Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa
File:                     cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa (raw, json)
Hash identifier:          N4y2+2o7p+ah4zXCr/okQQMUq6nhtupYaFcwn62LpTs=
Subject key identifier:   CD:68:48:DC:99:4D:66:A5:FD:11:BD:EC:7A:D4:C7:7C:16:42:75:F9
Certificate issuer:       /CN=8cce0cef-88a2-481a-91e3-c005827c7890
Certificate serial:       010D0C9F43285848A830AB929AF72CFE6E1A0580
Authority key identifier: 4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     18935
IP address blocks:        2602:fa96::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:ab:92:9a:f7:2c:fe:6e:1a:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cce0cef-88a2-481a-91e3-c005827c7890
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=5761713d-562f-46e1-ac0a-9c49dc4cb1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bc:19:5a:f5:54:01:d8:a0:25:fe:51:d2:27:
                    8e:78:36:86:68:dd:aa:7a:cd:c7:6c:ea:5f:22:d5:
                    bd:39:64:a0:ec:23:f9:7f:61:a4:f0:ce:af:98:b9:
                    5e:83:d6:2d:b2:2a:dc:7b:eb:cb:9b:45:eb:dc:0a:
                    68:41:e2:f5:9e:d0:f1:50:88:d6:6b:a3:a5:4b:41:
                    fa:77:55:a4:29:24:43:b6:47:96:3c:8b:34:1d:3c:
                    32:6e:f6:22:a1:31:96:ac:34:51:74:ad:21:91:4c:
                    e1:d8:40:2b:b1:bb:3f:a4:47:13:b8:6e:56:fe:51:
                    5b:e4:61:e0:c9:8d:ca:c4:8e:05:59:cb:c8:97:13:
                    00:28:f6:28:8c:45:bd:33:55:d9:bf:8c:99:7b:60:
                    41:fc:9d:83:62:f6:6b:92:9c:a7:7e:d0:f6:46:ce:
                    32:1d:35:3e:d5:fe:15:99:78:25:1a:67:2e:67:2c:
                    75:ea:f8:d2:09:cd:0e:6f:e1:33:ee:22:79:73:84:
                    91:23:9c:43:64:a2:2a:2e:88:cd:93:cd:8e:ff:52:
                    92:04:d2:60:9b:bb:a4:e6:25:d0:54:b3:3b:4f:29:
                    99:e3:14:64:6a:cd:bf:d3:65:f4:f3:61:ec:a3:6a:
                    8f:98:69:67:75:fc:55:d8:23:6a:04:d3:55:1f:2f:
                    6a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:68:48:DC:99:4D:66:A5:FD:11:BD:EC:7A:D4:C7:7C:16:42:75:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/cd88ad8b-44b2-34bf-bffb-0cce1030e755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.crl

            X509v3 Authority Key Identifier:
                keyid:4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa96::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e7:73:96:fd:92:8d:db:33:ac:40:c8:5b:ee:95:7f:0e:d8:
         94:78:cc:5e:a2:b5:a0:b8:7c:e2:cc:cc:fe:2b:94:68:55:ec:
         6b:c6:af:ee:be:4e:83:ce:09:a3:58:ee:8c:3b:dc:68:ce:23:
         41:7a:30:53:28:52:2f:60:70:c0:e0:51:9b:70:44:40:f7:9d:
         46:d2:7c:60:fb:4f:a2:9b:6b:72:d0:ba:a6:2e:03:22:f1:9a:
         b9:f1:1b:11:fb:20:31:79:89:26:ac:db:a6:ec:10:b7:c7:b8:
         86:89:46:8a:70:d8:d9:7f:f7:ef:ae:46:80:3f:85:ca:70:c7:
         01:90:44:92:66:0b:e1:3a:6e:8f:0c:79:61:4a:9b:dd:fb:71:
         b1:f0:ac:ab:cd:3b:3f:44:4c:86:2f:0a:a2:58:80:19:b8:61:
         08:14:5e:08:4f:f7:37:78:4c:9b:49:44:4b:16:7d:58:fb:8e:
         74:73:5c:8b:35:30:62:fd:cb:e0:01:41:29:be:fc:81:ae:ff:
         55:48:67:b1:f7:16:77:86:65:55:c7:51:a6:c2:4e:8d:7a:53:
         15:3e:a0:19:57:12:32:5e:c3:bb:38:98:72:b9:7c:b3:27:c5:
         04:9d:4c:0b:55:22:be:bf:1b:bd:7d:6a:a6:30:9d:6e:be:28:
         6e:3f:97:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:40:22 2025 by rpki-client