Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa
File:                     352e0bf1-c858-31db-a4b1-a0641760c140.roa (raw, json)
Hash identifier:          s03Ce6kHSphMq52VqgE5IpPbsAMVoA/fhoyHkuyCGJE=
Subject key identifier:   E6:93:53:25:9B:13:A8:03:13:3F:FF:06:E5:07:1F:E6:DF:85:F8:02
Certificate issuer:       /CN=206290f3-53e1-4d17-8678-29dace17c006
Certificate serial:       010D0C9F43285849A61F479BDB46100B49694200
Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     33179
IP address blocks:        2602:fa21::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:47:9b:db:46:10:0b:49:69:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=aa8db708-688d-40e9-b15b-cb91a454fde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:af:ba:b3:8a:31:77:da:ed:2c:4e:46:48:a6:
                    c3:a0:30:ae:c5:79:9b:89:28:5c:12:30:54:98:c2:
                    f5:5e:07:74:59:33:07:1a:59:aa:0e:07:68:0d:03:
                    f2:5e:e2:68:aa:56:8f:81:5a:93:0a:b4:0e:29:84:
                    bb:e2:4c:ef:5d:38:48:07:fe:7f:06:da:32:42:f5:
                    3c:b5:f0:8a:87:82:2e:be:2c:49:9e:6f:02:11:7b:
                    92:55:76:8b:b3:6e:36:0c:7a:28:e0:19:7c:60:44:
                    59:b1:15:9b:41:10:0a:87:20:8f:ed:16:a9:c2:a9:
                    cd:79:f6:97:26:7d:4d:b4:b0:85:22:01:44:d4:7e:
                    1d:e0:44:f9:c7:77:d5:94:45:8a:b5:69:26:85:f5:
                    d3:fb:20:90:ef:af:52:25:f4:44:28:38:9d:6e:b5:
                    22:3a:df:5a:de:77:b6:dd:0c:a0:b6:82:a3:0f:fc:
                    6b:5c:cf:99:a6:62:46:a8:fd:1c:6a:96:69:90:d1:
                    69:e0:aa:d9:f3:32:ce:65:f5:3b:f0:e6:54:d4:de:
                    c9:25:18:81:8a:c2:2a:56:7e:dc:29:1f:ed:04:0d:
                    b7:90:32:99:5d:08:ea:52:e6:cb:b0:e7:75:95:dc:
                    88:21:3c:12:7a:9c:2b:91:91:73:a1:1b:7a:41:99:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:93:53:25:9B:13:A8:03:13:3F:FF:06:E5:07:1F:E6:DF:85:F8:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/352e0bf1-c858-31db-a4b1-a0641760c140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl

            X509v3 Authority Key Identifier:
                keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa21::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:50:98:91:f2:4a:2d:b7:e7:8d:d8:e5:59:cf:a9:eb:fb:
         3c:ba:21:68:0a:2d:39:eb:70:36:0e:09:03:91:52:49:60:db:
         14:26:ca:49:99:4d:ae:ba:e3:61:d3:7e:07:9f:86:f4:c6:3f:
         54:09:6a:01:17:7d:69:aa:28:5b:fc:2c:84:22:ec:09:58:5a:
         7c:80:51:1b:7c:b9:29:fa:55:50:ce:11:ed:6c:2e:89:97:52:
         85:73:99:9b:ba:6d:23:db:ea:47:f0:f8:c4:ab:03:31:24:35:
         32:3f:ea:c7:ff:24:f6:4a:d4:8a:96:38:e4:b8:a2:86:1c:04:
         6c:a9:8e:d6:5a:a2:bc:41:5c:42:a5:77:ba:61:8c:94:f5:33:
         a4:a4:e2:e1:3f:b7:7b:38:c5:d6:6a:20:e4:49:ab:12:f4:ac:
         a0:64:9c:43:d6:7e:00:46:0e:a2:be:4a:4d:66:55:68:f1:1f:
         bc:c6:42:0b:44:65:bd:93:e4:1c:bc:22:3f:1f:da:48:bb:1d:
         63:4e:6f:bc:8c:9d:b6:f4:8e:5c:0e:23:fc:b1:85:53:e7:86:
         1f:34:74:1a:52:35:7a:f0:7c:13:c8:02:96:db:51:5e:2b:41:
         e4:e7:68:67:02:8a:8b:b9:1c:7a:0a:6f:be:63:18:71:e3:ea:
         ef:11:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:42:15 2025 by rpki-client