Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
File:                     8772ccd6-b189-3648-86b4-02b297d28b4d.roa (raw, json)
Hash identifier:          9ll3DpMeFdVcx6xHOh1lkg1xOhrbs1GelvKp8H5cJic=
Subject key identifier:   92:39:B1:44:82:01:D2:AE:5F:08:AA:3B:18:58:95:E4:54:08:A2:29
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F43285848FD569B3A5776984B4AD8A380
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     19168
IP address blocks:        2602:fd23:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:9b:3a:57:76:98:4b:4a:d8:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=e50a9bb0-89db-496c-9b86-ec04b7932064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:ed:4b:b8:df:88:e3:e9:0d:b1:15:ad:7c:
                    39:11:27:60:94:95:24:91:5a:c0:d1:ce:a5:79:9b:
                    66:fe:05:b9:09:90:4c:26:62:f2:c8:df:bc:d6:e5:
                    b1:a5:80:77:dc:eb:8c:39:16:b2:c3:30:4a:31:df:
                    c7:95:f4:2e:e4:ac:5f:35:58:a6:7c:13:b7:6b:1e:
                    97:b5:2e:31:b1:c7:3a:a9:8e:88:5d:8a:37:23:6a:
                    ac:2c:3c:8b:a6:cc:d2:fa:dd:95:7b:bc:bd:be:e8:
                    49:69:c7:87:d4:17:83:a8:d1:3d:13:20:6d:68:7e:
                    e9:4d:b0:92:fb:00:83:2c:a5:76:a5:54:26:ac:c3:
                    21:6c:40:a7:67:f2:9b:41:97:4b:47:fa:69:26:e2:
                    86:87:a5:b4:b1:ff:9a:94:ea:5f:e8:6f:72:f0:ae:
                    44:2d:5b:b5:4f:6b:32:11:ef:af:a2:e2:b6:f0:b9:
                    6b:1f:e6:3f:fe:09:00:c3:39:96:b1:97:db:aa:2e:
                    84:4e:d8:5a:43:7e:f3:28:75:d2:c5:23:d7:ac:70:
                    11:ac:f1:a8:b7:ef:41:b0:45:df:de:0b:71:f7:51:
                    26:54:c7:80:53:c4:55:da:d9:d6:a6:1d:63:5a:4b:
                    cc:70:d9:cc:31:d0:4c:62:44:11:86:d1:46:fb:a9:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:39:B1:44:82:01:D2:AE:5F:08:AA:3B:18:58:95:E4:54:08:A2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/8772ccd6-b189-3648-86b4-02b297d28b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd23:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:eb:1f:f8:92:0a:6c:5c:f1:c1:f7:81:7d:c4:0c:f8:53:19:
         e0:25:c4:07:3d:2a:51:2f:a2:1c:20:9d:d4:68:bc:d2:ae:07:
         30:82:01:11:32:dd:6e:6d:24:31:e5:fe:ee:7d:04:ed:61:37:
         59:32:64:24:f2:b7:ad:5a:15:16:09:58:35:12:5e:98:2b:15:
         c6:95:13:65:fb:19:84:bf:07:6d:6a:d5:85:a7:02:8e:ef:50:
         1a:33:4d:a5:d6:cc:49:05:16:ba:8e:29:a9:4e:4b:c4:a5:d7:
         50:a2:78:99:ce:a5:97:4b:cb:64:a0:9a:c6:c8:3d:36:6a:f5:
         24:d8:bd:89:b0:8f:0b:db:d7:d9:98:eb:44:03:d6:f5:23:55:
         32:72:0f:8f:b5:61:33:39:8b:f7:ec:3b:bd:48:91:35:23:c0:
         30:a4:9d:4b:21:45:7b:ae:e1:74:10:38:20:5f:2c:86:7e:ad:
         7f:2a:32:ad:f2:02:6c:30:14:aa:31:2f:03:55:0a:29:d5:02:
         2d:9e:61:98:eb:4b:6d:a8:c7:a0:96:04:89:56:93:f7:3d:e9:
         37:5f:0c:3d:c6:85:8b:df:cd:e8:b9:6d:50:41:af:35:69:c9:
         d6:9f:ff:76:71:60:c8:9b:22:f5:89:bb:5f:95:d5:4e:03:65:
         78:fb:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:10:57 2025 by rpki-client