Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/5e889615-28e6-3865-9da3-bc83f494f968.roa
File:                     5e889615-28e6-3865-9da3-bc83f494f968.roa (raw, json)
Hash identifier:          gMC+261IA0Ikyh/qyGhzb0o2iLyndTydwASMgSwJeLA=
Subject key identifier:   F2:36:ED:02:9F:01:79:50:1F:20:4D:93:31:DF:49:F0:D4:DE:40:05
Certificate issuer:       /CN=03cb17c9-7597-4c95-a127-009654391416
Certificate serial:       010D0C9F43285848D0ABB78F7D0D279048FE7840
Authority key identifier: 2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/5e889615-28e6-3865-9da3-bc83f494f968.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     40776
IP address blocks:        2602:f8ab::/48 maxlen: 48
                          2602:f8ab:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:b7:8f:7d:0d:27:90:48:fe:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cb17c9-7597-4c95-a127-009654391416
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=ea215b29-f225-459a-ba80-ef1b257ab84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:78:ed:94:7a:6a:19:9a:6f:06:14:42:7f:
                    47:48:42:ab:19:59:a7:1d:6b:30:49:51:62:0f:1a:
                    20:ce:61:1e:63:7f:c8:19:fa:68:ac:92:40:9b:80:
                    e9:3c:37:0d:b1:24:81:99:e7:18:18:fc:46:18:df:
                    1b:35:e4:b2:9b:8b:9c:a4:24:04:94:33:31:1b:82:
                    7e:0d:b4:f3:b0:43:03:e0:b7:09:b9:bd:b9:82:ad:
                    f2:83:b0:65:cb:db:71:b1:d6:e3:e3:0c:1d:45:fe:
                    c1:60:52:f3:2a:aa:32:77:01:1c:9b:ca:91:e6:32:
                    17:0b:e2:f0:b7:42:1d:07:2e:16:4a:b4:46:6a:50:
                    cf:be:6b:35:59:f1:7f:11:a6:d5:dc:9a:2f:16:ec:
                    ce:d1:34:91:8b:46:a6:8b:16:50:2e:a0:13:f9:66:
                    63:84:57:50:f4:49:77:df:27:20:66:af:d3:3e:97:
                    fa:57:0e:9d:8b:67:f2:ec:1a:98:0d:a6:0b:cb:7d:
                    b4:4b:7c:41:97:72:d3:d4:cc:3a:be:6c:61:c5:e9:
                    68:24:8d:2d:b1:e8:c0:c0:cc:7f:db:1e:da:fd:20:
                    44:81:0b:65:a8:44:02:89:3e:57:5a:d2:b9:ca:29:
                    98:f7:d4:67:74:37:e9:9b:b6:cf:06:b4:71:ae:0d:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:36:ED:02:9F:01:79:50:1F:20:4D:93:31:DF:49:F0:D4:DE:40:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/5e889615-28e6-3865-9da3-bc83f494f968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl

            X509v3 Authority Key Identifier:
                keyid:2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ab::/48
                  2602:f8ab:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:aa:5c:a6:e7:87:ac:aa:43:6c:69:e2:66:e3:4b:9b:14:e3:
         13:87:bd:9c:2b:fd:26:ed:c1:26:f3:44:1b:33:a7:07:90:2c:
         c2:42:b1:74:06:a3:42:32:cc:7d:52:cf:44:d3:de:f9:47:f3:
         64:7d:34:90:0e:2e:b6:66:3d:15:c1:67:08:17:ff:63:0c:b2:
         3b:3b:cd:1d:96:78:ed:13:d0:9c:2e:5d:c1:9c:12:50:6c:26:
         3b:15:6c:ff:f2:ee:78:d1:c4:14:ae:a3:ce:09:f0:47:3c:6b:
         30:d8:c6:51:42:9b:7d:a3:91:24:fb:02:34:a0:8f:81:6a:0e:
         13:5b:1b:e4:fa:80:72:f1:a7:b4:ab:97:63:5b:79:9a:84:9a:
         6f:1f:97:be:88:03:d0:10:32:fc:df:28:e7:aa:68:ef:5e:fa:
         c2:2e:9d:6d:ef:02:3d:59:fc:44:87:97:e9:8e:0a:35:68:c4:
         44:77:06:e8:e5:64:82:e2:2b:7f:94:23:d2:f0:bf:a9:86:d5:
         58:86:21:9c:09:29:d8:9b:ff:b2:5b:b5:1f:6f:3f:d8:e3:28:
         19:20:af:f9:44:8e:2f:ef:c6:de:4f:42:0a:23:4b:9d:63:5e:
         71:39:8e:52:0d:f4:ca:cd:16:19:6a:8c:57:d5:45:dc:86:ce:
         c3:b1:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:49 2025 by rpki-client