Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a10dd3c7-391a-32a9-85ba-fc4e6e7daf68.roa
File:                     a10dd3c7-391a-32a9-85ba-fc4e6e7daf68.roa (raw, json)
Hash identifier:          /ZriNFvxMwQTm5Kp2Q9iPkv29GsJzUPnztlwFXtFY9M=
Subject key identifier:   30:42:F3:AC:92:8F:EF:57:87:B6:D8:96:A6:CB:84:18:7C:E4:D2:C6
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584992949F2953A8D716DC604E40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a10dd3c7-391a-32a9-85ba-fc4e6e7daf68.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     852
IP address blocks:        2001:568:202::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:9f:29:53:a8:d7:16:dc:60:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=2f183619-d131-429f-8194-96175ae3001f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ff:a2:c7:f6:f2:94:4c:ec:86:4d:5b:25:a4:
                    29:ce:28:4c:53:04:1f:a9:4a:99:ba:f6:0c:11:96:
                    0a:6f:82:74:df:d7:8c:b6:81:a5:24:5b:33:60:ae:
                    bb:7f:7f:02:be:ff:19:d1:4e:1c:69:1d:2a:07:16:
                    cf:4e:a1:59:79:56:00:30:8a:6d:77:31:ec:46:7b:
                    b1:6b:35:4f:57:41:01:89:ab:06:59:46:e8:09:99:
                    a5:ed:d6:61:b4:44:23:1e:fe:df:80:e9:b4:81:d3:
                    bb:a5:e3:03:56:fb:29:e9:00:14:7c:f9:8c:cb:70:
                    51:bb:b4:57:f6:b5:5a:a3:c5:a7:f3:10:bd:6c:3e:
                    fc:35:84:da:74:57:58:b2:6f:d1:11:63:02:39:6e:
                    3e:ce:0c:0a:0e:dc:74:1f:04:76:12:35:80:67:90:
                    19:92:a3:d5:ad:e7:34:a4:e8:94:4c:d2:5b:76:9d:
                    cc:06:15:2b:0c:c5:f0:e0:e6:4f:10:68:b4:72:1c:
                    47:92:36:ad:99:24:1b:9e:da:b6:d3:d7:f8:2a:06:
                    99:a1:28:97:2a:81:65:a7:10:59:14:ad:5c:28:9d:
                    c5:04:ee:37:7f:91:89:a4:cd:56:fb:5e:f7:34:0e:
                    dd:fa:61:16:22:59:73:30:a0:50:2a:b3:7d:64:0a:
                    e6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:42:F3:AC:92:8F:EF:57:87:B6:D8:96:A6:CB:84:18:7C:E4:D2:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a10dd3c7-391a-32a9-85ba-fc4e6e7daf68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:568:202::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:14:99:bd:e4:89:de:26:51:60:76:7b:22:a5:42:be:48:ea:
         0f:a3:c4:3e:63:72:f7:44:b9:e8:25:fb:98:c0:4d:fa:cc:cf:
         1b:1d:d2:41:d5:2c:9c:00:25:a5:3d:5c:73:9b:0b:df:ac:c2:
         9b:ec:36:a4:db:43:b4:eb:35:98:cf:f2:6c:09:25:51:ec:39:
         89:4a:1c:ab:5c:a9:f0:4c:f7:c2:46:a7:87:81:ee:b8:ec:23:
         72:2a:07:f0:a3:56:f9:39:0b:fe:8f:ea:f5:84:23:75:be:b7:
         2c:0f:17:58:29:f5:cc:ca:5d:44:cd:4a:ea:30:d8:59:4b:d6:
         23:63:2a:60:4a:25:72:a7:0c:38:9d:3e:35:ae:b8:66:80:c9:
         ae:47:99:8d:7b:82:14:42:d7:58:94:5e:24:38:eb:13:9c:b3:
         f7:bb:2b:60:1f:85:60:76:34:bc:3b:81:eb:62:49:7d:2a:06:
         ff:d4:5a:13:c7:1b:96:20:7c:44:a7:42:24:31:78:d6:ae:78:
         06:33:a3:1f:11:cf:cc:ac:18:8d:71:83:04:39:82:7c:ab:dc:
         18:b8:08:29:90:69:6e:3a:81:8b:01:cd:d1:64:eb:3a:c3:b0:
         b6:67:67:2b:3e:ed:fe:f9:e2:61:51:d4:15:1a:f1:bc:0f:b0:
         62:2d:fd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:58:17 2025 by rpki-client