Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa
File:                     d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa (raw, json)
Hash identifier:          cwX0cTuRmM9XG6WN+KqFSiM309xEyQ4eedJPBa4whes=
Subject key identifier:   F0:65:DD:9A:33:BA:E3:28:C2:A6:0C:A4:B0:9B:4E:52:A4:E1:82:99
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285848B6261AF0910A37E6185DCDE0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     30238
IP address blocks:        2620:101:200a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1a:f0:91:0a:37:e6:18:5d:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=5790d8d2-783d-499c-b58e-2b63ead90c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e3:60:3b:9f:c9:28:7f:e0:5d:60:5c:10:68:
                    bc:08:4b:76:66:1d:9b:81:cf:1b:a1:70:d0:8b:a3:
                    52:a9:a4:b9:32:4b:a0:f2:3f:4e:34:22:5b:1d:f0:
                    14:0e:47:76:c3:5e:11:52:81:c8:8f:bf:2e:d8:55:
                    bd:df:3c:b8:2d:f6:c8:fb:b4:f3:28:b6:7e:0e:12:
                    cc:91:58:ac:b2:5f:1c:67:03:84:71:be:36:8b:46:
                    67:f2:c5:4a:de:1d:9b:0b:64:b8:e8:f5:95:1b:b0:
                    37:13:a6:30:a1:c0:c4:be:62:73:60:07:e1:72:68:
                    c6:6d:6a:dd:95:ca:a4:7a:fc:e8:f7:9e:e0:eb:f9:
                    14:08:b1:0f:13:34:f0:f0:73:3d:16:e4:e7:34:ba:
                    d6:db:d0:93:76:45:92:22:f7:59:1b:8c:fa:9d:71:
                    c2:26:bf:a2:e4:da:f7:d1:73:51:7b:51:4a:7e:d8:
                    13:5e:4c:49:cd:ce:cc:df:45:93:45:e7:58:c1:ab:
                    1b:0e:de:f4:9f:13:51:e1:3c:fb:19:f6:15:16:0c:
                    da:79:32:57:03:75:4c:cb:63:36:72:e9:4d:dd:9d:
                    28:26:fa:d5:10:18:f6:9f:15:7c:0a:50:37:49:2d:
                    74:72:e7:3a:2a:ce:da:7f:fd:71:99:b3:03:65:9d:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:65:DD:9A:33:BA:E3:28:C2:A6:0C:A4:B0:9B:4E:52:A4:E1:82:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/d26b76e9-3bd2-3745-9bc4-68e57fbc22c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:101:200a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:44:42:43:d9:12:12:12:1f:79:c5:fb:86:c5:61:03:2f:c4:
         6a:2b:f6:ce:75:61:38:d0:a0:a3:51:7d:b2:ac:c7:4b:e3:11:
         6c:ed:29:0c:60:dc:09:e2:63:99:73:be:4e:15:f8:85:45:38:
         10:1c:66:db:05:2e:42:ea:8a:08:3e:9c:52:ac:5a:06:2f:a0:
         91:9e:59:35:92:f9:f1:25:8a:60:00:be:0c:1b:1c:33:a6:52:
         7a:b2:e1:18:82:2c:9c:99:bb:6f:6e:1c:cf:1f:09:e9:a7:8c:
         6e:82:c3:3a:17:58:de:50:43:9e:e7:4a:5b:68:7a:5c:7e:ec:
         e8:eb:ce:a6:80:b3:cb:67:29:ca:5e:16:a6:1d:22:b9:ec:ae:
         45:5b:96:4b:b1:9f:52:5e:36:f1:96:6b:a8:7f:e4:ea:b4:9a:
         43:27:64:5e:98:16:bf:42:01:82:7d:55:ea:36:7f:76:c9:92:
         0d:f9:64:74:78:a2:72:19:17:a2:90:b4:6d:d7:a7:3e:23:4c:
         b8:db:7e:43:29:48:be:0d:0a:10:94:44:7f:fb:69:47:2b:30:
         fd:24:7d:11:0a:46:87:cb:de:2c:3f:a9:96:8a:b9:fc:d7:70:
         3f:db:26:af:88:f9:a1:81:07:63:3d:ca:3c:aa:0f:c6:b2:8b:
         dd:98:df:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:52 2025 by rpki-client