Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/d055bb6d-fe1f-349d-8627-c81fcd36a25e.roa
File:                     d055bb6d-fe1f-349d-8627-c81fcd36a25e.roa (raw, json)
Hash identifier:          +2xyAMkKLmq2XGBQHqgPsy365drEocjsrAEP/3VtMrY=
Subject key identifier:   2D:05:A2:B4:23:B4:98:D2:59:4B:3A:20:DB:2E:35:2B:F0:D7:8C:75
Certificate issuer:       /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Certificate serial:       010D0C9F43285849071BF47EE38E1D883C358000
Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/d055bb6d-fe1f-349d-8627-c81fcd36a25e.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        2602:f805::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:f4:7e:e3:8e:1d:88:3c:35:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=b5099968-659a-4394-b9da-d4cd9db494d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:33:26:a5:85:3d:13:18:0f:5d:7f:ab:f3:
                    1a:ed:a8:8a:dd:79:b7:56:97:e5:d6:e8:3a:48:f2:
                    65:28:10:89:c7:b9:32:d2:fc:d8:ce:2d:91:74:2d:
                    cd:7a:5a:f8:a3:14:38:72:0a:ee:03:47:89:e7:1e:
                    69:69:e4:03:30:c0:67:b5:15:65:60:0c:62:8e:a7:
                    80:17:7f:5c:47:63:7d:e8:ab:8b:3f:f6:0a:2d:60:
                    24:e5:98:9b:09:81:91:ae:8b:80:3e:42:d1:a7:84:
                    f2:d8:af:6a:be:38:e3:7b:fb:4c:bc:60:2b:3f:95:
                    19:48:78:d0:fc:d5:8e:90:0b:1f:83:4b:4a:ae:b6:
                    11:50:43:20:ad:b8:9c:23:42:4d:b3:0e:ad:3c:0d:
                    ad:42:75:42:29:6e:9c:dd:d2:e8:1a:9d:91:37:ca:
                    8e:7e:2b:dd:ab:8d:e7:26:ff:e0:0c:20:b4:a2:c2:
                    72:b1:a9:d1:f2:c0:84:b1:fa:cf:dd:6c:02:91:81:
                    7f:5f:3a:c3:42:b3:1c:48:48:2d:72:10:d8:e9:94:
                    4b:fd:cb:8a:2f:3f:34:40:0d:62:fe:c0:ce:80:b2:
                    c0:57:a7:18:81:5d:f2:97:ad:40:47:89:37:b1:90:
                    e5:87:3f:b0:ff:b2:30:d3:f3:20:0d:f1:f9:ee:1c:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:05:A2:B4:23:B4:98:D2:59:4B:3A:20:DB:2E:35:2B:F0:D7:8C:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/d055bb6d-fe1f-349d-8627-c81fcd36a25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl

            X509v3 Authority Key Identifier:
                keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f805::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a8:35:80:8a:87:75:6f:76:f3:b5:22:82:4b:02:14:63:04:
         37:87:c1:e2:5e:6e:99:63:92:42:39:36:c9:f7:6b:26:42:63:
         47:38:28:ab:19:63:35:37:f2:ea:11:18:ac:de:cc:90:0c:1c:
         6e:1a:31:85:fc:1b:3d:44:20:4f:3d:0e:51:1c:96:af:65:bf:
         6d:ca:26:7f:ba:72:25:86:c1:06:c7:93:51:b9:ea:a7:f1:96:
         a4:2a:4b:46:7b:03:f5:f5:8a:df:e4:29:fd:74:80:5f:d9:96:
         82:0a:ea:b5:70:dd:19:6a:d0:61:63:af:ae:b3:b1:75:8f:e6:
         c8:dd:3f:97:86:43:c9:15:b8:7f:fa:60:46:f8:de:3b:0d:39:
         35:08:bf:1a:31:30:a2:e8:f5:08:04:6a:2a:9e:43:dd:dc:05:
         db:ce:f8:89:64:ba:b6:8c:36:f1:f6:d2:39:ff:3e:02:8f:5a:
         36:d6:2e:84:e3:92:d3:e2:a0:fa:a0:fe:b1:bf:f6:c6:46:b2:
         4c:c2:de:a8:b7:72:8d:df:9b:af:d3:c0:83:8b:c1:6c:18:8b:
         22:4f:50:3b:5d:20:24:08:78:12:4a:c8:b3:36:4a:30:e8:02:
         ad:82:11:1d:4a:4b:ef:6a:73:16:83:44:20:66:1d:b0:ac:19:
         70:1d:c6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:19 2025 by rpki-client