Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/42d8c57e-fde5-393b-9bd1-1b0872741781.roa
File:                     42d8c57e-fde5-393b-9bd1-1b0872741781.roa (raw, json)
Hash identifier:          LYj9zOlbPvdPRqbfE7ZyVX0XeT+vwc9ximplRfGJfPw=
Subject key identifier:   05:52:72:66:5E:B6:F1:3C:AB:22:2D:29:43:FF:7D:25:C7:B8:56:99
Certificate issuer:       /CN=a683f70a-4d8a-489e-b03c-abca94cd7852
Certificate serial:       010D0C9F43285848AF2B7E0D138AC5D4CDFE0480
Authority key identifier: B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/42d8c57e-fde5-393b-9bd1-1b0872741781.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     200809
IP address blocks:        2602:fe69:f27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:7e:0d:13:8a:c5:d4:cd:fe:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a683f70a-4d8a-489e-b03c-abca94cd7852
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=5a69af70-0375-419e-aaea-80310394408c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:be:4f:0c:21:06:81:96:10:55:b0:76:f9:
                    6a:78:e0:8f:23:87:b4:f2:e9:05:ac:c5:0e:4b:93:
                    2e:00:a7:0c:39:fd:74:f7:05:23:ff:11:8d:4a:1c:
                    0f:ab:58:b9:54:eb:28:88:99:5a:bc:d1:af:fa:45:
                    c8:84:82:ce:a5:44:8e:7d:60:1d:6a:ad:dc:7b:c0:
                    a8:ef:37:ec:e5:dc:38:1b:31:86:39:1f:af:db:90:
                    f3:21:05:a6:b8:4e:07:24:47:bc:29:af:38:10:ef:
                    71:37:a5:69:e5:c2:b3:c0:47:26:a8:2a:5f:06:d1:
                    e6:2e:06:e0:a1:85:1c:23:be:d1:d0:d8:e7:90:42:
                    45:fc:54:91:29:da:bc:f2:b7:d7:0d:98:94:c1:05:
                    50:5a:38:be:ef:98:7d:83:3b:c2:35:9a:98:1d:b8:
                    73:0f:ef:26:7c:fe:ee:b8:ae:e6:d1:68:3e:cf:f7:
                    ba:c0:31:3d:1e:a7:9d:d4:02:b1:51:e3:5c:d3:1c:
                    f4:6e:49:86:ef:0a:f5:1d:e0:e5:33:d8:9a:85:68:
                    42:d0:da:8d:2a:48:01:4f:4b:12:3b:43:1b:83:c4:
                    39:40:b7:2a:49:5d:86:ad:4e:42:db:9c:34:13:d0:
                    e3:e0:64:ce:20:42:cf:1c:30:19:83:9a:70:74:03:
                    6f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:52:72:66:5E:B6:F1:3C:AB:22:2D:29:43:FF:7D:25:C7:B8:56:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/42d8c57e-fde5-393b-9bd1-1b0872741781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852/a683f70a-4d8a-489e-b03c-abca94cd7852.crl

            X509v3 Authority Key Identifier:
                keyid:B8:59:03:9E:D8:37:04:1C:D9:8D:1B:75:25:FF:EA:F2:58:28:49:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a683f70a-4d8a-489e-b03c-abca94cd7852.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe69:f27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e4:d5:64:c4:3c:ac:21:95:aa:b9:56:71:0f:30:75:aa:d8:
         19:ab:4c:ed:e2:fd:70:91:d8:e8:b3:89:bc:da:d7:aa:68:54:
         0c:fd:72:e3:d9:4a:42:ca:79:2a:3c:f9:e5:f5:8f:fd:39:ed:
         69:0a:9c:36:2d:9b:35:38:51:1e:37:e8:2d:e2:e4:46:5a:0b:
         ce:73:f1:5e:d9:e4:2b:5a:de:29:65:58:36:ea:ac:c9:9b:97:
         86:71:37:c9:46:af:59:8d:8f:98:74:17:a9:36:56:49:93:66:
         25:2f:81:82:d6:1a:d4:ff:c5:13:da:16:73:f7:75:b5:88:45:
         00:7f:86:48:3e:41:c1:4a:d9:1a:cd:58:27:43:5d:f6:3b:10:
         34:8f:d2:30:67:e7:66:16:5c:00:be:ef:dd:9f:2f:ec:83:4d:
         71:54:4b:d7:25:f6:ba:2d:43:92:1e:9f:5d:48:1b:3c:d8:d2:
         f5:c3:6f:4f:18:c9:c5:4a:73:84:26:38:f7:43:cd:f3:ae:9d:
         ce:90:a8:3d:cc:db:c4:c9:2f:b4:6c:fc:97:d7:55:49:6a:fd:
         f6:f0:de:4d:0f:a0:e9:94:79:63:a3:92:27:17:9b:f5:35:e4:
         bd:d2:91:7b:f9:5c:ce:77:9c:57:bd:13:05:aa:86:f2:74:83:
         68:37:0f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:12:56 2025 by rpki-client