Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f4aafb04-bd47-38e2-b434-3148b69c7fbe.roa
File:                     f4aafb04-bd47-38e2-b434-3148b69c7fbe.roa (raw, json)
Hash identifier:          aGoNEGmrSSfTIrjoM2PM9LLUTdBHL3e0hzPTGJ/7+xc=
Subject key identifier:   F9:84:D6:2E:8D:45:90:8E:CE:9E:7E:5D:12:BE:2C:66:FC:0B:D5:53
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F43285849E4EFBCAC576747E3CE612480
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f4aafb04-bd47-38e2-b434-3148b69c7fbe.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     398427
IP address blocks:        2602:fd35:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:bc:ac:57:67:47:e3:ce:61:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=cf50f644-68ef-484f-9668-ebb914e57156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:a6:66:fa:b1:3e:83:39:4e:84:00:45:ba:
                    a6:92:a4:86:0d:ed:af:27:cf:65:af:c2:a0:33:84:
                    22:29:4a:55:4d:25:ca:9b:50:35:7c:72:5e:14:7b:
                    3e:9b:67:a2:b7:1d:98:f5:7f:dc:12:1d:15:29:42:
                    62:c2:2b:84:c1:6c:c3:6e:03:b4:66:dc:54:4c:3a:
                    49:51:65:f0:ea:c6:db:17:0c:b6:f3:38:52:64:a7:
                    f1:b0:04:0c:7b:f5:e3:66:a9:db:11:1e:fd:86:15:
                    ed:cb:58:0d:31:22:ba:00:7b:e3:8e:01:53:56:97:
                    c9:67:8d:b5:a7:ee:f6:c0:d1:6b:8d:74:16:d1:5e:
                    df:77:5a:18:79:e3:84:95:01:6e:fd:d5:75:9e:f9:
                    28:d8:37:f3:3a:b3:8f:13:ee:5a:f8:3a:17:0f:ca:
                    8d:13:2d:3e:e7:d9:2e:c4:9d:c6:32:2d:06:ac:92:
                    58:ea:46:ae:2f:e4:ea:0e:18:c7:c5:8b:f7:78:43:
                    79:18:26:74:d6:2e:43:1c:2c:e9:d6:97:32:fe:57:
                    72:68:d2:f6:f6:cc:78:1d:b1:fc:66:53:7f:1f:bf:
                    8d:a7:e0:8d:ba:e6:61:77:00:3a:86:62:9e:de:34:
                    bb:e3:69:5e:1c:cb:6f:89:21:b5:c8:bf:ef:f5:10:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:84:D6:2E:8D:45:90:8E:CE:9E:7E:5D:12:BE:2C:66:FC:0B:D5:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f4aafb04-bd47-38e2-b434-3148b69c7fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd35:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:7f:bd:6f:79:67:6e:68:91:63:a3:20:41:7b:89:23:a8:ea:
         42:e5:33:aa:57:94:49:5a:08:8b:84:89:76:7d:bb:e8:81:93:
         cb:ac:04:e9:82:6b:e3:74:bf:69:50:ea:e0:8f:4c:6e:62:36:
         ac:84:8c:c4:07:11:bf:b6:97:7e:a0:27:37:f2:14:26:34:62:
         15:4d:22:a5:6e:3f:c8:95:71:34:4e:c1:03:2a:f7:cb:ba:51:
         6d:ad:a5:df:94:0f:90:7b:24:33:81:0d:52:45:40:bb:08:b8:
         5a:72:1b:c7:b2:d4:94:97:71:b9:30:8c:e3:ad:7c:25:df:c4:
         a3:af:fa:2b:d9:e1:0c:f9:0d:9e:91:f9:31:e0:ad:7f:6c:e0:
         5d:61:4d:5a:3a:28:94:08:3e:7e:6c:f5:4d:99:03:a2:54:7a:
         dc:65:30:77:53:b2:d6:05:63:d7:bf:94:4a:56:40:84:99:b7:
         ca:cb:94:88:77:03:46:55:9e:cf:ae:40:34:54:12:51:36:a9:
         10:0f:3b:82:8b:24:e0:c1:5d:11:eb:87:98:f0:a5:cd:61:eb:
         5a:cc:da:3c:76:0f:1c:a1:7a:f1:7e:5f:5c:87:3f:29:d6:f5:
         f9:73:2f:01:a1:45:17:e7:bc:1e:f7:7d:bb:72:96:c7:c9:4c:
         b0:aa:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:19:50 2025 by rpki-client