Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/8f3fcfac-6ac4-3058-91ff-2b963f3233dc.roa
File:                     8f3fcfac-6ac4-3058-91ff-2b963f3233dc.roa (raw, json)
Hash identifier:          OPiV5bFDYQeolI4tNmT95BSJ9d8AktOdqfUYblgM5o0=
Subject key identifier:   30:46:16:8D:9B:53:C2:EB:50:7D:A9:D5:4B:69:CC:3B:D7:E7:6F:CF
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F432858494B64072A357EB681D7765840
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/8f3fcfac-6ac4-3058-91ff-2b963f3233dc.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     26341
IP address blocks:        2602:f9e7:10::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:07:2a:35:7e:b6:81:d7:76:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=53e92afc-89fe-4a95-93c9-3b984d4aeef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:06:57:8f:31:93:f0:9f:bc:a1:e4:1f:69:
                    24:58:ca:56:11:33:c0:10:ca:56:70:26:76:39:7d:
                    21:ed:c1:13:2f:39:dd:08:d2:23:93:99:f2:f5:21:
                    a3:6e:52:c4:31:9b:3f:31:4a:d6:bc:b2:cf:20:9a:
                    21:1c:bc:ff:0c:37:20:6b:c2:77:ce:5b:f5:c6:a8:
                    01:dc:cc:1d:93:be:ef:a5:75:20:57:96:e4:7a:d2:
                    4f:ad:7a:98:9d:3d:81:66:72:6e:86:13:7a:ec:e0:
                    62:b0:42:0a:a8:b8:d5:b0:d0:47:c1:bb:62:e6:8f:
                    d7:3c:fe:33:45:92:be:ed:0a:8e:80:53:bf:cf:f4:
                    00:0f:80:55:3f:32:4d:07:6b:0f:0d:b5:d5:13:3e:
                    af:51:5c:1b:5d:6c:f3:17:8b:7c:e5:b9:53:26:a1:
                    5e:88:db:c6:ca:e6:1e:c8:d3:7f:2c:ea:dc:c3:4a:
                    09:7c:bd:15:ad:1f:0e:53:66:79:7b:58:fc:df:ee:
                    02:66:b4:ce:77:4e:88:f9:15:e0:c0:a0:b9:29:94:
                    88:58:00:bb:0b:4b:06:18:62:67:ad:0e:05:69:c9:
                    be:e9:8e:dc:f2:1d:45:86:65:c0:f6:f9:fd:bb:a5:
                    22:6b:e3:5f:42:02:9c:a0:eb:65:b6:c9:a8:77:4e:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:46:16:8D:9B:53:C2:EB:50:7D:A9:D5:4B:69:CC:3B:D7:E7:6F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/8f3fcfac-6ac4-3058-91ff-2b963f3233dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e7:10::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f6:ce:a9:dd:27:db:25:c2:13:f0:21:7b:3c:86:12:f1:9d:
         f4:28:4f:45:e6:8f:0b:c3:65:86:49:09:71:ef:d6:d2:b4:62:
         aa:7c:73:09:31:a5:e7:9b:a1:a5:cd:17:7f:b2:08:a4:e4:1f:
         c4:3b:25:21:7c:12:54:98:47:51:54:76:8b:75:7c:b1:47:12:
         31:7b:ac:e3:18:a0:f5:57:60:04:97:b8:a3:78:ad:a8:86:2d:
         ad:ff:d0:a4:03:fa:20:0f:46:39:f8:09:76:fd:00:d7:a6:b4:
         6f:26:b4:32:4c:8c:aa:04:d6:26:ba:86:6b:91:b2:ab:f3:6b:
         e0:74:2c:79:1e:fc:9b:42:c8:42:0b:be:d5:14:78:93:04:be:
         d9:25:f3:e7:fb:fe:5c:c5:15:44:65:bd:94:cb:7e:7f:ec:5b:
         a3:b0:de:11:1a:80:f7:2c:9c:c8:8a:af:d8:0d:93:7c:d3:b7:
         d0:5b:aa:ce:a0:ae:ab:2e:ca:f3:64:12:68:c4:fd:71:dc:29:
         1f:34:b9:8c:cd:b6:2c:1e:0b:11:08:46:f9:f1:2b:2d:85:d3:
         1f:20:ac:67:8e:55:7d:81:18:2d:cd:d2:9e:51:2d:6e:0b:59:
         57:f1:b6:cd:26:ff:c9:b8:ce:64:e4:d6:37:4f:eb:7b:63:7a:
         11:a0:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:44 2025 by rpki-client