Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/407ed1c1-df2c-3808-b350-f6b8886f7b03.roa
File:                     407ed1c1-df2c-3808-b350-f6b8886f7b03.roa (raw, json)
Hash identifier:          LPxOL06rT60thW/mbJKpmd5mw9pBrAVtPZz13cFeyfg=
Subject key identifier:   51:1D:1E:03:20:E0:26:6F:1E:C4:68:0B:80:75:37:3D:6C:C5:2E:41
Certificate issuer:       /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Certificate serial:       010D0C9F432858492CB21C4CF9A1D8E4D4FC6480
Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/407ed1c1-df2c-3808-b350-f6b8886f7b03.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     63334
IP address blocks:        2602:fdd2:400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:1c:4c:f9:a1:d8:e4:d4:fc:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=ae05a310-53bd-4abb-b13e-f7d93f8306d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1f:a6:c5:8a:26:c3:ec:91:a4:d8:4f:05:05:
                    6c:aa:75:48:e1:b8:4f:68:bc:6b:9f:7f:b6:5d:ee:
                    d8:07:3f:c7:15:df:7c:2f:50:91:29:56:7a:b6:3a:
                    db:a0:11:6c:59:61:94:32:92:bc:b2:8a:b9:d6:14:
                    5b:59:c7:4f:e3:2f:8b:8c:12:23:69:f9:5d:be:df:
                    89:6d:9a:9e:a9:1c:55:38:57:74:10:6a:53:1d:ad:
                    fb:02:ea:24:b1:4b:fc:44:39:e2:59:cf:84:ba:65:
                    0b:6d:77:a1:ee:6c:51:bb:9b:31:1b:be:bc:cc:8b:
                    ae:92:6b:7d:ff:9c:6d:43:6e:7f:4d:2b:73:dc:b2:
                    c4:0c:d7:41:c2:29:47:96:b5:12:9b:cc:60:05:48:
                    c1:48:31:b4:72:fa:91:5c:5e:79:4c:d3:b6:dd:d3:
                    f2:3e:18:29:a4:d7:37:f3:3c:de:0f:73:3d:95:ef:
                    db:52:85:68:7d:a2:80:b8:99:a4:35:51:e3:b4:4d:
                    40:45:60:5e:21:02:3b:38:70:17:ee:19:ca:8a:b6:
                    7c:70:8e:25:27:d2:b1:e6:38:91:d7:5e:30:77:78:
                    ef:9c:3d:b2:bb:16:12:c3:48:1d:a0:8c:a3:a7:c5:
                    2f:e5:0a:24:dc:5e:10:ad:dd:5c:5d:e0:69:c6:50:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1D:1E:03:20:E0:26:6F:1E:C4:68:0B:80:75:37:3D:6C:C5:2E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/407ed1c1-df2c-3808-b350-f6b8886f7b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl

            X509v3 Authority Key Identifier:
                keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdd2:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:41:8a:60:a9:ca:93:c1:68:c3:12:37:e3:29:e9:6a:82:9b:
         84:9f:01:2a:86:cb:60:4f:eb:31:ca:af:89:8c:5c:44:f6:0a:
         72:2b:ff:90:79:35:0d:de:69:e2:3d:74:ea:a3:06:1e:e6:98:
         62:99:c5:0a:84:16:27:4b:ab:91:09:f1:30:6c:7b:74:58:f7:
         e6:77:c6:3c:11:70:d9:5a:55:50:ab:28:aa:58:5d:1b:ee:d4:
         02:e9:05:5b:70:a5:4b:4c:ca:d9:01:64:05:44:65:75:ef:0e:
         67:88:ef:f0:e9:bd:eb:b8:c6:3e:fd:1d:72:82:d8:4c:2f:11:
         37:d6:ee:37:fc:94:97:7d:02:d3:eb:00:f7:6d:db:9e:3c:6d:
         6a:1f:16:ff:3d:39:24:5e:d8:76:4a:29:ce:96:e9:03:6f:c0:
         0f:11:6f:8d:e7:66:da:bb:ed:3f:96:af:14:2a:b4:d8:26:fb:
         6b:7b:c3:b3:66:ee:7c:92:09:3d:40:a1:ba:17:92:cc:81:3c:
         8a:a0:0b:fd:43:a9:1c:98:4c:8b:49:dd:ec:a0:54:c7:e4:6c:
         94:0a:b9:38:47:a6:ae:2d:8d:29:49:c6:4b:84:bd:e9:39:2f:
         6b:6e:88:d9:99:b5:6e:ad:7c:4c:64:58:59:4d:37:0a:0e:e0:
         76:cf:11:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:45:14 2025 by rpki-client