Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/44c35f76-193b-34b1-84b0-2c9c461e9abe.roa
File:                     44c35f76-193b-34b1-84b0-2c9c461e9abe.roa (raw, json)
Hash identifier:          /hnAReFLoDcuIjJfS6QbqxH0crp4k9F9l5irKplKZvk=
Subject key identifier:   F3:AE:86:2C:57:6C:EF:5C:DC:75:3F:08:CC:F7:56:71:EC:56:C7:52
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F432858491941861ABA397B212EA40C00
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/44c35f76-193b-34b1-84b0-2c9c461e9abe.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     211380
IP address blocks:        2602:2b7:69::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:86:1a:ba:39:7b:21:2e:a4:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=b6eae8b0-4147-427b-a545-b00b4db56356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:68:89:4a:a6:d4:38:da:62:80:90:ff:e4:
                    58:c4:e5:7c:08:6a:d8:eb:99:d5:f3:e4:49:2f:d7:
                    e1:b6:97:5f:6f:36:f0:d4:70:c8:5c:01:09:af:91:
                    3d:7b:ca:5b:26:7b:6e:81:12:e3:68:b9:8a:29:1f:
                    43:45:61:9e:18:cb:af:b3:2d:57:53:7f:e1:ad:ce:
                    cc:d9:b6:33:d9:8e:10:a2:b0:29:4a:c3:ca:60:31:
                    e5:8c:2d:a5:ea:78:2a:2b:ab:d5:3d:f3:a4:15:c6:
                    f4:13:c8:9d:bb:f4:6c:62:5e:05:2e:98:86:30:42:
                    a1:86:f2:4b:42:dc:60:26:5e:b8:dd:b2:32:66:1c:
                    c6:33:97:94:ed:59:d1:84:f7:d7:56:56:13:6e:f1:
                    66:c8:d2:c8:3f:28:8a:ff:0e:cb:97:54:5f:98:ff:
                    ed:b8:8b:c9:b8:66:74:79:6f:f0:a4:bb:98:80:73:
                    ca:e1:2a:83:69:43:77:74:e4:e6:9e:19:41:50:0c:
                    2e:9a:d0:f9:2e:f3:d7:dd:75:04:c6:c0:9f:c9:0a:
                    45:43:51:b5:e2:14:3a:6a:42:da:65:28:c4:42:78:
                    a4:de:c1:7f:00:e7:ea:f7:16:5a:d3:c3:57:f6:c8:
                    50:9d:bf:fb:77:72:5c:44:6f:27:eb:83:a7:d6:e6:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AE:86:2C:57:6C:EF:5C:DC:75:3F:08:CC:F7:56:71:EC:56:C7:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/44c35f76-193b-34b1-84b0-2c9c461e9abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:df:54:a8:3b:27:0d:cd:57:57:c7:3f:6b:30:18:28:57:60:
         b5:80:d6:17:7e:29:b1:eb:ec:72:d1:57:c3:ba:52:c4:f9:a8:
         bd:7e:50:a1:b0:bc:b3:b2:a8:af:fb:fa:74:17:14:ff:4a:1f:
         c4:d7:6a:7a:3f:fb:4e:35:e5:9c:4a:d7:fd:88:3e:40:ca:e5:
         9a:0c:10:28:4f:36:dd:39:a2:2b:59:c4:84:6f:1d:cd:71:cb:
         b9:38:f0:64:db:ee:87:6c:a5:44:b2:c9:5c:36:95:e4:7b:15:
         e1:dc:17:14:6d:ab:7a:ee:f0:3f:17:d9:5d:b0:9c:eb:7f:88:
         12:89:7b:9c:4e:f7:44:41:11:ad:4d:ad:5d:bc:de:f7:0f:3b:
         b9:33:9f:8f:9a:9c:67:a4:77:fe:b0:13:de:40:97:86:a7:0b:
         fd:ea:d6:a9:0a:c9:1b:69:e7:aa:9e:d6:9f:e8:fd:49:80:73:
         50:1e:a4:8f:6f:7b:43:17:e5:8f:9a:d7:94:2c:5d:8c:32:04:
         1c:dd:2f:ac:c5:b7:9f:80:2d:18:9d:5e:4f:f2:8f:71:eb:ce:
         95:7b:ac:12:ec:70:cb:4b:77:f9:cb:d6:c1:58:40:bd:d8:e8:
         25:98:19:bb:86:7e:0c:8d:21:a7:0f:8e:28:6d:a1:7e:42:c1:
         60:d6:ed:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:55:19 2025 by rpki-client