Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa
File:                     c8b738ed-fedf-3c78-8f42-d6417729ca05.roa (raw, json)
Hash identifier:          Q2kgLokWbnHjqFHTmb2kjUUuJb8djFahRF3yISEWkCM=
Subject key identifier:   7F:4B:B9:99:A3:15:5A:AD:7E:AF:47:74:6A:6F:FC:D3:EB:43:54:37
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F43285849B14A02BDBCD7582E14134800
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     206216
IP address blocks:        2602:fb54::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:02:bd:bc:d7:58:2e:14:13:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=3fd13b27-9ccb-4d36-9a42-3fa96f1e7daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:e3:2e:61:a0:cb:7a:d9:6b:9f:b7:55:c3:
                    59:d2:b5:53:fd:54:8b:10:7f:39:0b:6c:c2:26:be:
                    17:0f:48:29:f1:66:6b:41:f1:bc:5c:f2:c6:2c:3f:
                    58:31:68:c5:b1:03:85:4d:fe:5b:ae:45:3f:c8:67:
                    7b:68:ce:ff:7f:7a:df:85:cc:ed:97:c5:a3:c6:e7:
                    88:3d:22:0a:c5:94:6c:bb:60:62:1b:34:1f:95:14:
                    40:53:d7:0e:b4:11:8a:98:16:67:9e:76:11:f9:9b:
                    62:ab:03:fb:1c:18:5e:2b:1e:17:d8:be:28:c8:ff:
                    00:9e:4d:dc:7d:93:a1:62:6d:17:76:83:c6:28:f6:
                    58:e6:34:03:45:3d:df:fe:59:c1:98:8d:ca:f8:db:
                    36:b6:ca:61:02:c5:0d:59:c8:86:8f:a2:8a:97:f8:
                    43:8e:99:5e:ab:4c:d0:18:f4:92:81:e2:03:8b:2b:
                    8a:77:c6:47:60:1b:f6:e7:34:c7:d3:4c:cf:9e:19:
                    99:05:c7:96:f7:3a:33:af:f0:83:76:a8:6f:ab:02:
                    9f:1e:4f:fe:29:17:2e:ec:b1:54:de:c9:9e:33:ba:
                    41:3e:a7:87:16:f4:0d:86:01:36:89:76:f6:8b:41:
                    fb:89:70:bb:1f:c8:ae:25:38:5d:71:72:06:ed:f1:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4B:B9:99:A3:15:5A:AD:7E:AF:47:74:6A:6F:FC:D3:EB:43:54:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/c8b738ed-fedf-3c78-8f42-d6417729ca05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e5:34:38:e1:cd:0c:7c:34:dd:7a:9f:3b:42:89:ed:d1:bb:
         0f:5c:52:78:17:61:71:4b:4f:ac:1c:f4:5a:fa:5f:e0:f5:e4:
         1f:e9:a6:d5:0a:bb:7c:33:dc:fb:39:20:be:2a:3c:d8:56:d8:
         0a:64:0b:f2:64:03:00:70:ed:51:c2:b0:9c:00:98:22:24:37:
         13:b3:91:4c:b3:c4:2b:64:a6:8c:36:96:af:9f:96:54:39:fb:
         58:fd:aa:45:02:49:e5:56:13:02:1c:fe:31:44:b5:b6:63:89:
         b3:e2:98:91:c1:85:73:ac:29:4e:81:da:9e:a2:45:45:45:b4:
         6a:44:5b:f4:1c:b8:86:2b:18:98:0e:a3:f4:a8:21:3d:3c:93:
         b3:55:d2:d8:7a:22:76:f9:4e:2d:d8:ae:07:b5:54:42:f1:eb:
         63:11:88:11:03:ad:f7:59:ca:0e:23:9b:ba:92:31:21:15:84:
         6c:81:3f:6e:43:17:74:68:cb:29:3e:7c:ae:0e:3f:bf:87:26:
         45:20:e0:d3:4e:55:b4:64:15:18:f1:bb:f1:f4:3c:a5:32:50:
         52:8a:a8:d8:ff:5c:97:7d:cc:91:e7:ff:d6:58:19:77:66:f2:
         13:8f:61:63:98:c6:3c:7e:ac:db:cb:fc:4b:b2:90:3c:44:53:
         57:04:b9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:51:11 2025 by rpki-client