Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/587ceaf1-8081-35d2-aa6b-83fcb08fefac.roa
File:                     587ceaf1-8081-35d2-aa6b-83fcb08fefac.roa (raw, json)
Hash identifier:          umn3YFzyXKp9d727QF0GweEdwLLznBkPtQ36iv6hClQ=
Subject key identifier:   CA:D5:99:26:F5:84:08:F1:EF:20:E6:E4:EF:79:8E:6A:6B:0B:6A:91
Certificate issuer:       /CN=77447415-d9d5-4118-9a21-3e46593cee7d
Certificate serial:       010D0C9F432858493C092FCB570AA01BFE798D80
Authority key identifier: 86:F1:E1:77:EF:06:6C:60:6A:1B:7F:D2:38:1E:80:DC:8C:A3:3E:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/587ceaf1-8081-35d2-aa6b-83fcb08fefac.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     215971
IP address blocks:        2602:f9e3::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/77447415-d9d5-4118-9a21-3e46593cee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/77447415-d9d5-4118-9a21-3e46593cee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:2f:cb:57:0a:a0:1b:fe:79:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77447415-d9d5-4118-9a21-3e46593cee7d
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=ee29835f-6a81-4146-9f9d-852458272c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:d1:04:31:b8:fd:f3:aa:33:22:f3:e6:d2:
                    9a:69:02:e0:ef:d7:c1:30:57:04:27:d2:d8:a9:3b:
                    cd:6c:29:ab:a4:87:26:73:6e:cf:09:b5:89:b8:d4:
                    80:d4:d8:d2:ef:0c:f5:fe:0d:20:62:88:8a:9a:e0:
                    62:e0:06:75:d1:50:9a:ae:cd:24:f7:c7:ac:16:03:
                    ff:0a:99:72:67:5c:97:b2:ab:8e:a6:c6:7b:0c:9c:
                    b4:96:9c:00:ce:8c:16:14:94:9e:f0:26:51:b9:4f:
                    a8:d1:31:2b:b0:7c:eb:80:83:ce:05:67:11:82:52:
                    04:06:88:38:94:6b:34:0c:a7:e3:7b:27:4d:f7:2f:
                    df:31:d4:de:be:00:51:5b:16:38:ba:fc:1d:66:92:
                    50:23:56:10:f2:65:30:41:d2:0d:af:03:b0:6c:2b:
                    ed:9a:4e:33:84:18:2f:7a:de:40:56:59:60:6c:f8:
                    8e:16:ad:9a:8f:28:18:45:3c:87:14:1a:0d:6b:7a:
                    5f:0c:06:c9:c2:5b:1e:f5:20:b5:c1:5b:37:51:3d:
                    d6:39:06:2e:86:b8:78:46:e5:e6:bf:9b:0b:e8:3c:
                    19:0b:2a:d7:e9:61:ba:c3:f6:b9:db:39:57:26:ff:
                    72:84:d4:e8:17:43:87:b0:53:40:95:11:23:1c:71:
                    9a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D5:99:26:F5:84:08:F1:EF:20:E6:E4:EF:79:8E:6A:6B:0B:6A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/587ceaf1-8081-35d2-aa6b-83fcb08fefac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d/77447415-d9d5-4118-9a21-3e46593cee7d.crl

            X509v3 Authority Key Identifier:
                keyid:86:F1:E1:77:EF:06:6C:60:6A:1B:7F:D2:38:1E:80:DC:8C:A3:3E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77447415-d9d5-4118-9a21-3e46593cee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:2a:a8:8c:b0:bd:8d:6d:3d:30:48:44:63:12:3b:25:54:
         46:78:e3:81:6f:b2:e4:b5:7e:b5:ef:26:ea:2e:78:4b:24:58:
         f0:cc:72:af:1d:83:b2:ae:36:6e:45:e4:c7:12:10:a1:6c:10:
         fd:d1:1a:ee:68:47:81:17:b6:8b:33:a2:74:a5:86:0e:2b:c6:
         f1:32:77:fb:d4:ee:6d:31:5f:b6:7e:98:28:41:29:bb:45:c4:
         d9:83:0a:1b:c6:5d:0a:fa:ef:4e:5c:b0:a1:fb:4b:7b:75:43:
         1b:a5:ed:37:6e:96:20:d4:32:1c:47:d7:41:29:4d:90:48:e1:
         59:ae:4f:cb:04:d6:dc:4b:9b:5c:5e:e7:bc:f3:1b:36:17:e4:
         f7:af:af:e9:cb:dc:43:35:7d:4f:53:51:7c:a3:d3:a0:2a:93:
         72:40:95:7d:16:38:eb:31:d7:1f:5e:f1:91:fe:93:52:2b:9f:
         64:ed:93:6a:00:d3:89:a9:c5:93:c5:19:8f:45:9b:4c:98:85:
         b7:8c:5a:2c:e8:8d:91:80:19:da:e7:4b:a8:39:6e:b3:11:33:
         95:8a:e9:8e:22:ca:27:64:14:14:5a:26:b3:04:28:84:e6:dc:
         ce:b0:86:75:58:27:91:22:23:c2:41:6f:37:c0:0a:59:4c:ee:
         54:25:dd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:22 2025 by rpki-client