Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/70010f90-7504-3a35-8bff-82be38da4da9.roa
File:                     70010f90-7504-3a35-8bff-82be38da4da9.roa (raw, json)
Hash identifier:          QDcKSjRYVW54qa29We8RB5UMVB6iBX6iayLDf/Ms/Ic=
Subject key identifier:   12:E3:2D:48:99:E1:3E:E4:C5:FF:E0:D1:E5:0C:74:D6:07:DF:99:C2
Certificate issuer:       /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
Certificate serial:       010D0C9F43285848AF2B82AADBFB051D4F413400
Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/70010f90-7504-3a35-8bff-82be38da4da9.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     397898
IP address blocks:        2602:fccd::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:82:aa:db:fb:05:1d:4f:41:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=689a789c-40b5-4c3b-904d-8b92b3e943f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:79:2f:03:02:dc:76:31:6f:02:a2:43:63:ed:
                    87:68:ee:f2:94:1f:45:d5:e0:f2:1c:4d:6d:69:51:
                    cd:af:92:51:51:0b:f7:29:68:04:6b:21:03:1d:56:
                    cd:97:28:77:95:4a:e2:73:b2:88:b0:ed:4f:8e:c4:
                    15:ff:cb:0b:31:8f:ae:89:4d:e7:97:a7:44:0b:ba:
                    5f:4a:0c:40:c1:dc:a7:0f:39:d5:f8:95:7e:e7:9c:
                    76:46:f2:31:6e:1a:46:59:fd:31:54:b3:ae:e8:8b:
                    fd:f1:56:4d:23:2b:e9:fd:fd:ab:89:b1:95:cf:7f:
                    d9:6b:70:c5:ef:32:3b:ad:88:65:8b:89:6f:bf:a1:
                    4a:dc:e9:3f:a4:72:31:f3:08:09:46:81:12:b8:9d:
                    92:f1:4d:0d:45:80:d6:bf:f7:98:fc:e7:88:0e:50:
                    6b:5c:b3:f9:86:d4:be:c2:90:75:4b:8b:3a:e9:5d:
                    fd:41:7a:62:e4:e4:9b:bd:43:bf:a3:5d:98:f9:d6:
                    82:97:6b:56:c1:11:a9:b9:dc:bf:d2:0d:07:c9:34:
                    f7:ef:d0:28:c4:71:3d:d8:13:98:a7:02:8f:68:d8:
                    4c:44:5f:0a:15:be:93:50:79:2d:32:4a:e4:5b:a7:
                    e1:c4:7a:97:69:5b:6c:df:35:32:26:a1:d1:66:ba:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E3:2D:48:99:E1:3E:E4:C5:FF:E0:D1:E5:0C:74:D6:07:DF:99:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/70010f90-7504-3a35-8bff-82be38da4da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl

            X509v3 Authority Key Identifier:
                keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fccd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:04:f9:3e:ca:37:37:9d:de:ce:82:32:90:80:d8:dd:4a:6b:
         d9:ad:db:c8:81:33:28:ab:b6:32:ae:ee:56:b2:69:08:a6:e8:
         35:c0:7e:4a:65:69:68:df:12:d1:fe:66:7c:4f:07:e4:3c:b4:
         40:7f:2b:6d:8f:7b:12:0f:31:70:5d:28:fb:fc:5d:32:e8:2c:
         19:d0:7e:dc:3e:82:c9:c5:0a:b8:3e:cd:fc:72:60:4d:f9:22:
         7c:2a:9a:49:dc:68:14:4e:51:2a:a2:4e:9d:28:fb:ae:ce:f9:
         f8:8c:91:0a:c1:aa:e3:13:94:94:98:53:90:47:5d:ad:95:0e:
         9c:31:38:a7:f0:f0:e9:47:fa:cc:15:7b:4a:e0:98:13:7d:e8:
         33:66:7c:7a:ce:20:fd:95:49:65:fd:c4:70:d8:48:4c:60:32:
         15:c0:dd:48:1d:ba:a8:46:52:b6:5c:38:60:6d:a4:6e:92:09:
         39:a0:e9:2d:0b:ea:93:55:d3:6d:c9:0f:fb:ee:93:b6:28:fa:
         e9:a9:7e:33:b5:4f:4b:a8:cc:b8:d0:af:88:98:b0:3d:7f:16:
         f8:32:63:52:57:8f:1b:14:dd:cd:7b:e5:6b:01:e4:6b:6e:24:
         48:0c:d5:bc:65:d0:bf:9d:c5:12:60:6a:44:49:da:28:45:70:
         a6:3d:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:32 2025 by rpki-client