Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa
File:                     74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa (raw, json)
Hash identifier:          To0YN/iSXFjIeSVJ5mrfJFCOntpXca/6g+sX4BnDy6g=
Subject key identifier:   FC:D9:92:FF:F7:C3:44:7C:4E:A4:32:8D:83:CA:A0:EF:68:CA:0F:B1
Certificate issuer:       /CN=0c82e125-4df5-4912-a714-101a1caa5b99
Certificate serial:       010D0C9F43285848D7A64E44A38AC5F809176F80
Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     396981
IP address blocks:        2620:8c:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:4e:44:a3:8a:c5:f8:09:17:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=bdb4bf6b-3c7a-416d-8821-4d223b95b588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3d:e4:99:73:13:93:4c:56:52:5d:e3:b4:d1:
                    cd:7f:93:13:b3:c0:c9:3b:31:24:e7:4f:1a:21:6c:
                    c1:83:d7:d7:fc:00:c2:f0:cf:cc:35:9a:0a:71:0c:
                    15:52:ab:14:e0:c6:d0:59:56:35:5d:cd:24:38:97:
                    59:b8:3f:bc:b6:7d:b7:a0:86:a2:a5:a6:e5:55:58:
                    da:bf:55:99:1f:a8:84:3f:3e:b3:b0:97:76:9f:92:
                    40:94:27:46:b0:78:98:9d:5a:66:8e:f9:b7:69:b7:
                    a1:38:84:89:48:54:d5:84:d6:0e:f4:07:1f:d0:e2:
                    87:f9:05:90:72:29:cc:7d:21:0a:00:0e:d9:d1:17:
                    b1:85:c1:d3:33:7e:d2:e4:23:60:36:15:47:43:52:
                    cf:1f:4a:f5:66:65:0c:8a:3a:92:80:7a:ba:b4:8c:
                    b3:6a:7c:10:22:21:19:af:f7:25:5a:b1:1b:cf:c4:
                    32:d8:51:49:0a:ad:8b:ed:f3:98:63:41:0b:8d:8e:
                    2c:4c:c2:42:e4:e9:51:83:63:77:14:28:71:1d:70:
                    6f:4a:cd:6c:e1:7f:fd:00:f4:8a:90:10:03:86:b0:
                    18:4f:af:fc:8c:33:b8:7e:a2:37:ca:f7:86:a2:c9:
                    98:c7:89:84:e2:b4:f8:bf:a2:07:4a:db:33:a2:0e:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D9:92:FF:F7:C3:44:7C:4E:A4:32:8D:83:CA:A0:EF:68:CA:0F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/74fdd2d4-0d8c-30a6-8cb7-ec025616e29e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8c:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:33:2a:34:77:ed:c4:16:7b:b3:00:4d:88:2a:bf:15:56:
         4e:9e:9f:5b:3a:40:41:6c:71:50:a0:52:68:b9:cf:a3:fc:74:
         5a:65:51:02:a8:87:f9:31:1d:40:9d:f5:53:16:26:8f:97:63:
         9b:94:e2:0f:eb:a4:3f:48:21:7c:78:d6:ba:44:d4:22:a6:ad:
         4a:42:68:56:af:0a:0a:c6:02:da:d3:fe:4f:d4:85:27:ed:05:
         8a:eb:44:af:8f:1d:83:1f:8b:fd:ca:08:c2:67:28:fb:a7:d9:
         d8:d7:36:3a:8c:9b:29:92:03:ce:18:16:9b:fd:81:86:cd:28:
         49:c5:ef:7c:bd:03:4a:3c:09:bd:c3:8f:88:39:0e:3e:59:11:
         f8:96:9a:cb:c8:35:3e:ff:57:6e:44:6d:7c:21:41:00:fa:51:
         b1:79:33:19:fd:4b:0a:9c:94:f1:e8:ae:15:e2:d0:63:dc:52:
         71:b4:fe:d1:cf:5a:3d:8f:ed:e0:09:ed:77:13:bd:5f:b5:00:
         ad:00:b0:cf:0d:ed:bc:80:73:83:a2:6a:9c:5d:f5:97:30:17:
         3c:38:e1:dd:e4:bb:fa:37:ac:bc:9a:a3:df:c6:57:d1:19:e1:
         89:be:0b:82:b9:f9:5f:8c:17:80:2a:0e:aa:36:af:8b:98:53:
         a6:88:e2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:55:46 2025 by rpki-client