Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa
File:                     fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa (raw, json)
Hash identifier:          4xcCrOFzyOrJyyB9kfP1QtnhDMq72GlK9qzjjVWZCD8=
Subject key identifier:   7A:84:2D:73:F5:00:C2:E9:D4:CC:96:DA:F9:F1:DF:E2:F9:8B:4B:E7
Certificate issuer:       /CN=348d3713-8fd7-4568-b353-ff9d07414f1a
Certificate serial:       010D0C9F4328584988CF2688CAD0AC4537505240
Authority key identifier: 83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     400025
IP address blocks:        2620:12b:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:26:88:ca:d0:ac:45:37:50:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348d3713-8fd7-4568-b353-ff9d07414f1a
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=13523233-4bbb-4d87-89ae-b74a779e5133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:0c:be:a5:6c:cb:73:33:b1:b9:64:45:f6:
                    88:4d:dc:87:11:4c:7e:b4:42:cb:08:b2:6d:09:b2:
                    7b:41:44:53:6a:cb:e8:eb:5e:d5:e2:87:aa:24:05:
                    ef:bd:3a:84:5a:ff:67:3b:09:be:2e:a7:da:9d:85:
                    61:c0:f2:48:71:a4:cc:7a:3f:c4:18:6b:a3:ec:6f:
                    46:c9:93:ea:c3:60:8f:4e:b5:cc:b0:04:47:e9:ca:
                    e8:0f:b7:cb:e3:2d:28:5b:86:f3:ec:98:d6:e5:eb:
                    3d:4f:89:c3:9b:b5:0e:c7:e8:30:0f:5a:de:92:64:
                    99:25:4d:5f:4f:f5:7d:3f:bb:2e:ae:68:3f:4d:9b:
                    f8:bc:19:c2:ca:f8:9f:a6:fc:f1:2d:19:89:46:88:
                    84:78:3f:4c:3d:22:68:aa:b7:71:e9:4e:f7:e2:27:
                    3f:88:18:83:5e:e6:d1:08:12:9f:1a:c5:27:92:64:
                    72:bd:bf:8d:41:04:36:68:04:de:7d:8e:ed:11:75:
                    53:39:fb:a8:aa:b8:98:c9:b7:19:97:49:ca:b0:cf:
                    aa:17:7f:c7:f1:f5:46:28:9d:6a:93:13:53:65:e7:
                    55:b3:50:45:62:be:c0:cd:f3:0d:17:e1:f3:36:d6:
                    9a:f1:bc:e5:b2:aa:41:27:0c:47:ea:51:a7:28:53:
                    ea:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:84:2D:73:F5:00:C2:E9:D4:CC:96:DA:F9:F1:DF:E2:F9:8B:4B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/fb1a1f02-6277-383b-861c-529b8e6cbcc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a/348d3713-8fd7-4568-b353-ff9d07414f1a.crl

            X509v3 Authority Key Identifier:
                keyid:83:D0:17:90:7B:6F:EF:76:18:C3:EF:03:EC:E9:A8:34:5E:14:8D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/348d3713-8fd7-4568-b353-ff9d07414f1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12b:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:c5:92:14:53:86:af:57:1f:a0:d5:98:fc:59:04:b5:5b:30:
         91:55:bb:27:3b:91:09:67:e1:54:b4:7a:05:39:6c:00:9e:6f:
         8e:5a:5f:d2:9b:87:14:c2:c7:a1:e3:44:cc:f9:5f:ef:a9:93:
         52:10:21:a3:cd:71:e8:b5:31:5a:21:72:d5:65:c6:45:af:66:
         23:cd:73:2e:2c:cb:18:3c:47:cc:de:77:10:79:42:ea:26:0e:
         05:cf:be:74:85:bf:fe:b9:bb:35:90:21:fa:cd:e5:57:2e:f3:
         af:9c:a5:fc:65:ab:5e:ba:4d:42:12:a9:1b:c6:6f:3c:4a:36:
         7e:32:8a:d7:21:8c:f7:62:95:31:d8:f4:73:1d:31:f0:a3:97:
         af:dc:9d:aa:89:4c:9a:d3:69:bc:ad:aa:31:76:a4:b3:3c:c2:
         a4:20:3c:70:f2:42:8c:f6:e6:9b:af:8c:9b:28:99:77:48:9e:
         7c:a5:4f:93:a3:83:9d:80:ee:0a:08:f1:78:62:91:42:8e:d9:
         b1:c6:e3:8e:6c:03:e3:d5:7c:88:b2:4b:83:18:bc:7c:9d:50:
         73:72:24:8d:49:d3:37:73:97:02:01:4c:82:88:76:89:d8:83:
         32:d0:c2:cb:ef:ad:a1:dd:ec:7f:97:53:b8:76:ca:1e:89:c6:
         f7:8e:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:50:06 2025 by rpki-client