Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/c0b812ce-b70c-3bcc-a524-19c1c4d641e2.roa
File:                     c0b812ce-b70c-3bcc-a524-19c1c4d641e2.roa (raw, json)
Hash identifier:          Vm1fmdBEByvw3fSivVqm1bm5i+h0TORe3xU4AtfKwBY=
Subject key identifier:   94:51:14:AE:BA:16:F7:D3:7A:A8:EE:B2:07:87:A7:C4:0F:40:77:68
Certificate issuer:       /CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
Certificate serial:       010D0C9F43285849BDDA3B4AC972045EC303A980
Authority key identifier: C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/c0b812ce-b70c-3bcc-a524-19c1c4d641e2.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     62695
IP address blocks:        2604:f880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:3b:4a:c9:72:04:5e:c3:03:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faabd4d2-d007-47ce-aeb1-098f9db2cc81
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=9f6c96be-3213-455a-a3f6-f10fda654e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:93:45:2f:a1:33:d0:18:01:b7:79:3b:34:
                    a4:7c:ff:6d:b3:e9:6d:62:34:e9:20:db:40:d4:a8:
                    c3:49:70:65:08:34:94:a1:de:88:ff:c2:97:bd:20:
                    e2:39:4b:42:92:19:a0:40:22:55:98:25:1c:23:40:
                    ac:7e:fc:cd:23:07:80:55:1d:34:8a:73:47:8a:29:
                    db:31:c8:76:24:4f:71:56:74:06:4f:06:fe:1e:55:
                    5b:99:0f:e2:69:67:f0:72:c0:f8:14:f0:13:80:2b:
                    89:d6:de:59:c3:2b:1c:c7:21:36:6f:5b:16:73:d2:
                    c3:d9:9a:49:1f:af:da:d2:09:a8:43:80:5e:d0:09:
                    be:cc:ac:68:b3:7f:5b:e9:7a:99:57:4e:c5:28:7e:
                    69:9b:73:c1:4d:03:9d:87:c8:82:41:fd:a2:28:7c:
                    27:8b:2b:86:a4:13:a7:b1:a3:df:31:e0:7d:73:f0:
                    c0:93:7c:2b:0d:47:d5:4a:3b:c2:52:1e:8e:7e:68:
                    97:e4:fc:bd:5b:b8:32:cc:21:34:57:d0:48:6a:62:
                    ef:ab:75:1d:ca:a2:85:17:7b:70:4a:9b:b3:3d:3d:
                    90:bf:2a:ca:b7:f3:f8:8b:b9:44:40:2e:b9:a8:24:
                    7c:c9:f6:b0:01:dc:13:63:0c:8a:78:ba:96:56:03:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:51:14:AE:BA:16:F7:D3:7A:A8:EE:B2:07:87:A7:C4:0F:40:77:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/c0b812ce-b70c-3bcc-a524-19c1c4d641e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81/faabd4d2-d007-47ce-aeb1-098f9db2cc81.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:D5:4C:44:B0:70:3E:68:55:8F:06:AE:EB:D2:FC:2D:D0:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/faabd4d2-d007-47ce-aeb1-098f9db2cc81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:3d:e9:3b:84:48:2a:ab:33:30:c0:ec:01:bd:30:e5:aa:2c:
         0e:62:10:39:d0:c8:37:6f:22:4e:e8:2b:df:bf:46:39:e8:58:
         4a:a9:de:c0:c9:2b:d2:24:3f:b7:af:fb:94:21:53:e0:c1:6c:
         db:3d:c4:4e:7a:62:c1:fb:5f:05:c0:91:08:b9:ba:b8:74:55:
         cf:b3:85:7e:ce:dd:a6:b4:c7:e1:a5:66:95:fc:c3:10:5b:96:
         ad:54:87:cb:6b:ea:70:8f:2b:03:e3:28:bd:bb:04:ac:2b:7b:
         c9:51:70:0c:34:23:ab:e4:47:de:c4:2e:9b:f0:6d:dd:4c:45:
         c1:b7:6b:71:d5:5f:29:44:a9:a8:b4:a6:6f:0c:78:89:4d:a3:
         60:eb:87:4b:b9:0a:7a:5d:1c:63:6e:46:f3:f6:b6:82:22:5a:
         25:a7:bf:b6:62:1d:a4:15:04:68:96:da:ad:ff:6b:54:21:45:
         30:a5:53:ff:66:d1:d1:29:e4:2d:e3:15:8a:75:51:21:e5:35:
         18:f5:1d:c1:57:10:20:52:25:bf:71:83:14:fc:74:71:ae:40:
         a8:67:6d:24:01:62:bd:b7:e5:91:c3:00:6d:7a:47:b5:7b:7d:
         b7:53:67:5a:67:82:a4:84:c7:45:76:49:b1:a8:51:5c:b3:b3:
         3c:24:b4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:27:51 2025 by rpki-client