Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/ae28b417-abca-34de-886d-a26abcbfc678.roa
File:                     ae28b417-abca-34de-886d-a26abcbfc678.roa (raw, json)
Hash identifier:          mGpznEjKpvJyBTo9gbWKkKoXDWwRN3Zzhw0nWvHBWxc=
Subject key identifier:   E7:13:D9:E9:21:1B:63:7E:69:86:1E:22:65:F8:56:59:52:CF:88:C7
Certificate issuer:       /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
Certificate serial:       010D0C9F432858498E648782021C9E2229FF8500
Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/ae28b417-abca-34de-886d-a26abcbfc678.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     20473
IP address blocks:        2602:fccd::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:87:82:02:1c:9e:22:29:ff:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=b34032a1-5f23-4890-92b7-b3387333d843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:30:b5:92:c8:f8:65:8a:ac:5f:7b:ec:2d:be:
                    78:38:89:03:aa:4b:4e:ea:fb:6e:9a:d0:02:16:ca:
                    66:07:82:d6:74:d8:54:39:27:dc:3d:49:d2:ff:63:
                    fc:d7:86:70:ca:87:88:b4:e7:9a:32:44:51:0d:85:
                    a3:18:10:c2:a6:46:00:3d:03:0c:1d:57:2a:da:d8:
                    57:91:a9:cd:8d:65:dc:fb:fd:b6:6d:12:ce:02:d1:
                    2d:53:63:4b:c4:be:d7:7a:33:a9:37:de:13:3e:ba:
                    c1:c6:ec:88:b8:e4:63:ce:b5:95:f5:f0:56:83:46:
                    29:66:b9:7e:6b:9b:52:97:93:79:ba:2e:3b:1d:7c:
                    15:73:65:e2:cc:33:11:67:1d:e4:5b:7c:2f:72:61:
                    8e:1a:db:fb:92:23:2d:7d:b2:85:87:5f:3e:19:84:
                    29:f6:1e:7d:4d:ee:e0:52:b9:dc:7b:e1:3e:32:6e:
                    cf:82:6f:c2:e6:f2:69:79:8e:a4:f1:53:65:6c:a9:
                    96:58:c8:08:e0:45:d0:46:88:98:70:4b:de:50:9e:
                    8d:12:82:91:de:ef:5e:a3:1d:f3:fa:bd:87:db:28:
                    50:e3:0d:d8:a9:6a:23:d4:a6:36:61:9c:b9:e7:e7:
                    24:c4:5e:05:45:0e:d3:0e:ad:3f:20:b6:6e:f8:1e:
                    b5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:13:D9:E9:21:1B:63:7E:69:86:1E:22:65:F8:56:59:52:CF:88:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/ae28b417-abca-34de-886d-a26abcbfc678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl

            X509v3 Authority Key Identifier:
                keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fccd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6d:4c:97:dc:e4:21:45:b6:b3:bb:87:ae:a0:4a:b9:58:0a:
         f7:82:ab:56:8b:99:52:b7:29:ff:ac:af:dc:2e:08:dc:24:84:
         45:ed:ae:b2:f9:b4:72:0a:d4:cd:d8:b1:82:e5:b0:d7:2c:06:
         44:fb:16:db:3e:f4:8f:82:f3:31:95:6d:a2:35:e1:0d:98:f5:
         76:55:96:e3:1d:bd:80:c8:d3:de:ea:a2:60:7b:76:84:31:69:
         04:6b:f9:ff:5e:e8:aa:3b:b3:9d:28:95:ae:75:3e:15:00:54:
         97:ac:e0:20:fa:a6:42:1f:97:62:52:64:1d:51:c0:64:f0:05:
         d4:19:0a:a9:40:bd:67:91:b8:d0:95:55:2b:6f:84:60:f0:f2:
         90:e4:28:a1:9a:78:56:20:34:d0:04:7f:60:fc:0d:69:e1:b4:
         e0:7f:fe:65:06:7f:2f:fc:08:b0:08:8d:2b:b3:fa:5a:7a:d3:
         ee:2c:a2:f1:77:6c:19:d0:2b:b7:96:8e:72:5e:cd:7f:17:ad:
         c4:6f:f1:a1:1f:41:45:75:f6:f9:cd:ad:89:75:a8:e3:b3:01:
         66:d1:56:09:ce:ff:75:0c:85:4f:df:79:4c:61:07:03:38:09:
         36:ee:c9:f7:45:7a:05:1d:39:b4:5a:ba:92:d6:02:97:42:b5:
         d8:b2:96:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:32:58 2025 by rpki-client