Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/485ac09c-c7dd-3ef4-ab6d-7d9ebf45c8f9.roa
File:                     485ac09c-c7dd-3ef4-ab6d-7d9ebf45c8f9.roa (raw, json)
Hash identifier:          jA/M0wo3h5IrdIK4zwSWcYcnR5Vc2kFGxa7L8i10klo=
Subject key identifier:   EF:71:0F:2F:03:C7:6D:AA:25:68:93:01:C3:33:62:F5:4B:1D:2D:50
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F432858496E0A71DFC5E90250F2BE8740
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/485ac09c-c7dd-3ef4-ab6d-7d9ebf45c8f9.roa
Signing time:             Sat 05 Apr 2025 22:53:47 +0000
ROA not before:           Sat 05 Apr 2025 22:53:47 +0000
ROA not after:            Fri 04 Jul 2025 22:53:47 +0000
asID:                     399275
IP address blocks:        2602:fcc0:1112::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:0a:71:df:c5:e9:02:50:f2:be:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Apr  5 22:53:47 2025 GMT
            Not After : Jul  4 22:53:47 2025 GMT
        Subject: CN=194875e4-a0a8-4205-a53c-0d94c6c08c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0c:96:97:e1:a0:68:87:81:e1:4b:7e:da:a9:
                    96:9b:5d:1f:61:4b:0e:2d:21:99:f3:b2:14:77:f6:
                    2b:9c:2b:1e:4b:01:e9:61:d8:51:c8:2f:90:52:51:
                    ea:a2:82:2a:cc:06:ed:38:99:24:20:ce:5b:f4:20:
                    9f:f5:6a:54:5d:80:c9:70:2e:68:17:23:00:16:c4:
                    90:9f:f5:0b:3e:89:6b:4d:2e:a6:8f:92:9c:9e:da:
                    9b:9e:3c:03:ca:b2:e8:90:0d:5d:a6:96:2d:b7:f2:
                    3c:0e:2b:c7:34:b9:86:ef:0b:1e:ad:42:fe:8c:1d:
                    c2:0b:24:14:c9:37:75:65:0f:b3:71:eb:24:40:ee:
                    78:7a:94:11:b8:ac:5e:36:e0:e3:11:15:95:79:40:
                    c3:eb:ec:b9:65:e0:1c:6e:99:f2:f3:a1:f4:f6:8e:
                    63:d5:f3:95:ac:0e:00:76:23:8d:83:5e:a1:1f:d5:
                    84:01:d6:84:22:4e:5c:de:71:ec:1a:0f:2d:79:09:
                    cb:ac:a4:06:33:15:ef:8a:6e:89:8f:cd:88:f8:2b:
                    d9:58:f6:a2:35:e3:f0:c8:ef:88:95:22:18:c8:ec:
                    eb:10:03:e5:8e:6d:19:f8:cb:2e:8a:57:fe:67:0f:
                    1b:e4:9b:01:0b:ce:67:7f:3d:c7:d1:0c:cd:10:90:
                    4a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:71:0F:2F:03:C7:6D:AA:25:68:93:01:C3:33:62:F5:4B:1D:2D:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/485ac09c-c7dd-3ef4-ab6d-7d9ebf45c8f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:1112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c0:7f:34:b1:54:8e:a4:89:4c:2e:34:35:61:78:fb:5d:e9:
         5e:d3:0d:86:d6:c8:71:db:80:19:6b:eb:97:d1:e2:29:e4:89:
         13:ce:26:82:2e:ab:4b:3e:6a:32:24:a9:ef:3f:25:0c:8e:21:
         37:ae:4d:12:7d:e9:d0:57:e9:76:90:54:e7:9c:06:00:fa:f0:
         86:35:11:af:2c:d5:be:01:99:94:f5:ad:3b:b8:80:ae:8e:fb:
         99:7e:41:2c:b9:c3:2c:1e:a6:1b:f8:fe:5d:83:17:78:a1:e8:
         63:69:9e:c5:b9:3a:44:0d:45:64:ca:35:f2:f2:9d:72:e8:d2:
         40:a3:df:10:33:40:86:54:d5:f0:99:4d:6b:ec:1f:a9:bc:bd:
         1c:78:3c:d0:84:13:63:bc:3f:04:d2:02:bf:3f:1f:3e:11:4c:
         7f:cd:86:f8:49:70:09:7b:df:33:29:f1:b4:d4:41:64:b2:1e:
         8e:41:9a:b1:b5:ea:97:96:8d:6c:6b:d6:1a:58:54:42:55:29:
         e1:11:df:74:1a:98:d4:64:82:90:db:23:82:56:5b:0c:12:48:
         0b:d1:a3:79:48:58:39:7f:9d:8e:ed:a3:a6:e0:68:e9:91:09:
         fb:55:b0:78:a5:1b:b8:97:30:7e:e3:0a:02:f8:98:00:50:e4:
         f8:52:47:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:14:48 2025 by rpki-client