Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa
File:                     7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa (raw, json)
Hash identifier:          44h/ASCUbtQbJXUpeGYz7qUP4PJ3aqLLSljt5R/MHYs=
Subject key identifier:   35:E5:15:47:80:79:C2:D9:ED:B4:D6:1B:D4:49:EB:E7:D0:3A:F3:BA
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F432858492CAE8771CD5C5E3CE8064B00
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     210630
IP address blocks:        2602:fc24:10::/48 maxlen: 48
                          2602:fc24:11::/48 maxlen: 48
                          2602:fc24:12::/48 maxlen: 48
                          2602:fc24:13::/48 maxlen: 48
                          2602:fc24:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:87:71:cd:5c:5e:3c:e8:06:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=94e95c94-05c7-4bec-81a4-7b2c977edb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:61:e3:a1:48:1d:82:a9:e9:96:06:ae:8d:
                    24:14:92:0d:aa:c7:31:04:57:e2:27:be:e7:dd:79:
                    eb:72:97:2c:6d:53:97:22:5e:cd:08:a2:5d:27:70:
                    72:3b:58:40:c7:d7:0c:78:a9:82:3c:94:98:bc:6b:
                    fc:c3:af:90:80:9a:a2:8b:24:01:66:ce:94:e2:1f:
                    62:3b:b3:aa:92:45:b4:6c:b0:06:92:42:b5:55:be:
                    e2:b2:e9:9d:69:7b:b8:94:c9:4e:7c:8f:a5:ec:3f:
                    91:d0:21:25:35:15:9a:90:dc:a0:5a:3f:02:2d:e9:
                    0b:83:75:eb:d1:16:9f:5e:a2:8c:9c:d1:db:07:ba:
                    e0:40:67:74:cd:ae:d2:6d:c1:ab:b4:c5:0f:02:78:
                    61:0e:a2:e7:a7:13:fa:34:65:36:8d:fa:95:12:3f:
                    03:c8:3e:71:2b:a9:1d:cb:bd:bc:6f:15:69:bb:94:
                    5b:9f:d6:16:45:bb:27:c9:69:4a:0b:6f:a9:dc:a6:
                    ad:9b:36:b2:74:a7:83:7e:61:aa:d8:91:3b:cb:51:
                    1c:e5:3d:88:e5:4a:34:c5:63:61:f7:7a:54:33:43:
                    1f:52:18:e2:4e:00:f2:fd:d3:bb:af:6e:81:20:8f:
                    ae:c9:fa:41:5b:b9:7f:a0:c7:cd:00:a9:7b:79:bc:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E5:15:47:80:79:C2:D9:ED:B4:D6:1B:D4:49:EB:E7:D0:3A:F3:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/7bb7f7a5-c834-38c1-b5d7-b9693c9ee10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24:10::/46
                  2602:fc24:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:93:65:7b:96:41:1d:1b:3d:a9:0c:ad:f1:eb:47:59:21:4c:
         73:23:9d:34:71:82:93:4c:c1:ae:53:cf:4f:fc:39:07:f6:52:
         26:b7:d4:9e:0b:2b:f4:b6:5f:73:cb:ee:a3:18:f0:01:0b:b0:
         43:e8:59:1f:4a:04:42:41:85:55:b1:14:4c:09:1a:1e:cd:37:
         7f:57:fe:0e:9e:29:6c:d2:e4:30:7f:fc:50:87:ba:43:1e:3d:
         b6:cd:80:fc:0b:61:ad:2a:c8:44:f0:21:ae:fe:bf:3e:96:bd:
         4a:25:c5:ae:b1:63:8a:41:ec:4b:f7:0e:2d:b6:15:d2:74:80:
         95:86:4f:31:6d:2f:c1:c0:2a:9b:a8:37:ad:81:38:c8:3e:a4:
         db:75:0a:f8:e5:3d:a8:b3:7a:39:a8:ba:02:f5:e6:5a:44:19:
         fc:e1:2d:98:0e:80:69:10:10:b5:6a:1e:1e:da:3e:f7:68:ab:
         be:2b:f7:26:12:01:fc:05:80:75:c2:11:02:e1:d8:32:d7:30:
         9a:42:66:6c:d4:7c:2a:e3:b8:03:3e:f7:f8:79:80:5b:f0:5b:
         9a:d3:82:2e:5d:87:d2:79:a4:79:7e:68:fc:1d:b6:3e:ec:3d:
         a0:1b:95:a9:81:05:49:91:08:0f:b4:87:56:1e:15:91:f8:22:
         31:00:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:06:53 2025 by rpki-client