Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
File:                     4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa (raw, json)
Hash identifier:          8AiKnP4JhCJC2yR2mb7WK8IKKUcXdJRU84b52J5oo58=
Subject key identifier:   3A:0B:F5:EA:BE:38:47:2E:B1:DE:C0:BF:C5:57:60:51:54:EF:A9:94
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F43285849BF3F65AB738759048B961380
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     38047
IP address blocks:        2602:f83b:54::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:65:ab:73:87:59:04:8b:96:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=5aa75b5a-3286-480b-a0a8-654247863d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:cd:b1:8c:7b:ef:29:f5:05:cd:71:58:4e:
                    f0:7f:ee:e7:cc:b0:2e:3a:3e:04:fa:6c:61:fa:b8:
                    64:d5:a8:7c:cf:e9:e9:55:c9:a7:40:2a:29:c2:b6:
                    dc:1e:47:bf:43:87:0d:0d:de:75:a9:97:b9:92:eb:
                    d4:b6:f2:69:b7:68:3d:d4:af:d1:bc:97:25:09:38:
                    d1:76:72:cc:fd:b4:2a:cb:7d:1d:d7:a9:c9:2c:31:
                    62:5d:18:64:98:2e:cf:98:4f:73:2a:e5:39:0f:c7:
                    f8:e5:66:bb:a9:bc:9f:50:db:62:d1:35:ab:4e:4e:
                    49:a3:f5:56:47:92:67:ac:4f:a9:ef:f6:eb:11:b7:
                    9e:b3:25:c1:9c:dd:ef:92:8a:ab:45:80:d9:2e:c1:
                    36:de:c8:d4:87:f7:1f:1a:0a:14:23:70:dc:e4:f6:
                    f2:46:41:2a:84:5e:9a:e0:64:22:2f:4e:46:a6:b4:
                    39:a5:b7:39:85:01:59:c7:99:25:c7:85:bb:c8:ed:
                    44:69:51:cb:80:23:a5:3c:ff:1e:ba:fa:31:03:dd:
                    0a:b5:81:f7:e2:c5:26:2c:32:5a:07:7c:bb:f8:bb:
                    9b:18:0a:3e:90:66:20:f5:ed:51:55:f9:29:71:5a:
                    de:c0:69:6a:b8:63:e3:81:e7:ef:44:94:3c:30:53:
                    b4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0B:F5:EA:BE:38:47:2E:B1:DE:C0:BF:C5:57:60:51:54:EF:A9:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:83:9b:48:4d:bc:85:3f:71:52:7e:cf:7e:f2:0e:d0:6f:c6:
         54:51:74:0b:cd:09:26:1a:3e:c5:25:6b:bf:3a:fe:ac:88:7a:
         f2:0a:9e:ed:ce:48:0d:d2:27:96:9d:71:a4:82:92:7d:e5:a2:
         4d:7c:83:2f:dd:06:ce:98:75:ee:99:de:07:1e:6e:f2:4e:fa:
         f7:2c:b2:f2:08:74:cd:8b:04:07:0d:3a:7b:c8:c4:0f:ed:db:
         4a:cc:ac:19:ae:17:bc:52:ad:58:6b:ad:0e:07:ef:26:d0:cc:
         db:d5:06:ea:75:5f:0b:57:9d:f9:82:69:74:df:d1:76:83:9b:
         6b:14:69:8c:93:38:e3:30:c6:8a:fd:f8:c3:ae:60:38:69:16:
         3e:f4:5f:70:2a:76:c5:79:82:75:c6:c6:32:ca:3b:80:02:c2:
         f1:bf:21:d2:02:31:cb:ef:61:6f:bd:5b:36:25:39:e7:dc:25:
         82:35:de:4e:c9:9d:e9:c2:fe:ac:13:a2:01:a2:88:78:a2:54:
         c2:69:08:54:26:10:7c:ae:2c:c7:da:e0:30:ea:eb:82:7f:ce:
         b3:cd:c7:4a:ef:f3:36:20:f5:7a:4e:4d:58:5d:83:dd:e6:94:
         72:c0:df:e9:f6:6a:ab:f4:51:27:a5:38:ab:50:b3:51:46:8e:
         68:53:e9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:10:22 2025 by rpki-client