Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
File:                     0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa (raw, json)
Hash identifier:          2euysZTRECQ9SLvc+mqNIQ1ytO1flN40zW3B9qodjEk=
Subject key identifier:   DA:C9:90:A7:F9:A5:04:20:D9:0C:82:55:38:A7:DE:3C:FA:2C:CF:4F
Certificate issuer:       /CN=1fb5932e-f862-443b-a719-26a612c2f112
Certificate serial:       010D0C9F432858498339F284F43EE359EBE9E2C0
Authority key identifier: F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     17326
IP address blocks:        2602:fd2a::/36 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f2:84:f4:3e:e3:59:eb:e9:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5932e-f862-443b-a719-26a612c2f112
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=fa80a8b1-cea9-453e-ac8a-38cdb5df59fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c9:b8:4b:34:07:8d:e5:e7:8a:4d:ec:60:19:
                    69:a3:f1:8e:f6:7a:ef:87:cb:58:bf:71:00:6b:04:
                    fa:d6:95:b0:00:54:35:45:e7:e4:2e:e0:61:69:be:
                    05:d3:9d:0c:e6:3b:20:94:08:dd:99:46:87:07:f5:
                    b4:0d:75:92:02:f1:25:5a:a2:86:da:be:09:5d:46:
                    e5:d0:86:84:d0:49:75:5c:47:08:3e:d3:d0:b8:db:
                    2a:bc:04:e6:b1:31:68:ab:4e:04:17:bb:9a:9b:33:
                    67:5a:92:0a:02:0a:75:32:71:73:52:b1:c1:5f:85:
                    c0:29:d7:a7:84:5f:0c:4e:55:2c:10:e0:31:6d:43:
                    b1:7c:ce:5a:c8:04:6d:c3:e3:b0:fa:2c:71:2d:c8:
                    df:de:d1:14:82:8b:57:fb:3c:02:3b:68:32:ed:98:
                    8a:72:b2:a0:7e:23:43:eb:75:0a:eb:0d:bc:ee:3a:
                    07:f9:db:81:ba:a4:ed:bc:9a:7c:ec:fe:a0:93:98:
                    6f:6d:36:d0:14:ed:52:63:22:ec:34:90:ad:d9:e8:
                    6a:4d:96:23:59:ad:b6:31:8f:2f:aa:e5:c8:f3:e4:
                    91:7c:26:55:0d:d1:d1:4c:1e:53:67:31:2b:bd:2c:
                    93:26:0a:5e:60:4d:e0:41:d9:f3:f0:a9:31:78:65:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C9:90:A7:F9:A5:04:20:D9:0C:82:55:38:A7:DE:3C:FA:2C:CF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/0197a9e6-d271-3b8a-99d2-ee2c9bed2b5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5d:21:0a:8b:e3:78:fa:0e:bb:52:6e:48:9f:49:bf:a3:96:
         01:65:f6:dc:2c:39:da:f4:18:a4:8b:59:69:ff:45:ce:ab:32:
         15:4d:82:d3:29:e0:e9:bd:75:4a:86:40:1c:90:2b:7c:79:2c:
         7e:09:1b:28:f1:ed:ba:db:c6:5e:08:6a:22:92:10:1f:de:5e:
         9c:b5:0f:88:6a:94:7d:04:43:b2:f9:51:1d:ae:44:da:ce:68:
         26:af:85:9d:68:04:a2:d6:1f:55:5b:9f:88:e8:1f:34:64:35:
         1d:e8:b8:a9:9d:5d:a1:83:cf:9f:95:95:c4:78:b9:1e:4c:0b:
         9e:ec:be:8a:91:84:24:fc:e2:0d:30:ab:d4:df:2f:2b:a4:7f:
         9b:da:e1:21:42:e9:dc:ac:d8:88:7b:02:a9:fe:8a:b8:d8:e7:
         f7:78:76:8b:e5:12:c1:86:65:4c:5d:5a:5b:eb:42:11:27:2c:
         3a:38:11:68:fc:c7:70:14:5e:28:f9:76:54:00:af:75:45:6a:
         ed:42:5b:c7:86:ea:91:8e:a3:de:09:e4:79:ff:89:8f:5c:73:
         12:68:6e:e6:5a:8f:b0:6a:f1:4e:1d:44:cd:c7:90:31:17:02:
         11:8e:c3:7d:ea:42:c8:d1:36:c3:86:1d:dd:b7:ec:9e:2f:c4:
         d8:69:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:34:39 2025 by rpki-client