Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/bf744f62-002d-32f9-bc1d-e9b424b6bf96.roa
File:                     bf744f62-002d-32f9-bc1d-e9b424b6bf96.roa (raw, json)
Hash identifier:          ofIQW8VdKVp1lkff7FSA7GZZuK+3VZRcFrOTkK3NCBk=
Subject key identifier:   36:C0:E8:0D:64:33:3D:D6:90:17:B8:20:B7:EE:41:B0:A1:24:F4:02
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F432858497F09A4F2160417D8525E0640
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/bf744f62-002d-32f9-bc1d-e9b424b6bf96.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     46474
IP address blocks:        2602:819:e003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a4:f2:16:04:17:d8:52:5e:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=9d04b553-5346-43ff-ad3f-baecdba8edc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7c:04:70:4d:0d:8d:11:32:dd:16:c2:3f:42:
                    19:82:fd:dc:ca:bb:dc:e0:d3:bb:86:c5:8b:17:3c:
                    10:72:83:a5:bb:33:13:64:b9:0a:7a:58:fd:c9:70:
                    53:ac:e1:ba:43:8d:f5:f2:3b:d2:23:c0:26:95:0f:
                    c1:d1:5f:90:13:0c:3c:1e:2b:f1:c4:c7:e0:f8:c6:
                    93:fc:ef:d6:4b:c7:d2:70:c3:75:0f:e8:45:ff:99:
                    21:0a:17:81:83:9e:48:af:ce:09:36:37:93:c0:83:
                    6c:dd:fd:e8:c6:cb:57:ba:34:8a:82:3b:f9:09:4e:
                    31:90:e9:a9:35:a4:50:a4:35:a4:9d:95:88:bd:da:
                    99:c0:f6:88:9b:2e:33:2b:ee:7a:ea:92:2e:53:00:
                    08:69:55:62:2d:bb:e6:97:1f:a1:a0:5a:93:60:0d:
                    24:77:5a:d9:a3:ac:70:c1:89:81:00:ba:c9:11:bc:
                    26:9b:fb:2d:af:df:43:62:62:f2:a8:04:31:b5:16:
                    12:df:3f:79:0e:d4:87:05:aa:96:0a:5b:35:10:92:
                    29:fb:68:8f:4b:d3:43:4b:df:76:7e:5f:2a:bb:2d:
                    3b:9c:1f:29:a6:71:8a:a0:a6:02:47:8e:2f:17:e4:
                    d1:05:e6:92:dc:61:14:d7:a4:aa:8f:78:b4:c5:4e:
                    e4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C0:E8:0D:64:33:3D:D6:90:17:B8:20:B7:EE:41:B0:A1:24:F4:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/bf744f62-002d-32f9-bc1d-e9b424b6bf96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:e003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d5:09:66:81:14:d0:f6:18:1d:a3:cf:71:a1:af:d8:46:1c:
         0b:75:65:37:63:fb:0d:7a:d9:52:a3:da:16:06:59:14:a3:c9:
         0d:7a:7d:8e:2d:70:b4:7e:d9:f8:34:4f:4f:43:9c:7a:c9:c9:
         19:d3:4a:08:27:3e:41:4b:61:e7:1a:3d:90:5e:17:f0:9b:58:
         e8:2e:56:a5:17:14:ba:d3:41:11:b5:6e:02:68:34:05:85:8d:
         e9:66:18:de:b0:53:cd:35:2a:2e:f0:43:c4:46:fd:e9:a7:d6:
         c3:97:7d:df:ec:df:ea:6e:b2:21:3c:4f:93:81:90:90:a3:59:
         85:31:52:a4:0a:e6:8f:b9:8e:8e:dd:dc:24:a4:0d:6d:8b:26:
         d9:5d:76:eb:24:8d:52:05:29:8b:90:c0:32:fe:ad:e5:d2:83:
         55:b2:d4:f2:90:e6:dc:7b:8a:ac:7b:ba:a9:d6:ab:a8:86:0f:
         25:e8:d9:ce:e4:bb:44:21:e3:b1:80:8c:63:0c:f8:76:cb:fc:
         2a:7c:b2:b3:3d:f5:ae:8d:7f:1b:2b:46:a5:5b:96:68:8b:28:
         e8:14:42:d2:34:1a:3c:2a:01:fa:16:d9:b8:cf:57:b2:5e:1c:
         48:71:23:0d:0a:28:ad:82:2a:57:e0:f9:20:bf:d0:ac:73:40:
         2c:46:4d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:40:13 2025 by rpki-client