Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/4ab593c5-f646-305a-af56-97081a91bc7a.roa
File:                     4ab593c5-f646-305a-af56-97081a91bc7a.roa (raw, json)
Hash identifier:          6+RVY+rD72BUVIJ3jKeFGV4lbZsoVCTyKHTltI6CaLY=
Subject key identifier:   91:BD:FC:F0:F2:E8:BF:4B:61:5B:5E:10:8C:B5:B2:BC:18:24:A8:F8
Certificate issuer:       /CN=81b6f65d-ba30-4275-b918-46ded7381174
Certificate serial:       010D0C9F432858492CAE7A281D3F7912230D57D0
Authority key identifier: 08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/4ab593c5-f646-305a-af56-97081a91bc7a.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     399214
IP address blocks:        2602:803:7000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:7a:28:1d:3f:79:12:23:0d:57:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81b6f65d-ba30-4275-b918-46ded7381174
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a307d9df-223b-4916-b2da-dad3b94e1baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:77:d0:db:1c:e2:7f:d4:11:d9:ef:6b:6b:81:
                    99:af:6b:48:e4:af:b1:a7:d2:1a:63:bb:ad:0a:ed:
                    f2:34:8b:21:b0:d5:f9:ac:80:7e:b9:70:66:0b:c5:
                    ca:e2:40:1d:3d:00:b0:23:a8:16:af:e7:b5:df:a0:
                    33:09:92:3d:a0:97:34:23:2d:77:69:bf:53:09:d8:
                    2a:21:2d:f7:f6:0b:ee:56:c9:67:5e:68:59:85:94:
                    07:1c:d3:48:75:95:84:f6:44:9c:a6:b9:4b:98:cb:
                    48:90:fc:12:dd:86:2d:60:1c:a0:f0:6a:78:f5:10:
                    58:93:02:d2:24:67:b0:e5:e9:6b:ea:39:d8:bc:a8:
                    f0:c5:c7:8b:89:00:00:cb:f2:31:0f:de:d0:04:05:
                    34:7d:9a:98:bc:66:b6:06:49:4f:bc:0c:f6:97:5f:
                    a5:aa:2f:fd:f0:a8:fa:69:54:27:5c:b8:fd:88:63:
                    c8:a8:bc:24:88:fd:a6:76:01:29:8c:f0:90:44:b6:
                    6c:1b:e6:39:c2:ee:c9:e7:6f:eb:13:3c:85:d2:85:
                    d9:8f:b8:8f:de:3e:c2:4f:83:ad:52:0a:8c:d0:d9:
                    3d:af:fe:63:19:1e:62:55:19:33:7b:ae:ce:d6:3f:
                    af:61:e3:d4:9e:29:ca:a9:ec:ca:9c:83:ea:69:09:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BD:FC:F0:F2:E8:BF:4B:61:5B:5E:10:8C:B5:B2:BC:18:24:A8:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/4ab593c5-f646-305a-af56-97081a91bc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174/81b6f65d-ba30-4275-b918-46ded7381174.crl

            X509v3 Authority Key Identifier:
                keyid:08:25:94:36:E3:AD:01:5C:66:7F:0F:12:11:5A:17:49:47:B3:41:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/81b6f65d-ba30-4275-b918-46ded7381174.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:803:7000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:56:e5:0a:7e:f6:78:40:cb:43:32:1d:8d:c2:e4:c1:85:84:
         c4:c3:2b:f2:b1:a9:07:71:d3:92:70:de:5e:9d:d5:de:83:9e:
         85:1c:85:cf:37:5b:34:f6:2a:1e:bd:c0:99:3c:45:6f:60:73:
         6c:d5:a7:57:3b:f7:4a:85:f7:a7:21:f9:fb:82:78:10:57:bd:
         d8:fd:d3:62:e3:cd:43:cf:74:3b:2a:b1:6a:56:80:e1:1c:2d:
         27:af:9d:e8:12:07:a6:58:b9:6d:36:73:d8:b9:a0:02:34:97:
         ad:8c:b0:e4:c6:55:96:49:ac:53:9e:41:31:e0:48:0a:7d:ec:
         78:12:de:72:cf:96:4d:cc:51:f8:f6:90:76:ed:9c:cf:07:95:
         30:24:05:9a:4a:dc:55:a7:ea:4c:4a:04:99:00:b1:3a:0b:30:
         4f:b1:cb:17:dc:e8:f8:a1:55:c0:0e:4a:2e:17:45:ba:53:7b:
         86:ad:69:cf:97:0a:eb:c6:a6:6e:be:93:66:e8:14:79:9c:50:
         9b:09:1e:6c:75:43:43:98:4e:37:f1:20:bc:6f:ab:53:c2:7d:
         96:d3:ef:1b:a0:70:0b:80:d4:b3:7e:dc:63:73:f4:dc:d7:5e:
         1f:03:74:4c:17:ad:12:28:9a:64:d4:38:96:58:98:ec:05:fa:
         6a:ca:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:27:14 2025 by rpki-client