Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/afdaee67-f4e3-3dce-a718-9cf5f0508a8f.roa
File:                     afdaee67-f4e3-3dce-a718-9cf5f0508a8f.roa (raw, json)
Hash identifier:          YtOhWxdHFrRS6Ch0bZU8nSGwz6Gu0h3OE3GP5UQtSAk=
Subject key identifier:   D1:24:00:22:5A:6D:99:1E:DC:2C:A3:48:31:2D:54:A1:53:96:74:3F
Certificate issuer:       /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
Certificate serial:       010D0C9F43285849C20A09196C8F6A0D4A319E00
Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/afdaee67-f4e3-3dce-a718-9cf5f0508a8f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     18943
IP address blocks:        2602:fbbb::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:09:19:6c:8f:6a:0d:4a:31:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=eef62ae1-7d77-4a6a-8e2b-bf5cc9de8af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:0f:70:47:9e:08:58:50:12:e5:6e:6f:d1:
                    63:0e:5d:00:42:f6:ea:6d:69:33:b9:d2:35:78:80:
                    90:8a:ff:b9:bd:ff:06:64:ee:58:00:ad:4d:a3:bd:
                    b8:3a:c4:02:ba:e1:50:63:1f:71:13:8c:05:87:95:
                    80:2a:10:65:f0:8f:ff:cb:a0:ba:3a:0d:6f:8d:a8:
                    d5:1e:09:37:8c:9f:40:c4:4d:1d:53:a9:af:51:61:
                    63:b2:ee:24:9e:02:ba:6b:df:ff:49:c0:86:4b:03:
                    a9:3d:3d:1f:ef:5c:5a:98:30:e8:36:89:06:06:a9:
                    92:92:bc:e2:41:2a:8a:d4:af:8a:ec:f1:5c:e4:72:
                    fb:34:6f:10:97:f2:ce:30:b9:ae:c5:7a:c4:c6:10:
                    e0:57:03:c0:a9:22:06:48:31:e3:37:5f:e4:cb:80:
                    a8:df:3f:60:b8:49:8e:95:d2:e5:43:71:bc:42:ed:
                    0a:03:15:6d:fe:b6:19:c7:29:9a:ef:62:09:dd:24:
                    2a:0d:35:89:08:a0:eb:7e:8c:2f:13:55:d1:30:e6:
                    4c:66:e1:66:77:36:10:2e:65:16:61:b3:ba:bc:a4:
                    a0:bb:44:02:d1:9d:31:07:3a:a4:0e:dd:ca:23:55:
                    69:26:ce:4b:c3:f2:f1:6b:52:1f:b8:6d:d7:f6:4a:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:24:00:22:5A:6D:99:1E:DC:2C:A3:48:31:2D:54:A1:53:96:74:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/afdaee67-f4e3-3dce-a718-9cf5f0508a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbbb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:10:ee:44:2d:9c:5b:fa:49:b2:c6:10:2a:52:fe:db:fc:59:
         9a:4a:fa:f1:9a:4e:e9:db:79:d3:d9:2a:2e:8d:ae:50:b3:2d:
         10:32:67:b3:97:a3:2a:77:3f:0d:53:5f:80:5a:e3:48:36:fe:
         6d:fd:ff:9b:6b:b5:f1:f5:b9:93:37:b5:a8:bf:ee:5a:4b:ae:
         eb:ca:30:71:5c:a7:bb:77:4c:21:27:7c:69:12:ff:ac:bc:1e:
         25:f9:5c:f8:cc:af:d5:76:4e:21:b1:9b:68:11:fb:a0:34:68:
         de:57:00:86:05:67:24:e9:35:2d:19:40:65:2f:cc:72:7b:ea:
         e5:29:80:e7:fc:5b:c5:47:e4:c7:7b:c9:9d:88:3f:4c:ed:ca:
         3d:8d:46:5f:90:07:01:a9:5f:49:5d:ae:a4:2c:64:8f:f8:5e:
         10:7b:57:62:74:fd:3f:a2:2f:d3:38:32:3c:0b:23:db:c8:bd:
         c3:08:f5:f4:df:7d:7f:f5:08:01:45:65:04:53:b8:31:3d:ca:
         f6:fe:61:05:dd:97:32:96:c2:dd:3b:fe:87:1e:9d:8f:b4:cd:
         23:f3:78:51:f1:33:21:49:88:bd:b4:56:c9:5a:d1:02:06:e7:
         5f:d2:90:32:9e:8e:9d:3e:59:71:6f:c0:ef:23:d3:5d:cc:04:
         29:09:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:29:49 2025 by rpki-client