Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/03be087c-d4b4-3e90-8cec-53499faeb096.roa
File:                     03be087c-d4b4-3e90-8cec-53499faeb096.roa (raw, json)
Hash identifier:          MidOHiedSwCbk86zpyDC35OumMknNlaxcvM7gdPSoJQ=
Subject key identifier:   31:86:57:B1:2A:34:D5:74:E2:18:FA:87:D4:3E:7D:2D:B1:B8:95:D6
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F43285848F8A22A9FEB9BD384DCC8F380
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/03be087c-d4b4-3e90-8cec-53499faeb096.roa
Signing time:             Sat 22 Feb 2025 21:34:06 +0000
ROA not before:           Sat 22 Feb 2025 21:34:06 +0000
ROA not after:            Fri 23 May 2025 20:34:06 +0000
asID:                     46386
IP address blocks:        2602:f700:e0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f8:a2:2a:9f:eb:9b:d3:84:dc:c8:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: Feb 22 21:34:06 2025 GMT
            Not After : May 23 20:34:06 2025 GMT
        Subject: CN=a3f55b22-d104-4f7d-8b08-ada7a877e710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:50:fb:f5:e6:d0:53:18:ec:65:27:78:43:
                    ed:fa:f4:0d:db:46:8b:9f:d6:3a:3b:a8:9e:e2:df:
                    31:d7:aa:b1:02:e9:fb:88:9c:0c:94:50:c2:1b:2b:
                    15:78:92:df:41:ca:2d:a0:83:9b:c4:e9:bb:11:86:
                    2b:af:c9:65:75:1c:73:7d:80:37:2d:86:f7:03:d6:
                    9c:33:95:41:05:51:af:f3:64:ac:b4:8f:d7:ba:5f:
                    11:29:7a:b3:95:b3:b3:a3:7d:70:cf:c5:c4:7a:33:
                    94:09:30:b1:af:d1:a3:19:3d:9a:b5:80:a6:48:ff:
                    6c:6c:ab:d1:c7:7c:c5:d7:ab:3f:26:22:cf:66:cc:
                    c9:ab:b3:ef:f3:9e:da:aa:e5:5c:b4:1b:81:12:f4:
                    2e:da:86:a0:97:a5:4a:3c:4c:bf:97:08:3a:e5:94:
                    be:e5:e0:a9:fd:24:f2:c7:42:bf:7b:60:10:e6:df:
                    c7:d0:46:f3:54:6a:78:78:e5:22:ae:6f:c8:d6:12:
                    29:25:81:cb:cf:ff:68:0a:4c:4f:cf:5b:be:03:79:
                    85:38:78:1e:a7:1d:0b:75:34:a0:77:10:d4:c0:d6:
                    45:f3:dc:58:30:16:83:ea:7c:9e:8a:b7:21:98:a0:
                    07:16:e4:26:95:87:36:78:95:42:7f:f9:35:c7:09:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:57:B1:2A:34:D5:74:E2:18:FA:87:D4:3E:7D:2D:B1:B8:95:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/03be087c-d4b4-3e90-8cec-53499faeb096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f700:e0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:2b:94:67:e4:23:aa:f8:47:73:df:71:d7:e4:9e:db:b7:25:
         ad:bd:7e:cc:f3:78:f1:59:0a:59:4a:8b:60:04:fb:a5:4c:93:
         76:6b:5f:ed:21:cb:64:58:30:1c:83:86:6a:4f:01:ef:24:76:
         f2:56:0b:bc:9a:05:3e:ea:21:f1:1d:50:ea:00:83:9c:4a:fd:
         78:15:46:51:26:ed:d6:63:ed:af:79:25:07:7d:95:b8:8b:60:
         5b:0e:b2:7c:b3:b6:1b:59:97:6b:b4:3a:00:eb:4c:ff:5f:27:
         9c:b6:9d:2a:d0:44:a5:e4:be:23:7c:3f:b9:79:85:67:26:08:
         36:00:ca:1f:ba:92:cd:2d:36:b9:c1:65:ce:43:9c:61:b2:1d:
         be:4d:2f:47:7b:5f:03:04:fd:b4:c9:5a:3a:f7:bd:7d:92:1d:
         d9:8d:06:9b:2f:a6:00:d8:43:c8:52:b2:6c:9e:af:56:67:0f:
         9b:04:ed:9c:d3:6f:88:c5:66:d9:de:d0:0a:30:af:6d:c4:36:
         b1:08:6c:e3:a6:d7:86:9f:d5:9f:66:d2:57:43:3b:f3:1b:34:
         01:d4:52:f9:e6:04:95:2e:78:48:aa:b3:68:04:fa:cc:66:0a:
         57:dd:a5:70:67:d8:28:d0:79:d9:78:82:6d:83:54:af:4a:7e:
         ef:3f:4d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:21 2025 by rpki-client