Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/ac71e1cd-bff9-3892-84b0-759735bd38ae.roa
File:                     ac71e1cd-bff9-3892-84b0-759735bd38ae.roa (raw, json)
Hash identifier:          luHbKLlLmBPo/V6Z8Hlxqc/Ol0HCeyfm+NKAkVSYncQ=
Subject key identifier:   C5:64:3A:CB:54:24:B5:28:0A:EC:A5:8E:8E:CB:7A:FF:AD:D0:A1:33
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F4328584953C44BD36CCBC2B44464E8D0
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/ac71e1cd-bff9-3892-84b0-759735bd38ae.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     63008
IP address blocks:        2602:f9a9:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4b:d3:6c:cb:c2:b4:44:64:e8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=d4fa9378-9eb0-4b40-ab04-9d9a418da8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7c:13:4b:85:f0:04:27:5c:b4:25:2e:4c:c0:
                    0f:d3:51:5d:80:9e:ec:94:e0:b4:d8:8e:82:7d:ea:
                    52:fa:62:23:22:7a:ba:84:5d:aa:b5:2d:89:12:2d:
                    ae:0d:a1:e5:bf:a2:2a:b2:8a:f0:ea:0f:02:09:bb:
                    bf:8b:73:a9:05:3e:92:ae:90:9f:e6:81:2c:4a:8d:
                    11:6c:c2:79:df:59:a3:c3:ea:78:01:35:cf:56:44:
                    93:bf:8b:d0:5c:d9:a0:04:97:e7:47:6e:0b:b5:42:
                    7e:24:e4:2d:a4:7a:3d:ac:ef:e1:89:95:5b:90:99:
                    be:a0:78:06:bb:a9:d6:2b:76:fc:d4:ee:c7:65:a7:
                    4a:73:af:b6:a7:0a:ca:3d:80:75:29:f0:e5:b2:74:
                    95:0a:6b:58:bf:2f:93:fd:1a:12:9b:23:11:81:a8:
                    4e:e2:9b:ab:9d:59:af:e1:9c:d6:83:07:cb:93:16:
                    91:dd:90:55:77:2d:bc:6b:32:8e:fe:ee:91:d4:1c:
                    26:b7:ef:49:e5:21:89:d7:c4:8e:6a:2c:cf:59:b6:
                    d8:44:df:a9:72:a0:0d:bb:40:ca:d5:8c:e7:51:a5:
                    2d:c1:6f:40:3a:99:4b:c3:5d:0d:2b:b8:c4:c5:3e:
                    4d:4f:4a:00:9f:d4:d5:0b:2c:c9:92:14:8c:d1:02:
                    e1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:64:3A:CB:54:24:B5:28:0A:EC:A5:8E:8E:CB:7A:FF:AD:D0:A1:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/ac71e1cd-bff9-3892-84b0-759735bd38ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:3f:f9:4d:6d:25:8e:e2:be:ae:f9:df:f9:c9:1f:d0:f8:
         03:f7:d3:0d:99:35:bf:1b:10:57:5e:2d:20:e9:f3:aa:2b:a3:
         cd:b3:3f:b1:ba:aa:7b:cc:f7:a7:6e:cb:07:c2:de:41:12:07:
         70:f5:a4:b6:96:43:10:9e:52:6c:7f:88:52:59:0b:69:56:0f:
         a2:f8:a9:7b:38:9a:36:b8:2d:9d:1c:20:f3:ee:32:81:d0:64:
         46:76:63:9d:97:09:c9:90:a2:d8:2d:73:0e:97:b0:d4:59:c4:
         52:e0:5c:57:27:a4:4c:79:1b:67:2d:34:19:9e:7b:c2:dd:5f:
         5a:8c:fe:d0:e4:d1:3b:40:73:c7:b0:59:c1:27:57:6d:2c:61:
         82:59:31:dd:dd:6d:9e:18:f5:80:21:0d:b8:14:b6:ce:8b:62:
         fe:0a:4c:93:a2:29:7b:e9:9e:e2:17:0e:fc:a8:04:4b:19:23:
         92:2d:f9:fe:f6:71:2f:d0:d6:c7:f6:1f:34:b0:51:27:4d:1f:
         0b:a9:9e:c2:f7:52:94:1d:f6:b8:a0:30:a1:db:ac:82:1c:5b:
         29:89:88:f8:29:9b:08:01:ec:18:81:00:c1:78:3e:af:bd:d2:
         ac:58:99:8f:e7:d3:e1:9f:88:8e:d6:7c:32:b6:fb:5c:67:6e:
         c4:d9:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:43 2025 by rpki-client