Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa
File:                     2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa (raw, json)
Hash identifier:          pks5xJleqysh4VZHO7z6qyp2NWeisxucAAuqjekPr+U=
Subject key identifier:   73:8B:4E:FE:95:7F:20:B3:29:45:E2:7D:CD:C7:F4:EB:46:D8:A9:BE
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285848BBBB8264949A8C474E477540
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     199203
IP address blocks:        2602:f9a9:400::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:82:64:94:9a:8c:47:4e:47:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=6f8374a1-e27b-4360-88bb-19f3f1d08c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:57:89:e4:d3:a0:aa:57:35:27:91:00:6c:
                    f5:dc:89:65:f5:8b:22:a0:37:68:cc:de:59:79:9b:
                    45:bf:3a:8f:ee:ac:bb:52:ed:d4:0d:c9:36:bd:8f:
                    7c:0c:6d:27:b2:c4:5a:e2:21:55:ed:0f:aa:59:73:
                    45:13:d3:61:7c:55:11:fa:0e:81:3b:1c:78:e1:5e:
                    40:db:f7:a5:47:c5:f8:80:c2:eb:30:c0:d4:86:88:
                    d3:eb:d8:e1:93:b7:b8:85:85:83:a3:67:56:70:26:
                    91:7c:0e:d1:15:8d:d3:68:1e:71:c4:20:ea:b8:2a:
                    65:93:fc:57:94:d7:e4:f8:75:4e:21:52:4e:fb:5c:
                    81:a3:2b:4c:81:a2:bb:2d:f0:fd:23:f8:4e:3a:3c:
                    8c:40:48:12:ed:d3:8c:a6:8c:50:2e:a1:ab:36:ad:
                    f3:a4:dc:20:e8:03:d2:53:79:9b:8a:2c:95:c0:b5:
                    17:d7:d1:2a:ce:bf:f1:00:78:d5:3f:5a:1b:1c:f6:
                    99:b7:27:0d:2e:d7:0a:ba:e3:8f:e8:b2:cc:14:51:
                    26:96:2d:5d:06:0e:8f:6b:87:20:f7:6d:ab:d9:d6:
                    b6:c7:08:86:37:0c:60:a7:ce:db:30:d2:b2:a1:e7:
                    27:2d:16:58:43:a1:5f:51:be:17:6e:0e:50:1b:f8:
                    ab:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8B:4E:FE:95:7F:20:B3:29:45:E2:7D:CD:C7:F4:EB:46:D8:A9:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/2b7ff483-6330-3dfe-a36c-9b9cc9dc413f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:39:5d:5c:a9:bb:22:b4:82:c5:59:fa:ea:77:bc:8b:62:93:
         be:f2:17:c5:42:c3:cc:52:08:be:ef:86:11:d8:42:a7:65:27:
         9f:56:25:27:e1:12:c4:28:b2:7e:4c:3a:c5:db:67:d8:a8:4a:
         9f:58:d2:24:db:80:9d:9b:d4:b4:d4:00:76:01:89:84:52:b3:
         e9:3e:08:a2:68:bf:42:d2:53:b2:3c:99:5e:0b:7c:47:57:31:
         53:7b:b8:82:9a:a8:07:7a:bf:b1:c0:2e:a7:45:1a:1d:65:74:
         64:74:84:3a:4f:3e:36:64:2d:fb:86:40:fe:3c:7a:77:b6:fe:
         f0:d7:1c:b4:31:53:e7:d3:5f:32:bc:14:6e:2b:e6:07:13:31:
         19:97:a9:38:98:3a:de:b9:f5:4d:99:fc:ab:0e:e8:3a:b8:81:
         32:f3:df:48:00:21:0b:32:66:f4:74:a8:ca:29:ba:23:b4:de:
         88:fc:36:38:09:ca:fa:22:96:af:ea:3b:34:4c:0d:51:07:35:
         22:f2:9a:23:87:21:72:e6:90:d8:d7:05:8f:4d:85:40:52:bc:
         fa:5e:e3:86:1c:65:16:a0:89:20:43:7b:b5:7d:7e:53:47:ec:
         a7:13:24:4e:84:b1:fa:0f:a9:bc:d6:17:cc:5d:9f:8c:39:eb:
         28:8d:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:54 2025 by rpki-client