Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/0489d2ec-d190-3379-8028-43195e07a11d.roa
File:                     0489d2ec-d190-3379-8028-43195e07a11d.roa (raw, json)
Hash identifier:          Cyk1plFqAOIj2qMFyMzvFZPJe3cM4gQe2PP+VbZb0Ng=
Subject key identifier:   25:46:67:5B:DD:A6:44:35:5D:8A:74:E9:7D:6E:51:64:EF:B1:8B:3D
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F4328584900216E2AEAF958BE0CA92B80
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/0489d2ec-d190-3379-8028-43195e07a11d.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     51965
IP address blocks:        2602:f9ec:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:6e:2a:ea:f9:58:be:0c:a9:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=0f9eead5-1175-4571-9ab0-49f039fe3a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:22:6c:c4:79:ef:cf:ce:fd:5e:c6:08:91:3c:
                    94:cf:95:a7:98:a6:1b:95:57:b1:a0:f6:3c:d9:1d:
                    99:16:f4:45:db:1d:a3:fb:2b:46:8d:e9:dc:79:83:
                    b7:62:94:0c:7e:02:95:87:54:5c:9d:22:bd:52:1b:
                    1c:4a:7d:02:4b:ec:29:c6:0f:ba:75:1a:33:67:0a:
                    c7:0b:23:bb:69:62:c1:f6:9d:62:9a:75:32:b1:76:
                    40:91:af:81:74:a2:1d:a5:a6:84:ff:3a:26:c1:5c:
                    a1:f8:78:77:59:62:4e:e9:8e:3f:78:b9:1b:2f:37:
                    5a:ae:f7:12:e6:28:5c:c6:c4:34:08:c9:6b:e1:cf:
                    25:e4:d7:c2:a5:35:64:3b:2c:06:55:c2:23:bb:e3:
                    f8:b5:af:79:56:29:48:10:fa:a7:ca:ff:bc:9a:1b:
                    d9:c5:a7:c8:8c:cf:c2:71:13:da:8d:55:37:ef:55:
                    d4:89:c6:ae:93:31:27:8d:4b:4b:ee:44:cb:8a:91:
                    11:65:25:0a:70:22:dc:72:af:24:c4:79:89:4d:87:
                    1a:cc:1c:49:ec:36:2b:87:14:1c:51:9b:ff:8d:09:
                    43:c5:f6:01:b8:c4:71:b7:3a:77:e5:11:a8:51:25:
                    b9:df:ee:48:c3:5f:3e:55:62:c2:da:c3:e7:f1:e0:
                    a2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:46:67:5B:DD:A6:44:35:5D:8A:74:E9:7D:6E:51:64:EF:B1:8B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/0489d2ec-d190-3379-8028-43195e07a11d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c7:6f:fd:89:9e:4b:9c:5c:3d:45:03:94:1a:14:6d:05:e2:
         fe:a4:a9:c1:f2:eb:51:88:80:1b:be:a1:9f:e1:8d:8c:3c:20:
         ed:75:52:92:a8:71:d0:a6:3e:0d:ff:ed:46:77:b1:4a:f2:ff:
         c2:35:de:64:21:d6:ab:d5:0e:a1:9a:d6:7b:af:7c:b6:01:d2:
         90:a1:b9:c6:91:ca:4f:3f:e2:b8:88:3d:1c:3e:f6:94:90:dd:
         ee:73:72:19:ae:7b:78:4d:fd:9b:54:22:f7:07:be:68:c0:34:
         fc:42:28:bb:e1:fa:74:11:70:5b:70:a5:88:a3:7a:d8:ed:44:
         ef:32:0c:2a:23:60:62:d4:fd:ad:29:ea:41:02:59:e5:68:e3:
         ed:13:18:8c:40:4e:b4:ad:bd:44:b8:c0:7c:a2:09:ac:92:ca:
         51:15:81:d1:13:34:b0:98:85:39:49:cb:63:c7:b8:a1:34:7d:
         cb:cd:90:47:4d:b0:02:bf:6b:b7:8c:16:97:f1:48:79:6a:6b:
         98:65:40:61:56:a7:f5:c1:94:49:73:1a:03:e8:d8:2e:21:86:
         f0:f1:75:cc:4f:09:a4:65:ec:88:1c:8c:81:09:a3:fe:a3:d8:
         aa:86:16:d1:ce:a0:83:34:ec:71:99:74:31:5b:d7:c9:f1:f1:
         27:fe:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:12 2025 by rpki-client