Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa
File:                     4e0ffa67-e7db-3331-95d2-44e9847c6668.roa (raw, json)
Hash identifier:          4VuU/j+fOiWTl9VsRXwbVtH51oD/Z1yIM4bAHLezvXg=
Subject key identifier:   CB:FC:B1:55:0D:D1:C2:B6:09:6F:2D:BB:22:DD:DD:A6:B0:74:6C:72
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F43285848BE862A742FB6D554A88F7C00
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     11721
IP address blocks:        2602:fa8a:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:2a:74:2f:b6:d5:54:a8:8f:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=7d715882-9d4e-4a1e-8a6c-7fc8c3c553bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:16:3d:c5:09:8a:90:61:22:e2:f5:6e:15:d3:
                    e1:a4:e7:05:43:fa:e9:7f:db:d7:b1:ad:36:c5:1c:
                    c8:f2:e4:35:d3:fa:57:e0:fd:28:a6:b4:42:f0:12:
                    2c:69:38:02:f5:47:5d:9f:51:4c:57:9b:d1:c5:1f:
                    78:62:97:07:98:61:8f:3d:c6:6e:2a:bc:7f:73:0d:
                    73:a6:65:c7:ae:20:22:74:b2:6e:63:a6:89:45:fb:
                    8f:a2:84:32:5c:ee:32:27:94:4b:2c:df:a6:a7:46:
                    6a:53:b2:90:fd:07:46:83:2b:fc:d6:8d:76:76:50:
                    0e:2e:3c:12:03:ed:56:92:c3:d6:6f:f9:56:b5:5e:
                    c5:ec:79:41:a2:c2:c1:48:3f:96:89:85:e9:30:25:
                    e9:13:f8:cd:eb:81:ee:3b:3c:e3:27:ee:a2:fd:5d:
                    cd:b5:e8:17:2d:45:1c:f8:a8:10:61:74:73:ea:a4:
                    b0:3e:ce:bf:86:cd:67:88:2a:27:0f:2c:d6:fb:ca:
                    96:d1:72:01:96:5b:35:8c:ac:d6:8f:ed:c4:94:77:
                    a4:8a:34:5b:c7:2f:78:5c:c6:c2:8d:3e:3f:a8:d2:
                    00:9d:2a:fb:9a:9a:14:79:a3:cc:87:ff:a8:dc:0c:
                    f2:3e:99:00:93:b6:14:50:37:c0:1a:41:0c:02:4e:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FC:B1:55:0D:D1:C2:B6:09:6F:2D:BB:22:DD:DD:A6:B0:74:6C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:67:e6:e9:ba:58:01:db:f4:87:ed:e4:3c:48:cb:43:f0:36:
         ee:8c:11:72:78:a4:51:2d:2b:d1:67:0f:c5:26:22:b4:c6:95:
         8b:a6:70:81:26:39:06:c1:1b:d1:b0:2c:6b:e9:d9:fa:54:7b:
         e5:cb:44:95:0a:a2:07:05:ad:8d:05:4c:0e:ad:e9:00:c9:cf:
         4b:51:c3:14:b4:56:96:e2:39:3f:0e:f7:21:9f:00:af:af:b5:
         87:4c:d9:1e:2d:e3:bb:26:9c:0d:bb:e0:97:5c:5a:ee:84:a0:
         1a:c8:1c:84:74:2b:69:26:04:54:e1:20:bb:df:76:a1:64:7e:
         0d:d4:c0:c2:a6:74:54:91:c2:15:09:f3:5a:55:5e:f7:f0:a5:
         b7:a2:ee:0a:79:b4:34:5e:b9:b4:9a:51:a3:f5:f4:38:2f:45:
         ca:dd:c5:19:0b:57:4e:c0:48:1d:5b:f0:d9:0a:66:1d:1d:63:
         92:bf:3e:82:2a:36:38:0c:5f:38:b4:4f:1b:75:08:96:ec:c0:
         9d:72:6f:f9:71:75:87:07:5b:3e:d0:35:75:48:06:2b:f8:ca:
         c3:fc:bb:1c:f3:ad:84:05:ef:38:25:9d:68:ac:ce:d8:05:b9:
         2f:ad:c3:6e:72:78:07:2a:05:fe:bd:5e:2f:0b:2e:d3:3e:7e:
         31:df:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:24:33 2025 by rpki-client