Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa
File:                     8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa (raw, json)
Hash identifier:          b+Mb64M2qCXpdxVfoqV+oipm3yjgS2G7szCPZIyVOXY=
Subject key identifier:   8D:3B:5D:01:81:64:C5:C6:EF:E4:A2:36:9D:20:E2:A8:6D:3E:EE:EF
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858499AF4893D20D89821CA9AB780
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        2602:fefa::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:89:3d:20:d8:98:21:ca:9a:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=f199e9da-8293-4ef0-ab67-96e5f2dfb7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:64:b7:a5:83:33:37:e4:97:bf:5d:28:77:
                    83:3d:c6:96:bf:4b:22:fb:e4:26:0c:80:80:09:51:
                    e5:a6:fe:9e:28:33:dc:60:cc:c5:d7:8c:45:be:57:
                    ef:1f:bb:c6:3c:6a:a5:1c:ee:52:43:8b:26:98:6d:
                    24:b7:88:bb:1c:d3:e4:10:61:a8:64:f7:9e:a5:96:
                    93:4d:e6:55:80:0b:07:8d:06:c4:6f:41:3e:42:59:
                    97:f5:be:60:e2:96:f8:35:c3:7f:c5:14:e7:ab:ef:
                    c0:13:09:ec:02:54:04:f8:c1:13:b3:52:84:a5:59:
                    cc:e5:c5:4a:40:0d:7a:23:4b:3e:ba:72:8a:0b:c2:
                    7f:50:b2:28:8d:a9:c3:10:43:bb:8a:0f:81:ac:74:
                    65:83:b0:68:41:d3:11:5d:91:b1:f8:f8:04:e8:88:
                    57:c7:f1:b8:ed:d5:61:18:08:41:80:2d:ca:58:59:
                    ec:94:16:b8:1e:a7:30:a1:54:3e:5a:de:7c:26:7c:
                    84:7f:b4:23:b9:78:7b:a7:4d:f0:08:0f:d1:5a:cf:
                    0f:22:10:b5:1a:17:bb:85:db:e3:1e:d6:53:db:25:
                    90:2e:11:f9:92:fa:09:89:9e:81:fb:c8:cf:7b:d2:
                    30:e0:ba:63:a5:9b:74:6c:87:79:d1:e4:86:bf:bd:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3B:5D:01:81:64:C5:C6:EF:E4:A2:36:9D:20:E2:A8:6D:3E:EE:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8f9c13f5-2eae-3a0d-940e-1fa1255ed9c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fefa::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:47:9c:45:7d:d6:14:bb:b3:1e:63:ce:34:4e:cf:16:40:
         41:29:3d:58:01:10:8d:a2:e2:6a:b6:f1:a0:11:04:e5:f5:bc:
         13:96:9c:9a:18:16:d5:9f:5f:59:c2:e9:1e:1d:88:da:f5:df:
         03:f1:04:43:4e:7b:ce:7f:b3:f3:83:f5:2d:91:72:fb:1c:d1:
         b2:88:62:31:f1:dd:dd:3e:3c:19:3c:2c:b0:d0:d9:e8:42:da:
         4b:35:38:a6:4c:70:c6:50:e0:f9:d8:6f:a4:ce:e1:5e:24:5a:
         af:53:a3:05:b5:c2:11:48:52:af:95:66:48:d4:7a:08:c8:bd:
         42:2c:86:93:17:d0:79:4a:84:bf:16:3f:65:40:d2:d3:dc:23:
         db:ce:b4:8f:b7:51:fb:d8:d0:d6:29:a2:ff:0f:20:a1:fc:16:
         38:2d:77:21:34:9b:e9:f4:1b:00:37:a5:1a:a9:04:0d:4a:fa:
         47:f5:79:50:99:b0:90:d9:8b:2e:2f:5a:05:87:e2:80:48:ca:
         e7:29:ba:c4:96:4a:28:ff:75:a8:2d:91:2b:d9:27:72:bc:49:
         94:f0:bb:11:2c:ee:cf:f2:fd:a6:8c:15:16:7a:ae:74:e9:51:
         af:43:93:9f:49:9f:4c:6e:22:92:6d:88:21:93:f0:10:85:e2:
         34:91:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:00:41 2025 by rpki-client