Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/c115ff87-fd17-32b1-a7ae-601215e11446.roa
File:                     c115ff87-fd17-32b1-a7ae-601215e11446.roa (raw, json)
Hash identifier:          2Npgiaelj4+bf/qbs5qzd5kiKkdkv3lxxX8/fMAlMU0=
Subject key identifier:   B6:6B:A7:74:A4:4A:C4:D6:98:A5:4D:49:8C:54:33:93:9E:08:B0:1F
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F432858499AF47EFE6BD37906D16DA180
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/c115ff87-fd17-32b1-a7ae-601215e11446.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     211036
IP address blocks:        2602:fa92:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7e:fe:6b:d3:79:06:d1:6d:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=afa9c76f-8211-4f85-84da-4872e67af829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:42:cf:2d:15:3d:39:68:d1:ef:4b:62:be:
                    8f:2a:4e:09:34:f4:73:c4:c8:ac:2b:28:57:cc:fe:
                    a0:bb:5c:a3:1e:1d:11:57:42:92:14:d3:58:8d:88:
                    a8:35:2d:50:48:db:92:ec:51:8b:0f:b9:ed:42:c7:
                    cd:a7:e8:55:f7:a3:22:1e:b2:52:31:cf:0a:95:5a:
                    a1:2e:f5:38:ea:19:f6:0f:15:77:96:e5:73:c3:21:
                    ff:24:26:2f:6e:49:71:9a:de:65:88:92:b6:77:7b:
                    48:7e:68:83:96:78:24:72:4c:27:c4:c7:46:a8:7b:
                    e9:af:ad:75:bc:0f:0c:fa:80:0b:2b:dd:1c:ac:2d:
                    11:21:3c:04:16:ae:47:12:01:c9:3e:e3:5f:b5:fe:
                    de:86:b9:ba:a1:cb:42:ce:48:15:9b:d6:4a:83:67:
                    f7:44:74:04:b0:e2:04:01:94:d4:b3:9e:e2:d5:ea:
                    08:f0:19:fa:a8:a8:ba:bc:bb:6b:37:5c:41:50:bb:
                    14:a3:a2:a7:9f:02:c4:86:6a:03:d0:03:93:31:24:
                    22:0d:b2:43:21:80:ec:db:73:24:75:f1:b2:21:03:
                    86:44:f0:17:ca:bf:9f:0a:93:98:38:d9:ff:6c:6e:
                    ce:e5:dc:f5:14:36:14:9d:25:fa:f5:f6:de:d2:80:
                    d6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6B:A7:74:A4:4A:C4:D6:98:A5:4D:49:8C:54:33:93:9E:08:B0:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/c115ff87-fd17-32b1-a7ae-601215e11446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa92:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:90:6e:ca:82:b4:8c:1e:a4:73:3a:d1:7f:da:a8:a1:d1:f2:
         05:07:da:10:03:4b:32:46:b7:7e:2b:c5:94:7b:9b:0d:d8:a0:
         d1:87:d7:77:f7:48:1f:aa:1c:d9:1b:c8:bd:4f:68:9d:cb:87:
         42:05:14:a4:ca:4f:fa:82:d5:a6:9b:a5:1e:a8:c3:b8:e3:53:
         93:ea:09:54:cc:18:68:09:7b:17:ce:eb:93:6d:dc:f8:31:45:
         ab:86:85:f5:bf:dd:bc:19:5e:29:d2:71:53:63:23:cb:83:b5:
         1a:9a:d8:90:cf:bf:64:46:02:ce:31:2e:54:33:09:33:46:70:
         95:4b:bb:f8:a7:63:06:ef:5d:20:ea:57:2c:71:ce:73:c7:fe:
         6c:fb:14:9c:ce:04:35:71:20:dd:5f:1f:24:d5:a5:d3:06:24:
         48:91:d7:3c:51:56:66:14:04:7d:7d:b0:a9:55:cc:ef:f5:fa:
         2b:92:d2:0a:b9:0d:a7:41:72:5c:05:bd:bb:cd:d6:2c:38:5e:
         22:fe:2d:91:a0:19:78:39:18:b8:b2:1b:03:c5:fa:b8:30:62:
         80:29:51:63:a2:ef:0d:1b:ca:21:7c:21:f7:9e:8e:6b:26:85:
         a4:63:dc:27:56:ad:a0:bb:13:05:55:9e:1f:24:58:16:e9:17:
         74:4d:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:22:57 2025 by rpki-client