Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/76993081-d5f8-3f76-b351-b4ff18112be7.roa
File:                     76993081-d5f8-3f76-b351-b4ff18112be7.roa (raw, json)
Hash identifier:          CLtBWcOff6I+hCGMQ4qDruHFhnuwDUNUAylRrWgtdhs=
Subject key identifier:   43:FF:15:96:1A:CF:DB:F1:59:26:1E:18:F4:C8:4D:56:29:50:92:96
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F43285848D0ABB297350A28456D83D400
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/76993081-d5f8-3f76-b351-b4ff18112be7.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     149020
IP address blocks:        2602:fa08:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:b2:97:35:0a:28:45:6d:83:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=f0d195c2-1e98-4ea2-a503-cf5a2063a387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:78:dc:92:87:a9:68:2a:28:27:40:60:9f:
                    29:6b:bc:a8:e3:c9:2b:fc:2c:ce:f2:5a:91:32:9e:
                    b1:7a:f0:e1:74:96:5b:ce:30:69:d1:61:f6:56:59:
                    fc:8e:55:cd:f7:4d:9b:25:b7:0b:d3:14:3d:af:a4:
                    ef:3a:4e:c3:83:2e:46:64:6c:c3:f7:c8:71:10:00:
                    cb:dd:22:3c:6e:32:8f:71:46:df:b6:69:79:9b:b3:
                    be:40:ae:58:2c:22:ac:1b:f9:e7:da:d6:7d:6e:ed:
                    78:be:a6:bb:33:60:ae:00:4a:32:39:0a:7e:18:02:
                    ca:0a:81:d5:97:c0:d8:33:f9:46:7b:0f:f0:e3:5a:
                    29:c4:53:d7:0a:0b:85:ca:1b:cb:ab:21:f1:c1:78:
                    27:d5:d1:88:f8:f0:b4:4e:8c:9b:ce:6a:35:e8:dd:
                    4c:2e:2e:53:d1:84:f0:2c:c1:21:38:24:00:f0:10:
                    12:f0:01:72:df:2c:49:2f:56:ba:5f:64:d5:e6:2d:
                    f1:69:b9:a9:c7:99:9a:22:42:5a:7c:91:97:54:4e:
                    3a:a9:14:25:a7:90:83:87:ed:24:9b:f3:3b:70:aa:
                    0e:69:85:8b:a5:1b:40:2b:0d:8f:12:5a:4c:81:90:
                    5d:b7:da:15:d2:ca:13:99:f3:a5:59:00:d8:21:6a:
                    c1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FF:15:96:1A:CF:DB:F1:59:26:1E:18:F4:C8:4D:56:29:50:92:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/76993081-d5f8-3f76-b351-b4ff18112be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b0:d1:92:07:ab:23:63:2f:85:49:cd:d0:36:ba:94:94:f2:
         bb:b3:42:1b:de:fd:d7:cf:79:5e:ce:d2:02:cb:9e:3a:ec:1e:
         b1:a3:1e:71:eb:f5:cc:c4:b9:39:a5:12:21:d4:e5:23:21:75:
         2e:67:48:a3:56:65:dd:6b:02:cd:b6:92:49:94:18:7f:03:fb:
         5f:d7:fa:8e:d0:5d:a2:61:0a:1b:78:d2:ba:bf:95:6f:d9:45:
         81:3c:07:f4:39:1c:df:87:72:44:50:1b:c9:36:ed:37:f1:0c:
         0b:b7:26:c8:c9:1f:ad:d5:97:b1:6f:33:af:6d:39:58:41:b7:
         bc:32:ab:a7:9a:c6:44:13:60:58:88:65:c7:86:a6:df:fa:80:
         d5:49:f9:fe:e8:f5:77:97:7b:ef:22:22:64:18:00:5b:c1:60:
         bd:26:e5:a6:28:c2:cb:a5:c5:f5:44:e3:35:41:0b:ad:6d:df:
         a0:0f:8f:2f:b3:39:81:6b:79:08:aa:47:da:47:4b:a6:91:ae:
         a3:9d:f6:bb:ba:6d:36:cb:a7:bb:c5:22:2f:97:46:1a:2c:8e:
         aa:84:47:e1:cc:6a:ce:47:98:0b:e8:7f:49:0b:65:dd:e6:a3:
         3b:c6:d3:1c:5c:72:a3:03:ef:02:3f:4b:d1:c6:23:47:bb:7b:
         9e:6a:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:21 2025 by rpki-client