Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/307a9479-048a-3244-b466-ef11336bf8ed.roa
File:                     307a9479-048a-3244-b466-ef11336bf8ed.roa (raw, json)
Hash identifier:          TpKa0fNqJvyXBPPv39i8bYCF1HURW8RnO7agUDWTAYY=
Subject key identifier:   FF:8B:2A:79:14:AB:7E:81:FA:93:84:0F:DF:63:76:CD:5A:CA:55:96
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F432858490B4C1AE707C28F74F5AED9C0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/307a9479-048a-3244-b466-ef11336bf8ed.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     7862
IP address blocks:        2620:16d::/32 maxlen: 32
                          2620:16d::/36 maxlen: 36
                          2620:16d:1000::/36 maxlen: 36
                          2620:16d:2000::/36 maxlen: 36
                          2620:16d:3000::/36 maxlen: 36
                          2620:16d:4000::/36 maxlen: 36
                          2620:16d:5000::/36 maxlen: 36
                          2620:16d:6000::/36 maxlen: 36
                          2620:16d:7000::/36 maxlen: 36
                          2620:16d:8000::/36 maxlen: 36
                          2620:16d:9000::/36 maxlen: 36
                          2620:16d:a000::/36 maxlen: 36
                          2620:16d:b000::/36 maxlen: 36
                          2620:16d:c000::/36 maxlen: 36
                          2620:16d:d000::/36 maxlen: 36
                          2620:16d:e000::/36 maxlen: 36
                          2620:16d:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:1a:e7:07:c2:8f:74:f5:ae:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=f3e7fe40-9f51-4bc0-9a3a-7b5d75fae181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:32:43:1d:5d:dc:29:6e:5d:8b:04:e5:a2:
                    87:ef:93:9d:59:bf:92:b8:5c:fe:e3:0b:a7:38:1a:
                    76:36:3a:7c:da:27:0b:2a:a6:84:34:28:5f:ac:48:
                    d6:f9:53:a4:62:ed:30:e2:ab:65:67:07:86:13:57:
                    a2:e0:44:8a:88:5d:99:c9:80:86:38:74:43:68:8b:
                    9e:24:45:a2:25:5f:99:1c:5d:f3:24:34:5d:98:a0:
                    29:3b:91:e0:02:79:92:96:c8:05:5a:24:f7:cb:4f:
                    69:7d:7f:cd:8a:b4:36:d0:2e:8d:ea:3f:8c:52:93:
                    8f:a2:7d:0f:57:85:23:9e:98:37:05:e5:f0:8f:39:
                    e1:39:4a:67:ba:76:2a:92:02:fc:b1:99:40:b1:42:
                    98:f6:59:bf:1a:2c:8c:f2:94:dd:ff:81:3a:b4:83:
                    89:68:8a:fe:95:d8:47:cf:42:eb:ea:73:1b:5c:d9:
                    8e:7a:90:f3:65:f9:a4:e8:68:5e:b9:a4:50:90:b4:
                    e0:22:0f:4d:90:89:da:15:44:73:7a:14:72:27:27:
                    49:de:b2:5b:38:fd:30:81:fc:ca:d6:b4:91:b8:0b:
                    5b:e2:1a:e5:24:c9:76:72:e9:f3:29:50:ed:23:16:
                    cf:0f:bd:b5:95:03:ef:74:79:bf:57:cd:36:fd:9d:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8B:2A:79:14:AB:7E:81:FA:93:84:0F:DF:63:76:CD:5A:CA:55:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/307a9479-048a-3244-b466-ef11336bf8ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:16d::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:ab:0c:0b:bd:6e:0a:48:a3:00:4a:19:76:57:06:21:24:cc:
         f3:2c:ec:81:6a:41:45:11:3b:72:6d:25:9b:6b:2b:41:86:2a:
         b5:8e:f1:76:37:8e:90:e5:cc:6a:b4:40:3d:e5:18:ca:e2:f2:
         08:07:77:66:f0:49:bd:2f:ec:97:06:3a:f2:cb:2c:17:75:1f:
         74:1e:37:f5:d6:d8:50:7c:55:f9:fa:9b:b7:e0:52:15:6a:4f:
         b2:ba:16:a0:35:60:80:a5:94:af:69:26:6c:b5:3c:f4:6c:96:
         d5:a1:37:0e:99:5a:f4:45:69:1a:b9:5f:e4:14:fa:b7:b8:6c:
         8e:f7:db:1e:db:f5:f5:15:69:67:8e:60:ed:f9:1d:83:0f:db:
         35:90:8a:6d:f9:82:c6:33:ef:be:06:bf:ca:b9:95:ef:a2:13:
         41:53:ae:0e:97:cc:35:86:17:4f:ef:5e:62:11:0f:d7:0e:88:
         9c:5d:b0:cc:23:c7:9a:60:c5:d3:b9:57:66:dd:7b:fb:7c:72:
         a3:49:41:62:3f:40:39:a3:73:a4:2f:03:65:ee:75:29:cf:70:
         62:27:af:9a:86:12:25:40:f9:f1:ef:72:fb:ca:a1:af:c3:be:
         95:57:58:23:cf:97:1e:fc:ac:d8:7c:0c:00:28:7c:6c:cc:88:
         e4:f2:ae:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:31:28 2025 by rpki-client