Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa
File:                     1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa (raw, json)
Hash identifier:          jb4duX+/I6U31hwvMZQGb81Ww0YwlVJaS+ukclYMp30=
Subject key identifier:   DA:A1:F4:96:EF:C5:93:32:1F:AE:06:07:54:25:80:83:20:E6:24:6C
Certificate issuer:       /CN=08e3f98b-676d-49af-91dd-964a1e63df3b
Certificate serial:       010D0C9F432858499F2499B8E007DC4D68E5F680
Authority key identifier: FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     8075
IP address blocks:        2602:faa7::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:99:b8:e0:07:dc:4d:68:e5:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e3f98b-676d-49af-91dd-964a1e63df3b
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=7f3ae7e0-ab60-4d61-a853-dc303483fe2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4a:01:e8:6b:e8:c2:88:11:94:07:79:e3:e0:
                    8a:b4:ca:a6:0c:08:71:64:72:a4:56:67:93:b3:14:
                    4f:ae:20:72:f9:19:5d:0b:8e:97:d7:b5:23:88:4a:
                    19:24:2f:b6:96:87:4f:ad:04:7f:2b:4a:8e:d6:17:
                    d0:d7:41:20:bf:e6:9b:94:f0:e3:96:81:b2:4b:69:
                    24:13:1a:a3:43:24:4f:e6:0c:d3:52:8e:af:9d:66:
                    83:de:be:bf:ea:c2:a3:70:59:4b:17:7f:70:90:77:
                    cd:d3:89:94:9c:b8:33:e2:97:09:65:bc:c2:70:4a:
                    cf:79:32:e0:bb:44:7c:71:c7:66:39:10:b3:f1:ba:
                    82:3d:5d:0a:86:ef:15:85:ed:44:bb:e8:e3:87:f0:
                    5a:66:4d:92:c1:b9:10:83:1d:3e:88:08:5c:56:bf:
                    69:15:0d:8f:af:ab:8e:3d:b2:ad:cc:7b:1b:22:be:
                    dd:04:c1:0f:0e:53:f1:3b:2c:11:b6:e2:3b:0a:99:
                    cf:7a:8c:3b:fb:15:cd:37:32:6b:b9:a6:af:aa:b2:
                    a7:4e:d4:39:8e:34:29:4c:6c:c8:20:80:dd:90:eb:
                    9b:be:98:2f:26:43:68:96:5c:8f:97:ac:52:d2:7f:
                    ab:ad:5c:61:7a:07:26:9a:5c:b4:b5:91:90:76:99:
                    4a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A1:F4:96:EF:C5:93:32:1F:AE:06:07:54:25:80:83:20:E6:24:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:76:14:31:10:bf:f6:e6:5a:2c:e5:90:b2:bf:29:9d:b9:77:
         dc:08:e4:6f:36:26:e0:7f:d6:ba:8a:58:d6:fd:39:89:ea:f1:
         4d:b3:6b:77:6b:72:36:8d:3a:29:5f:56:09:a1:30:59:54:23:
         56:9b:d1:3a:89:0b:77:ac:fb:95:9d:27:e2:eb:1a:8b:fd:3d:
         d6:52:55:4f:e9:39:7f:95:b8:cf:c3:72:10:21:ab:06:51:e7:
         1e:9e:28:13:db:da:74:e2:a6:d5:3c:03:b9:14:e1:7b:20:5c:
         ba:50:77:b2:ee:d7:b5:d6:3f:a5:18:25:80:3c:61:06:c2:84:
         e3:17:a8:d6:58:6f:9b:f7:1c:d6:e2:64:d7:af:49:a1:e0:bd:
         1a:1b:9c:47:da:ea:18:6c:d8:cc:16:e4:62:ff:c0:c3:cc:e1:
         0c:0f:24:d1:d1:5e:dc:ec:cc:25:0e:9d:23:76:4a:79:37:ce:
         83:99:db:42:f7:23:15:56:10:df:ef:cd:17:4f:76:7c:30:93:
         52:5c:23:92:6c:4a:44:a6:fb:76:64:fe:7c:9c:6a:99:47:6e:
         73:86:5a:9a:20:92:3d:02:b1:21:9c:21:ac:f6:07:05:21:94:
         67:a6:9b:88:dd:45:1f:a0:67:8e:ef:d7:10:b5:20:6f:e1:ee:
         9f:5f:37:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:13:17 2025 by rpki-client