Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
File:                     7c21021d-b3c6-3128-89cf-35ee6d572d09.roa (raw, json)
Hash identifier:          N2rI1Xn85UjE+uWKuIKfjRggofR0YDRA+pbc2GcM86o=
Subject key identifier:   7D:C9:9C:94:AD:57:AE:8F:43:0C:C4:2B:89:1C:C9:5F:80:52:C4:62
Certificate issuer:       /CN=0ae79a05-4455-41de-a4a5-312c5d617c94
Certificate serial:       010D0C9F43285849088179C30D454383C9300FC0
Authority key identifier: 7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     400918
IP address blocks:        2602:f999::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:79:c3:0d:45:43:83:c9:30:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae79a05-4455-41de-a4a5-312c5d617c94
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=fa04dc90-260f-44ae-8b87-8a913e9e4b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:31:5f:95:b0:c3:a7:1e:c1:ea:89:12:fa:35:
                    da:79:6a:64:98:3f:a5:bb:8d:7e:71:9c:ea:ef:b0:
                    cf:50:0a:9d:b5:3e:81:9b:9f:f3:01:b5:dc:36:e5:
                    2e:1f:c9:77:41:ae:2f:c8:52:73:2b:c7:5b:15:01:
                    a1:a7:f2:3f:e3:ba:7c:0a:c0:da:36:ae:51:54:a6:
                    ce:8a:8d:e7:ae:aa:e3:6f:6f:e9:b3:c5:a9:84:61:
                    87:3b:74:54:c6:fd:45:4c:b5:6c:fc:61:f1:7a:fc:
                    6c:db:ab:34:12:09:ba:40:cf:10:0a:ea:97:2c:76:
                    e4:c8:92:bb:f3:0f:d3:98:8d:78:10:ec:97:47:8a:
                    12:80:0a:c0:31:70:19:7f:c9:33:e1:b1:0d:38:fc:
                    49:5e:8b:b7:2c:6a:e8:7b:56:30:cf:9a:85:91:d1:
                    58:5f:0f:3e:a3:35:78:16:ca:50:d0:76:36:80:df:
                    ef:92:81:c7:4f:a0:70:cb:ee:95:71:01:e7:63:e0:
                    2c:62:ad:e5:02:e0:78:c7:d5:5f:fd:03:a7:70:56:
                    66:62:26:55:4a:fa:dc:0e:2e:e7:51:e9:26:ec:f4:
                    c1:98:cd:f5:d1:6a:5a:e4:c6:70:0c:85:ad:b1:66:
                    1e:35:b7:1e:07:7b:69:45:6d:b7:95:4f:8e:dc:ae:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C9:9C:94:AD:57:AE:8F:43:0C:C4:2B:89:1C:C9:5F:80:52:C4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl

            X509v3 Authority Key Identifier:
                keyid:7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f999::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:20:73:72:7c:a6:46:77:91:68:65:21:f2:35:86:c5:98:d7:
         78:60:72:40:a0:9d:0f:92:5e:86:18:e2:98:1e:7c:5b:e2:3f:
         1f:32:ba:65:bb:37:8f:bb:55:30:f8:42:03:51:54:2a:60:b7:
         dd:f7:17:30:d7:3a:07:d7:e7:f2:76:58:16:eb:2a:e5:80:48:
         8a:68:74:f8:68:60:aa:6c:d8:e0:63:af:cb:a6:90:65:a0:8f:
         b3:e5:34:bb:60:2e:cf:46:d3:70:9f:39:a6:ee:82:e9:7a:5c:
         f8:03:2a:35:07:cf:c9:14:b3:7b:5f:c3:ea:82:0b:30:f3:4e:
         86:bf:f5:5f:38:7e:20:57:f8:2e:3c:2e:d5:9d:18:b8:e7:21:
         e7:a5:e6:27:0a:62:17:71:c0:d6:d6:c1:5f:ee:2e:6a:a5:36:
         d6:99:20:c2:dd:b6:24:54:ca:57:8c:71:eb:c2:4e:9a:d8:f1:
         f4:d0:d3:e3:9a:2f:46:4b:7d:19:fa:de:31:59:d2:d2:10:cb:
         a3:47:83:ac:1d:cd:68:85:01:bf:1f:41:83:1b:15:89:e6:b1:
         a5:8f:ec:64:19:a0:fb:5b:44:15:28:49:f1:af:4e:fd:2e:a2:
         3a:01:38:ee:5c:66:26:5a:33:78:7a:77:65:f3:11:3c:56:4d:
         21:ae:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:24:34 2025 by rpki-client