Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/8664999b-37a2-3582-8e4d-50a9abf36ce3.roa
File:                     8664999b-37a2-3582-8e4d-50a9abf36ce3.roa (raw, json)
Hash identifier:          smyyXipnAnENVO2O4h/4kWSTAQ9eDDhUDloKOH4mLKc=
Subject key identifier:   43:3B:D9:B6:3A:AD:09:C9:29:9E:64:0C:53:91:FE:BB:C4:BA:B4:2C
Certificate issuer:       /CN=fc019755-a466-4511-8e5f-83781d1aca46
Certificate serial:       010D0C9F43285849806F2AAC7B1EC50048B84F00
Authority key identifier: 84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/8664999b-37a2-3582-8e4d-50a9abf36ce3.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     14618
IP address blocks:        2602:f994::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:2a:ac:7b:1e:c5:00:48:b8:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc019755-a466-4511-8e5f-83781d1aca46
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=00f542fb-c5a9-4dac-860d-593c37a7608a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:b5:1b:52:3a:6c:36:8f:46:e3:20:0f:0d:
                    35:72:b3:fc:f1:88:d1:dd:13:18:fc:86:97:af:2e:
                    57:74:d7:8a:c3:62:07:a3:64:28:59:77:16:f6:ca:
                    90:b7:f2:98:f3:fe:f2:86:ab:c1:0a:c8:b2:07:5b:
                    d5:68:9b:ff:25:a3:b0:b9:a4:69:83:a9:9e:82:fd:
                    29:56:8d:b0:f9:f4:ab:ea:13:24:8e:ea:0b:6a:3e:
                    a4:be:7a:29:00:1e:02:b2:36:39:e6:85:8f:76:d4:
                    11:8e:6a:3f:88:60:77:0b:46:54:c7:5a:b6:ec:66:
                    90:f0:11:a4:7b:6c:e9:d7:13:14:66:d9:27:a8:e0:
                    66:4e:30:0a:e0:e7:d4:be:65:86:32:01:49:a8:24:
                    d2:8e:ca:00:47:f7:b8:96:27:07:d3:ac:9b:a6:2a:
                    09:b8:3d:a2:03:44:4d:d5:e5:9d:d2:f1:af:b2:49:
                    81:19:21:5b:f8:f6:55:19:03:a1:6d:ae:e8:dc:9b:
                    3b:60:97:bb:c9:58:a8:a1:4a:3d:79:87:5a:07:cb:
                    c9:ea:13:7f:22:87:18:3d:80:6a:36:4f:e8:a0:82:
                    bd:bd:6f:8c:d8:2e:27:af:80:14:48:a2:28:f5:ac:
                    42:d4:36:2b:0e:75:18:f0:10:3e:12:ae:d1:e7:18:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3B:D9:B6:3A:AD:09:C9:29:9E:64:0C:53:91:FE:BB:C4:BA:B4:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/8664999b-37a2-3582-8e4d-50a9abf36ce3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.crl

            X509v3 Authority Key Identifier:
                keyid:84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f994::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:1c:ca:9e:78:e5:ec:17:89:1f:6a:b2:a9:f4:d8:45:a0:49:
         d9:12:0a:1f:de:c1:94:28:a7:44:0d:51:0e:4b:38:9d:f4:2b:
         7f:0e:51:16:3d:4d:2e:ca:96:df:75:08:88:45:ca:a6:88:a9:
         7c:8a:c8:5a:c4:5a:29:a3:48:8a:9e:a3:e6:0d:0d:b5:95:27:
         9f:09:b2:d4:4a:33:ed:93:db:22:47:09:76:65:ec:29:10:4a:
         6e:8b:03:87:9e:c2:64:ce:67:d1:38:3f:e7:74:d7:42:0c:4a:
         a2:00:23:40:b4:7c:4f:61:e5:1f:b6:d1:53:67:7e:a9:49:3e:
         73:99:3f:ba:c5:a7:b0:45:d5:b0:f7:5c:da:04:8d:9b:6d:c6:
         d0:6d:bf:a8:f5:e4:4f:83:77:7a:05:f7:df:ee:50:27:1c:25:
         a2:ce:d6:c0:08:3d:47:fc:4c:57:a5:a6:f7:3a:76:3d:a9:e8:
         c1:c7:8f:f5:92:0e:04:e1:51:0b:48:1b:e0:0f:23:c8:f2:95:
         0a:08:26:49:39:01:e4:2f:0a:19:21:2e:56:9d:47:48:14:e2:
         8e:13:ea:d8:dc:8b:f3:2f:76:d7:2f:d6:75:22:10:ac:53:2a:
         63:84:87:a2:d6:92:65:f2:23:dd:89:07:e1:7b:c4:e4:46:51:
         2a:68:64:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:38:41 2025 by rpki-client