Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa
File:                     8e995a78-3dbd-35dc-834f-2588245e7f22.roa (raw, json)
Hash identifier:          M8DONldFN2LjFm29t9r1dyX7VPfkINlOGPDuRPmQDGs=
Subject key identifier:   64:C9:AD:79:06:1E:82:3F:DC:8F:13:23:2E:0C:2A:60:B5:C6:F9:63
Certificate issuer:       /CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
Certificate serial:       010D0C9F43285848EF61401FB7FF16EE11B04800
Authority key identifier: 42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     399976
IP address blocks:        2602:814:1000::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:40:1f:b7:ff:16:ee:11:b0:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=de7f5add-31ce-4180-9f66-b856167202f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:51:c8:d8:f9:b7:8b:d9:2d:52:b2:ca:4b:
                    90:72:fd:84:82:3a:cd:7d:7b:80:89:13:09:af:c0:
                    7b:92:e0:dd:1b:61:1c:16:a8:0c:8e:b6:bf:de:5d:
                    e5:7d:df:ad:cb:02:2a:bc:aa:2d:5f:f2:43:30:eb:
                    ca:35:7f:62:42:c8:6c:b1:1c:7d:0c:76:cd:5a:4b:
                    01:4c:34:0d:71:a9:8f:b8:b3:99:1a:13:16:90:79:
                    bb:77:0b:2a:8e:06:03:d9:42:59:3f:25:a1:81:03:
                    ec:09:30:99:d2:70:cd:45:5c:2b:ba:35:4c:5a:b1:
                    f3:a4:c3:27:8f:66:44:93:1d:b5:6a:88:d5:1a:a8:
                    9c:36:76:00:2b:ba:db:4d:e1:19:96:b2:78:d7:86:
                    ef:d6:ff:00:db:65:a4:f6:83:81:48:16:b6:3d:18:
                    da:54:c0:ab:07:4e:09:ee:33:5c:f7:68:6a:2f:f5:
                    cf:83:bf:83:78:f8:97:81:bd:91:d8:28:e8:3e:00:
                    6c:e9:cd:1a:bc:27:30:6b:b6:22:a4:7f:78:24:28:
                    27:69:64:4a:e5:c7:2e:df:d1:4b:cd:d9:e7:79:e5:
                    f9:dd:ed:fc:ad:00:b4:bc:8f:d1:4c:b9:15:e6:d9:
                    cd:f1:02:be:67:ac:63:c0:a4:58:f3:f2:8c:97:95:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C9:AD:79:06:1E:82:3F:DC:8F:13:23:2E:0C:2A:60:B5:C6:F9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8e995a78-3dbd-35dc-834f-2588245e7f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl

            X509v3 Authority Key Identifier:
                keyid:42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:62:37:a6:76:eb:a6:53:00:bd:49:f1:42:a6:3a:b5:15:1a:
         04:90:e5:0c:c0:66:f3:03:87:df:aa:01:54:59:c9:fc:5e:87:
         5e:09:37:b9:ca:32:a8:49:43:cc:be:cd:81:96:86:94:08:9d:
         bb:97:27:69:ff:aa:64:03:8a:2a:aa:3e:f9:08:ea:4b:43:d6:
         49:3d:89:1c:7c:7b:13:f5:55:12:e2:76:a8:3f:79:59:1b:57:
         52:06:e7:0f:85:28:98:ad:27:7b:8c:61:19:7a:cc:8f:3d:ab:
         cd:9f:51:aa:48:ed:91:f3:6d:df:7d:50:55:86:13:d9:68:0c:
         ff:7c:5a:b7:cc:23:c8:ea:68:da:4f:dc:96:f1:85:0f:2c:68:
         ac:4b:d9:07:d4:90:f4:ba:3c:c2:db:5b:d4:05:aa:fd:b9:20:
         1d:44:68:37:c4:9f:83:65:00:ac:3a:cf:bd:62:34:09:34:76:
         5a:8d:2a:c2:eb:92:a9:2b:97:9b:eb:dc:59:b7:ef:d8:22:08:
         8f:b6:b8:fe:45:7a:ef:4a:60:b2:78:30:5e:e1:fd:5c:89:c0:
         e2:bc:c8:bc:9b:97:ab:b8:e1:6b:10:ba:76:7f:ad:f3:d4:63:
         41:9e:16:30:64:58:45:e4:75:7a:17:63:18:9e:4d:08:cb:96:
         c9:b2:e1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:06 2025 by rpki-client