Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/df4f8b55-d8b5-34d5-b13c-c5f09beb7f3f.roa
File:                     df4f8b55-d8b5-34d5-b13c-c5f09beb7f3f.roa (raw, json)
Hash identifier:          Jm62/CemIJ/F2pO9dQsCoHccEwgyL/2IKlb+Ex/NFnU=
Subject key identifier:   2B:54:40:51:FB:43:67:B2:77:74:FC:51:64:8C:0A:B6:EA:A6:08:E4
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F43285849B6DF575F02E5DC1133C4A040
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/df4f8b55-d8b5-34d5-b13c-c5f09beb7f3f.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     399122
IP address blocks:        2602:fcd5:28::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:57:5f:02:e5:dc:11:33:c4:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=44e8dc65-c2f0-4d48-b958-1023f3598a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:27:80:cb:20:4b:2e:07:cb:24:c5:4a:2d:ba:
                    75:d7:26:16:6e:ee:c5:a2:93:c2:4b:11:e7:dd:5f:
                    28:b7:d9:ff:88:32:16:c1:12:3e:77:82:c5:31:ca:
                    fe:c7:0b:67:bd:cb:72:75:44:e1:a9:56:46:d8:8a:
                    6c:7c:6a:6d:c8:9b:f7:20:6f:c3:23:d6:3f:09:64:
                    a3:24:f4:68:d6:8a:ff:7b:49:15:00:b9:c3:9f:eb:
                    8a:53:fe:c7:4a:61:01:2e:97:ef:2e:af:57:d9:45:
                    d9:ee:73:c8:37:f6:25:c9:c9:5d:3b:d0:35:16:f6:
                    ca:c4:9b:51:f4:61:88:48:97:09:75:4b:bc:b6:ec:
                    b5:91:1c:27:08:63:9f:f2:88:3d:76:76:56:3e:a5:
                    3f:9e:6b:df:4c:0a:fc:59:d8:a4:47:75:33:0c:14:
                    a8:e1:5e:a1:3d:73:c5:7c:3a:b7:38:ba:2b:d6:71:
                    54:2e:5d:ef:57:dc:f8:26:dc:aa:fa:17:0a:b2:1d:
                    70:e1:eb:03:3a:af:a6:03:eb:f7:6f:1e:b5:32:3c:
                    e9:0d:76:be:7e:1e:3f:cb:23:55:01:d0:db:ed:0c:
                    a6:35:8c:e2:e8:cf:a6:84:17:12:8e:ce:45:cc:7f:
                    14:89:2c:f6:28:57:26:bc:4a:02:cb:a4:37:cd:27:
                    1a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:54:40:51:FB:43:67:B2:77:74:FC:51:64:8C:0A:B6:EA:A6:08:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/df4f8b55-d8b5-34d5-b13c-c5f09beb7f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:28::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9b:df:22:ff:80:08:0d:98:0a:11:aa:a4:70:48:92:c5:8c:
         45:45:78:f1:b5:03:82:4b:8b:34:2a:57:89:3b:6c:83:1e:1e:
         3f:a0:e5:53:c7:67:d3:97:70:b8:41:1d:50:69:c8:c7:36:8b:
         2b:88:89:23:eb:ad:20:e6:35:5b:f7:14:6a:07:5d:66:f1:2b:
         29:3d:7a:ab:89:4e:3a:d6:3a:03:c4:e7:22:aa:96:a8:e8:c3:
         dc:a3:3f:b0:cb:5f:51:f4:1c:aa:ce:7b:f2:88:d1:d1:47:cd:
         94:e7:a6:ab:8a:26:13:15:e9:27:de:3e:0f:10:ca:33:1e:d8:
         4b:24:21:88:46:f8:85:c6:07:c1:9e:d6:d7:ae:25:d9:54:0e:
         78:04:17:7e:f3:bb:01:19:73:41:8e:1f:9d:75:cf:60:2a:55:
         b0:d5:be:35:46:72:eb:82:11:74:fd:aa:f5:1a:07:a3:d2:94:
         f5:9d:12:ce:f6:e4:d5:42:ab:a8:10:22:76:1a:a7:ea:7a:3d:
         de:42:aa:31:ba:14:56:69:a2:29:07:c5:08:86:96:31:80:69:
         c5:96:99:e5:cd:6e:f7:df:91:fb:7c:a2:0c:ac:b5:be:48:da:
         72:28:0d:92:db:06:66:f7:07:56:2b:fa:00:f1:03:1f:45:e4:
         fb:86:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:16:42 2025 by rpki-client