Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/527011e7-d9bd-3c19-bae5-7c9594021a4e.roa
File:                     527011e7-d9bd-3c19-bae5-7c9594021a4e.roa (raw, json)
Hash identifier:          0vzPnwNR4dkvh9IRFU4itwAz6FBghQl0o0jsegNm9jI=
Subject key identifier:   B9:16:C7:96:AC:12:E6:09:EA:6D:44:96:B9:B6:4D:9A:26:27:AD:35
Certificate issuer:       /CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088
Certificate serial:       010D0C9F432858495D8967BD2F503ECF272D4B80
Authority key identifier: 7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/527011e7-d9bd-3c19-bae5-7c9594021a4e.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     401562
IP address blocks:        2602:f747::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:67:bd:2f:50:3e:cf:27:2d:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=c3c2f170-d2f1-4e8e-bdb0-2b64c46c6dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:f1:c3:10:49:a4:32:8b:8c:0b:e1:3f:45:
                    82:e9:0d:52:3b:86:2d:be:02:91:8b:05:cf:1d:9a:
                    4d:79:43:5a:5b:b5:b2:ac:73:05:fa:c0:54:21:55:
                    43:8f:d4:05:18:bd:bd:3e:1a:81:5e:de:95:f0:97:
                    af:f4:fd:fa:83:86:4f:64:5d:25:85:21:e9:5c:84:
                    78:9e:ac:2c:e3:8f:1b:32:b8:83:62:52:a1:25:3d:
                    a2:6f:de:43:36:14:8c:80:20:cd:63:04:f5:0a:34:
                    15:36:3c:13:f2:31:00:a2:27:ad:e7:d7:80:f3:85:
                    d5:12:30:76:3a:c8:8b:d6:03:69:8e:b3:14:10:e2:
                    77:58:66:81:29:a9:b3:97:45:03:0e:3f:11:8d:61:
                    1b:c3:e3:51:3f:fc:4e:4b:e7:11:dc:34:15:23:2a:
                    0c:db:46:a0:09:7a:e1:94:0d:05:9f:f4:c8:5f:33:
                    37:12:c4:00:8b:e7:c6:7d:35:a1:aa:d9:e0:9b:a3:
                    a1:4d:ab:10:92:68:5f:e5:bc:6a:8b:fd:f4:fa:9a:
                    92:8a:f8:ba:53:86:2b:ff:d3:8d:dc:0d:2b:b0:8e:
                    72:dc:62:45:46:3e:26:d4:5f:ca:46:43:4c:8e:0d:
                    e0:d8:ca:53:38:0c:08:2d:f4:42:6e:ec:f9:09:48:
                    8e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:16:C7:96:AC:12:E6:09:EA:6D:44:96:B9:B6:4D:9A:26:27:AD:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/527011e7-d9bd-3c19-bae5-7c9594021a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl

            X509v3 Authority Key Identifier:
                keyid:7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f747::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:f7:35:62:4b:ea:e3:ac:58:fe:7b:24:f0:bf:f3:63:a5:0d:
         5b:c1:8f:63:68:0d:ac:0a:f1:53:6e:03:10:69:5b:4c:a5:4a:
         c4:26:30:51:20:da:ec:b3:8d:73:22:91:9b:5d:28:2d:cc:1e:
         9c:f5:86:22:ba:ba:49:53:c9:0a:d8:1f:9a:cc:ff:27:90:c6:
         26:d5:41:e0:6a:9e:e4:c4:dd:f5:05:2f:66:97:4d:0d:09:25:
         21:bf:4a:28:ca:3a:dc:d8:f3:16:c2:5c:b6:f4:14:25:03:8d:
         67:00:27:3c:dc:9e:6c:4a:54:ef:ce:60:64:9c:05:d5:cb:97:
         2c:5f:db:0f:e3:cf:06:bd:ee:74:bf:27:a0:e0:92:82:b5:ae:
         8c:a9:a1:07:c9:df:67:26:6c:d3:80:10:6a:53:04:cf:73:73:
         0d:f0:1c:91:bd:1d:dc:8c:fc:13:82:ac:e1:d1:a6:fc:55:24:
         46:e1:c6:35:d6:ee:85:f6:60:c6:4c:96:ca:50:17:59:0d:dd:
         8a:e1:bd:04:cb:a2:46:6c:6d:9a:e1:9c:18:d4:31:8e:de:38:
         4e:95:96:48:d9:e0:ca:4a:60:f5:ab:ee:23:5a:e6:94:4b:a0:
         1e:82:6c:fb:7d:e0:4f:e4:be:69:d7:b2:dc:a0:31:f5:8e:27:
         0c:6f:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:07:05 2025 by rpki-client