IP address blocks:        2602:f85f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/8ed6b206-848a-41c7-8e44-d095394ff9fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/8ed6b206-848a-41c7-8e44-d095394ff9fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4e:da:ad:6b:8e:7d:f6:f2:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed6b206-848a-41c7-8e44-d095394ff9fe
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=c4c359a7-14c7-4772-a70b-524e55a4985a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:a4:fc:27:ee:3c:f4:f1:ee:47:c2:72:6c:
                    26:0c:51:1c:39:67:e4:ad:40:39:bb:aa:2c:aa:99:
                    3e:5e:8f:4d:27:2e:b7:74:17:58:43:d2:a9:5a:bc:
                    b8:9f:b2:66:ad:5c:d0:e8:66:77:e2:45:0c:46:bc:
                    93:38:a7:19:8b:c7:f5:d8:23:8c:b8:19:fe:72:41:
                    8d:23:2e:12:79:c7:56:ac:9f:d5:ab:31:65:01:23:
                    ac:f1:00:64:3c:43:40:1d:c2:7b:91:47:c2:e5:7d:
                    de:f9:0d:b2:00:dc:3f:1a:d8:d6:16:22:25:2b:cb:
                    35:d9:0a:fe:7e:8b:65:23:08:85:c0:d7:38:80:af:
                    5f:a9:23:6a:32:43:85:f9:91:5a:c4:2c:6e:58:f3:
                    51:36:f9:99:b4:a3:c4:3d:c1:60:86:18:b5:4b:21:
                    ae:fb:20:00:52:60:ef:a9:c8:b7:ca:e8:46:40:ff:
                    89:08:c4:42:97:5e:6c:1c:22:38:03:57:2f:38:bc:
                    a8:b8:1f:21:5f:83:ef:2b:b7:0b:f5:a7:2b:8a:7b:
                    17:23:ff:15:ad:9c:62:ec:74:41:75:24:bc:58:28:
                    b6:12:4b:e9:cd:b9:fb:fd:ef:fe:f0:dc:54:ff:da:
                    f9:eb:1e:0b:1d:97:4d:8a:4e:3f:6f:6d:fe:9f:e3:
                    0f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9B:22:92:C5:A7:F4:C7:F2:9C:F3:44:49:52:44:B3:AD:BE:97:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/04c7054b-dac9-3d0c-91be-28e2112a6b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe/8ed6b206-848a-41c7-8e44-d095394ff9fe.crl

            X509v3 Authority Key Identifier:
                keyid:53:04:C9:27:03:E2:6D:C7:C3:AC:47:17:00:EC:10:34:D7:72:5D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ed6b206-848a-41c7-8e44-d095394ff9fe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f85f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:13:58:31:80:d7:3a:03:c0:0f:46:9e:e9:7d:f3:ca:4c:e6:
         f0:7e:b4:94:8b:62:9b:10:95:c6:c6:3b:77:b0:23:a1:c7:af:
         54:8d:4f:fb:e9:d0:56:24:8f:27:0a:4b:28:6c:4e:c8:66:da:
         32:7f:c8:21:f8:8b:39:7c:00:4d:e8:44:04:65:74:0e:15:32:
         d0:bc:fc:43:1f:55:60:f0:c9:1e:a6:05:10:b8:38:cb:35:7e:
         5c:f1:0c:c1:b2:85:74:3b:a1:50:3d:9a:26:bd:51:1a:5a:54:
         a3:12:a7:87:72:2e:6b:28:79:0e:fc:93:02:c9:09:dd:0d:53:
         00:c2:43:9c:06:98:d4:83:53:66:26:36:65:8a:49:1b:44:f5:
         fe:2e:7f:b3:12:a3:a7:af:aa:98:74:09:9b:d5:ff:e7:07:76:
         27:5a:ea:99:d1:82:59:a4:94:99:e9:59:5e:25:48:fb:5b:0e:
         5e:55:64:a3:e2:c9:39:0b:b6:b6:1c:a9:f7:be:04:58:2d:ca:
         13:23:02:10:e9:6a:de:2e:e9:b9:06:ed:64:0c:a1:b3:c7:17:
         1c:a8:38:cd:81:55:3a:61:90:29:60:4b:fd:0e:ec:5f:ca:6f:
         69:5a:74:87:7a:eb:14:3c:83:ba:eb:2d:b5:a3:f5:85:35:5d:
         23:1b:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:56:05 2025 by rpki-client