Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa
File:                     7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa (raw, json)
Hash identifier:          5nMLN4pqalYn4dE4eEy7hbKs+Z5240frJZxpUjybaCc=
Subject key identifier:   9D:A3:87:41:06:42:17:83:AB:72:87:8B:C3:65:26:C6:AB:B1:97:47
Certificate issuer:       /CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
Certificate serial:       010D0C9F432858494303EB0B7D415E7E1DDACA60
Authority key identifier: 75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa
Signing time:             Fri 21 Mar 2025 13:00:50 +0000
ROA not before:           Fri 21 Mar 2025 13:00:50 +0000
ROA not after:            Thu 19 Jun 2025 13:00:50 +0000
asID:                     40701
IP address blocks:        2602:f965:10::/48 maxlen: 48
                          2602:f965:20::/48 maxlen: 48
                          2602:f965:30::/48 maxlen: 48
                          2602:f965:40::/48 maxlen: 48
                          2602:f965:50::/48 maxlen: 48
                          2602:f965:60::/48 maxlen: 48
                          2602:f965:70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:03:eb:0b:7d:41:5e:7e:1d:da:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a8e018-88f4-4067-935e-ef8e20a553c5
        Validity
            Not Before: Mar 21 13:00:50 2025 GMT
            Not After : Jun 19 13:00:50 2025 GMT
        Subject: CN=0271f69e-0a53-4343-a46a-629cfed63e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c7:c5:21:24:f2:e9:20:ad:cd:bc:7c:92:a2:
                    34:d9:73:75:9f:3a:e8:3b:c0:b2:54:e6:e0:b4:e8:
                    4c:be:8b:ee:b1:22:56:fc:76:e1:8f:c6:13:10:b1:
                    cd:31:9b:55:7f:2e:90:5f:f1:46:00:54:a5:94:52:
                    fd:b4:67:f4:47:fa:c0:a2:71:95:17:8e:d6:ae:65:
                    9e:1d:34:73:44:47:c7:8f:1a:6f:92:9a:7a:86:8e:
                    ed:9d:8a:dd:a6:e6:35:c6:1f:19:be:5d:b6:99:c2:
                    81:28:b3:71:ed:21:7c:fb:0f:d5:37:46:59:30:be:
                    38:a1:d8:d5:d1:a9:79:73:ec:ff:e5:08:6a:5b:23:
                    28:1d:2e:ae:34:75:f6:df:a1:7a:1b:38:3e:07:07:
                    cd:05:07:d0:61:2c:d0:6b:a3:04:ad:69:0a:2e:4f:
                    ff:a1:e0:5a:67:5a:50:6a:2b:94:e0:b9:a2:05:8f:
                    80:d5:70:85:15:fe:c0:33:09:06:d0:e9:af:11:ed:
                    c5:c3:18:81:76:34:16:b6:fd:5f:25:d2:a9:89:96:
                    8d:5b:f3:5d:01:e8:ff:c3:1d:97:55:17:e7:2d:e5:
                    0b:7d:82:92:b8:23:7f:76:2a:25:88:86:82:df:9d:
                    6f:ba:11:91:da:3f:a0:87:e5:31:02:45:a3:8e:8f:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A3:87:41:06:42:17:83:AB:72:87:8B:C3:65:26:C6:AB:B1:97:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/7de7db70-a393-3d00-8071-c1e1fb1b4cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5/a1a8e018-88f4-4067-935e-ef8e20a553c5.crl

            X509v3 Authority Key Identifier:
                keyid:75:EC:F0:71:97:E4:75:25:91:E8:D9:1B:9E:BC:AB:67:ED:5A:75:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a1a8e018-88f4-4067-935e-ef8e20a553c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f965:10::/48
                  2602:f965:20::/48
                  2602:f965:30::/48
                  2602:f965:40::/48
                  2602:f965:50::/48
                  2602:f965:60::/48
                  2602:f965:70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:36:4d:4e:ef:24:e4:2d:1d:59:29:7f:b5:1e:0d:27:27:b6:
         14:48:7a:ad:95:ff:30:12:17:ec:89:5b:fa:07:83:19:a6:bd:
         fd:0b:33:f5:eb:cd:db:cf:aa:66:56:44:b4:19:47:cc:f3:e7:
         2c:f1:1e:fa:16:17:d3:c1:fc:17:45:9e:84:9f:43:51:03:e6:
         a4:76:5a:9b:08:dc:22:e0:a3:4f:eb:53:24:40:46:35:f6:25:
         1c:a2:ad:7e:99:a4:79:db:4a:02:97:cb:e9:dc:4e:14:05:68:
         ac:a8:d5:09:cb:7d:4d:cf:9d:2e:9d:47:b9:d0:89:9d:fe:43:
         9e:4e:da:7c:ad:27:77:c0:de:d8:aa:46:c0:75:2c:5f:d6:4a:
         2c:b7:8d:70:3d:cb:bf:5a:69:e5:30:3e:89:c0:3b:44:11:3a:
         c9:2b:a5:39:fd:61:76:dc:c8:d2:89:97:31:9c:09:f2:7c:84:
         d8:9e:c8:62:39:8f:cb:59:c6:38:02:3c:22:b4:fa:0d:dc:dc:
         30:82:91:6d:2f:46:f6:bd:1f:34:33:60:5d:b0:2d:7e:10:55:
         ba:0e:da:17:b1:ef:01:e0:ee:8b:fc:e7:ff:21:f2:49:e9:a3:
         84:93:a5:60:42:cd:6c:0c:c9:b5:81:d3:93:40:e9:d2:f6:db:
         d5:01:03:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:36:22 2025 by rpki-client