Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477/fa480993-8c30-3b23-a3ec-3a23751d10d8.roa
File:                     fa480993-8c30-3b23-a3ec-3a23751d10d8.roa (raw, json)
Hash identifier:          rM8amrOwy8Sj2JTwdEdj9rriYopX62a3mpiUgOJVVTY=
Subject key identifier:   42:90:CB:56:FB:24:E8:4B:95:0F:69:D0:3D:0D:91:92:0D:AA:6C:75
Certificate issuer:       /CN=887a6da0-2576-4ec0-b3b5-4f9e0942a477
Certificate serial:       010D0C9F43285849AB02CFC4E96786A0A2D2EAB4
Authority key identifier: 58:51:2A:9A:19:18:A3:4F:A0:D2:24:07:CE:BE:63:BF:B3:C7:4B:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477/fa480993-8c30-3b23-a3ec-3a23751d10d8.roa
Signing time:             Sun 27 Apr 2025 19:02:43 +0000
ROA not before:           Sun 27 Apr 2025 19:02:43 +0000
ROA not after:            Sat 26 Jul 2025 19:02:43 +0000
asID:                     399970
IP address blocks:        2620:10f:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477/887a6da0-2576-4ec0-b3b5-4f9e0942a477.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477/887a6da0-2576-4ec0-b3b5-4f9e0942a477.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:02:cf:c4:e9:67:86:a0:a2:d2:ea:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887a6da0-2576-4ec0-b3b5-4f9e0942a477
        Validity
            Not Before: Apr 27 19:02:43 2025 GMT
            Not After : Jul 26 19:02:43 2025 GMT
        Subject: CN=35be7700-5717-4a2a-aa2b-b5f481608de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:af:43:65:3f:42:9d:86:c9:18:22:6a:8c:50:
                    32:bd:ec:78:27:70:70:ab:e6:6d:2c:60:f8:f3:43:
                    0e:f9:f1:8e:c7:9e:4d:78:39:6d:9f:75:83:19:97:
                    fb:a3:27:14:4a:a9:60:2e:a7:45:a5:e6:b3:55:fe:
                    26:51:71:f9:b9:0b:ee:3a:7e:14:0f:5a:03:64:02:
                    82:ba:4a:de:25:f0:2d:76:6d:ee:67:b5:ff:02:78:
                    ab:80:ee:32:54:17:cc:1f:ee:8a:79:8e:d7:0f:99:
                    d7:40:3b:37:73:12:42:1a:d1:1a:c8:77:e3:d4:f7:
                    a1:0b:63:8d:68:9a:76:ff:f5:2f:60:a2:f6:60:13:
                    7a:3c:b2:b3:bd:e4:bd:40:db:7d:51:f2:13:01:8a:
                    ac:d6:16:a8:e4:f7:5b:d9:e3:ae:09:80:14:0f:d0:
                    ed:fa:57:fb:70:76:57:eb:6b:a1:ec:26:22:e8:10:
                    9c:45:b7:4a:9c:6b:fb:30:aa:72:b5:3f:ed:da:ae:
                    7b:ca:8c:ec:27:1f:b4:92:f5:c6:dc:9b:3a:3f:eb:
                    58:3c:26:63:92:59:69:aa:13:8f:cb:f7:23:30:00:
                    c1:63:f9:ca:f4:90:e1:f6:01:a7:0c:7f:67:3e:a3:
                    1e:e1:8b:3c:09:af:62:04:b5:ae:2f:f6:02:48:67:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:90:CB:56:FB:24:E8:4B:95:0F:69:D0:3D:0D:91:92:0D:AA:6C:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477/fa480993-8c30-3b23-a3ec-3a23751d10d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477/887a6da0-2576-4ec0-b3b5-4f9e0942a477.crl

            X509v3 Authority Key Identifier:
                keyid:58:51:2A:9A:19:18:A3:4F:A0:D2:24:07:CE:BE:63:BF:B3:C7:4B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/887a6da0-2576-4ec0-b3b5-4f9e0942a477.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f1:4a:f0:73:34:27:78:76:7d:0c:77:de:9d:ea:2c:ee:f8:
         ef:00:47:46:2f:73:b1:1a:0c:b7:7a:f0:03:cf:f1:fe:ea:be:
         5e:b6:09:30:11:27:6f:f4:bd:b4:9b:d6:9c:42:b6:a5:17:ce:
         81:03:58:b9:20:43:ae:6f:c9:56:95:6b:63:85:16:c5:72:21:
         36:55:1c:6b:e3:3c:e1:ce:80:8f:3a:11:32:8b:bc:e2:99:e3:
         68:48:41:49:03:a2:f1:49:42:16:9f:74:2d:ac:11:a7:58:76:
         08:64:9d:33:54:48:bc:a6:fa:35:e4:6b:e5:e3:47:7d:7e:c4:
         f0:64:76:49:4d:0d:97:f6:49:22:85:3a:0c:1e:15:19:fb:1f:
         5d:34:6e:bb:0a:fc:67:b9:e1:f0:9d:a7:f8:15:77:d3:ec:74:
         28:b9:b0:8b:8f:11:7c:f7:86:a0:0a:fb:13:d4:ba:93:1f:04:
         02:dc:27:e7:fa:82:f3:b7:8f:73:63:75:70:1c:8d:63:73:c8:
         4d:85:ea:34:f4:a6:6d:b8:72:fc:e9:9d:38:cc:41:84:85:08:
         c6:f9:8c:a3:fe:fc:08:71:20:f8:bd:1e:f1:f6:e8:52:45:03:
         d2:35:88:53:ba:0e:35:fc:27:08:8e:f2:b2:41:cb:4a:ea:5b:
         40:13:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:38:24 2025 by rpki-client