Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f4aafb04-bd47-38e2-b434-3148b69c7fbe.roa
File:                     f4aafb04-bd47-38e2-b434-3148b69c7fbe.roa (raw, json)
Hash identifier:          I27/XBhuIq3xPdxoJSlCL1XDDq1k+WJ6QSf4PhoMbSg=
Subject key identifier:   6C:1D:94:48:76:BE:E2:DD:00:FB:F3:E8:5D:72:EA:84:D8:EE:62:18
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F4328584905B6B1DC785266465E390280
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f4aafb04-bd47-38e2-b434-3148b69c7fbe.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     398427
IP address blocks:        2602:fd35:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b1:dc:78:52:66:46:5e:39:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=c30d54ab-a621-4b2a-aac5-8d1e40c454d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e1:6f:ae:c1:ed:9d:e5:4e:3c:d5:b2:de:aa:
                    6b:a1:78:2c:e0:80:ab:de:94:90:1c:49:e4:0b:87:
                    19:1d:59:9c:6c:96:b4:c3:80:ac:bf:84:35:f9:14:
                    10:87:8c:f7:49:b9:4d:a5:2e:5a:fc:fa:b1:dc:89:
                    79:6f:4f:ba:f8:8d:c9:b8:2e:0c:cc:37:cb:39:20:
                    49:a9:1b:a1:e2:5a:ac:eb:d2:d7:38:1d:a3:83:fd:
                    fd:67:ee:b9:ed:e7:cd:06:33:f1:3d:17:39:98:11:
                    c6:f4:95:5c:2b:a1:b8:29:6d:c6:e2:5a:5b:86:e9:
                    a4:12:60:c2:7d:4f:61:8b:fb:81:c5:72:f4:13:14:
                    62:6f:73:8b:34:82:2a:e5:33:ed:dd:a6:a6:a1:63:
                    99:7e:87:27:9b:8b:40:03:6e:07:cf:b9:58:28:b8:
                    b6:e4:ab:fb:fe:7a:f2:55:19:28:07:2b:e9:53:47:
                    35:ab:99:e0:0b:a3:8c:a0:99:eb:39:2e:7b:3b:67:
                    f0:da:0f:be:30:f0:d8:82:2c:e4:d5:c2:4e:56:7b:
                    4a:ff:21:82:60:a4:e0:5d:d1:d4:b7:f8:45:9e:72:
                    67:c1:3e:08:22:c5:f3:58:88:e3:dd:86:fe:15:33:
                    6a:cd:d2:88:34:ef:80:50:31:53:49:ba:d3:41:7a:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1D:94:48:76:BE:E2:DD:00:FB:F3:E8:5D:72:EA:84:D8:EE:62:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f4aafb04-bd47-38e2-b434-3148b69c7fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd35:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:62:f8:78:31:a8:12:e9:9e:df:1a:7a:e7:21:23:04:90:c3:
         8b:ce:15:da:bd:c8:17:ba:78:01:d6:4a:8b:e8:e6:8b:5d:07:
         c5:7e:0c:ed:da:4d:46:0d:3d:d7:3a:59:fe:8b:e8:61:b0:7b:
         e7:19:0d:50:37:03:6b:31:08:2f:c7:f9:ce:52:12:95:96:95:
         c9:a2:97:3b:63:81:f5:72:ea:cc:c9:ee:92:fc:2f:69:4c:1e:
         c5:bf:97:7b:20:20:af:1c:2f:49:d8:69:64:d6:f4:ca:05:fd:
         2e:e2:51:6c:ac:46:a4:98:fd:38:76:46:29:88:a6:ea:40:a7:
         f6:7f:0a:27:dc:69:1f:13:2e:13:79:9c:77:70:ac:ee:5e:84:
         ec:12:24:d5:ca:38:40:2e:68:50:d0:82:f5:ea:a2:ef:e1:82:
         ef:6d:26:3f:96:5b:8e:3c:3c:b6:8f:2b:79:aa:54:c6:b7:0c:
         9d:e0:71:51:dc:5e:f0:b6:d6:5b:5f:19:15:a9:4b:d4:01:c3:
         99:9d:62:cd:56:d3:99:21:0e:2e:78:3d:66:f4:62:c3:50:e0:
         d3:5e:5a:a1:4b:49:fa:9b:33:1e:d7:a5:9a:90:7b:c2:26:b3:
         4f:01:ee:00:5d:91:00:9e:4e:54:72:47:d6:dc:32:f1:96:4b:
         3a:9e:89:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:18:50 2025 by rpki-client