Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/5b22688f-decd-3057-8e30-eee2b25c918d.roa
File:                     5b22688f-decd-3057-8e30-eee2b25c918d.roa (raw, json)
Hash identifier:          9vMy168596pZYRAvdnTbdBwTDZGrYUYVSUCMuPXHd5M=
Subject key identifier:   92:1B:DA:22:FD:02:09:BD:7A:96:5F:48:47:F2:E2:56:69:6E:A8:2A
Certificate issuer:       /CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9
Certificate serial:       010D0C9F43285849C904EEB87E6E171FFEEE8900
Authority key identifier: A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/5b22688f-decd-3057-8e30-eee2b25c918d.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     397472
IP address blocks:        2602:fded::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:ee:b8:7e:6e:17:1f:fe:ee:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=0fbc2de9-9e04-4de3-aee9-3ce4111c248f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e7:09:66:fd:d3:f2:b2:15:ba:b6:da:a6:cc:
                    31:c0:48:ee:08:b5:6c:7a:cd:f0:6c:11:b8:0f:70:
                    f8:51:87:48:91:91:26:69:5b:28:97:39:e0:68:9c:
                    c0:98:a7:94:5e:8e:ff:cb:6f:8e:5d:91:39:af:f5:
                    3e:e9:80:bf:f3:1f:04:49:8d:c6:8b:4a:af:27:62:
                    b8:c6:a0:15:a4:e9:0e:30:3a:a8:fc:f2:7d:dc:cc:
                    1a:a9:82:e6:6c:56:22:54:b0:a4:b5:29:17:b6:bc:
                    18:27:54:81:0a:c7:19:11:b0:f9:42:ce:46:5b:5b:
                    66:7e:5a:01:c2:95:2f:20:91:40:e8:63:70:05:b3:
                    de:06:95:3b:b8:76:d4:79:cc:d0:db:0a:55:6a:58:
                    57:5f:66:2e:d2:ae:1d:e9:4b:ee:a6:a6:33:15:03:
                    14:04:79:26:10:00:a4:c3:2a:8e:85:7c:4c:ac:4c:
                    1c:ee:ae:11:f1:45:c0:27:8c:88:94:d2:fc:50:08:
                    dc:f4:d7:ae:75:e1:d1:4d:b8:f1:bb:30:a0:ba:a4:
                    d1:93:63:78:38:15:2e:52:13:5f:49:75:a1:db:48:
                    b4:24:9d:5d:b9:1b:9c:ef:65:88:2a:d5:a7:34:8f:
                    1b:a5:a9:e9:26:f2:fc:8e:21:c8:5a:e5:68:14:9c:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1B:DA:22:FD:02:09:BD:7A:96:5F:48:47:F2:E2:56:69:6E:A8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/5b22688f-decd-3057-8e30-eee2b25c918d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl

            X509v3 Authority Key Identifier:
                keyid:A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fded::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:fa:3b:6f:e6:f5:96:ab:f5:1b:91:64:45:98:38:ce:e1:93:
         3b:8a:50:f2:47:bd:2b:eb:be:ea:35:28:8c:a5:53:80:30:5d:
         eb:85:6d:94:9d:c4:ee:18:3a:12:5c:ef:54:db:bf:f7:5f:00:
         fe:0e:c8:ce:db:f9:87:f5:02:4d:a5:3f:72:ce:e7:e3:89:16:
         4f:a3:e1:d2:ae:77:23:71:2a:87:05:f4:3e:b1:d8:bc:f3:17:
         f4:f7:f8:34:f5:43:ce:09:55:8d:cc:fc:cc:25:0f:cf:93:e4:
         1f:43:2d:6a:f0:7c:63:50:0d:8a:4f:d4:22:bc:bd:54:25:83:
         2a:6c:cf:e7:03:a1:bd:00:e2:b7:10:87:bf:43:8b:d5:2f:c6:
         8b:cf:5f:6c:41:5b:00:ee:8a:ce:54:4a:c6:61:77:9b:63:90:
         8a:1d:3a:42:8e:31:51:e9:78:56:01:80:13:b9:32:f8:1e:90:
         22:8f:9e:6d:e2:be:ad:9e:2f:70:b2:c4:22:80:79:d4:40:e7:
         3b:71:65:3d:f4:9b:b8:c8:ee:d6:cb:69:f9:66:ae:a8:39:ad:
         e5:67:3f:3d:ea:c0:04:34:d3:c4:43:96:0f:0e:d5:81:c9:e7:
         d8:17:84:7a:7d:7a:bd:fe:d6:82:90:4d:5f:2f:8a:b7:19:6a:
         aa:02:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:05:18 2025 by rpki-client