Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/aacebf46-b625-3dda-b6c2-cfcda969f9aa.roa
File:                     aacebf46-b625-3dda-b6c2-cfcda969f9aa.roa (raw, json)
Hash identifier:          G92lbJ7WdAopbuG0smXf8CXvfcngo+soDuZmjRq6+Nk=
Subject key identifier:   5A:04:8B:01:EF:F4:7D:04:B1:C2:E9:01:82:21:CF:FE:1F:CE:04:49
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F43285849B6DF4AE1AE5CACC8F147BE20
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/aacebf46-b625-3dda-b6c2-cfcda969f9aa.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     399122
IP address blocks:        2602:fcd5:22::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:4a:e1:ae:5c:ac:c8:f1:47:be:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=35986f00-4076-49c2-b91f-6be05fb1a17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:17:19:48:7f:9a:7d:b0:93:ea:9b:57:37:
                    03:54:88:5d:7e:3a:b4:25:49:5f:64:6b:14:59:5b:
                    0f:5b:56:ef:94:c7:6d:25:79:c4:bd:50:de:72:2b:
                    89:80:14:9b:27:26:06:1a:e4:c3:af:3e:51:97:f0:
                    9e:72:66:32:25:8a:51:6d:4e:5c:ce:d1:7b:ba:6e:
                    4b:8b:17:d5:74:8b:de:eb:29:be:1d:db:ae:d1:5f:
                    af:6b:15:f9:79:0c:c2:26:23:57:53:78:d1:83:bc:
                    d7:0d:af:7b:0d:82:8a:ee:ff:71:39:4e:18:aa:16:
                    cf:93:1d:96:57:12:9e:c0:be:9b:28:4c:7f:f2:c2:
                    2b:10:30:3d:62:27:0f:c1:b3:4f:98:ab:75:a5:ec:
                    8b:89:36:72:d9:6d:90:6a:ab:aa:42:b1:d7:c4:f8:
                    db:56:4c:93:7f:5c:54:f6:d5:4a:ed:a9:cc:4e:8b:
                    53:27:51:cc:73:17:0d:0d:7e:12:bd:29:e2:3c:8a:
                    38:9f:43:cb:ed:f9:c6:c8:8a:23:9e:07:8e:6e:67:
                    44:86:14:88:29:58:ea:55:1d:0a:cc:eb:e7:c9:2b:
                    49:b5:8c:16:7b:6c:cd:4f:69:51:62:70:fa:2b:8d:
                    f3:8a:39:b9:96:6e:52:34:5c:19:13:eb:ca:e4:99:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:04:8B:01:EF:F4:7D:04:B1:C2:E9:01:82:21:CF:FE:1F:CE:04:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/aacebf46-b625-3dda-b6c2-cfcda969f9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:22::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:cc:2e:17:99:51:cd:1d:00:9c:ad:9b:bf:a6:59:59:12:70:
         56:9d:ef:b5:02:ba:23:04:2d:cf:3d:4f:91:1a:a9:6d:7f:d2:
         28:8c:94:9d:f6:29:9d:f6:fe:61:35:f7:36:ae:e5:45:f6:2b:
         28:86:66:c1:e8:3b:89:a2:6a:19:e2:d9:a0:1e:40:d7:18:dc:
         9a:d1:ab:01:96:5e:f7:90:9d:e6:cc:db:d5:40:0d:ff:69:c9:
         49:8e:19:e3:44:36:8d:df:0c:96:12:72:b4:4b:96:15:92:53:
         21:4a:94:36:ff:bd:10:62:7f:72:38:aa:ca:89:9e:8e:55:61:
         4d:ae:19:0f:5c:e9:76:2a:83:e3:d8:78:4b:ec:f6:e0:9f:c8:
         37:66:27:66:9f:64:33:16:3b:9d:e7:05:7a:7f:3d:34:a4:5e:
         bf:7b:eb:37:14:20:fd:5b:7e:5e:1b:b0:cc:a8:33:da:26:58:
         d8:24:96:98:ea:78:cc:ff:82:57:85:81:86:a9:89:59:24:5b:
         52:e9:86:7a:ec:e0:72:b7:8a:67:60:e3:6a:34:02:ab:bc:38:
         94:c0:ff:6c:31:1e:93:50:17:89:81:dc:6d:6b:33:7e:5f:ad:
         e5:54:d5:5f:6a:eb:07:0c:ba:d5:ea:30:ce:d0:ea:b1:20:a8:
         4b:07:4f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:19 2025 by rpki-client