Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4af36c30-68b2-3899-961c-a1d8cbaed381.roa
File:                     4af36c30-68b2-3899-961c-a1d8cbaed381.roa (raw, json)
Hash identifier:          PiHOqzJDP/m+ihDQ6WAzI6TQPp7yym9Y410ENuGUkno=
Subject key identifier:   B9:AF:D0:A0:4C:DE:F9:2F:FA:94:B0:6E:44:3F:2D:37:54:9D:C2:5A
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F432858498E648C78A536FD4CCBA8A4C0
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4af36c30-68b2-3899-961c-a1d8cbaed381.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     399275
IP address blocks:        2602:fcc0:5555::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8c:78:a5:36:fd:4c:cb:a8:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=9836f240-8cae-454f-8da0-b279a8e2b091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:7c:93:ba:0d:1c:24:5c:f4:34:b8:46:26:
                    22:47:72:11:5d:d5:c1:78:4d:62:af:fe:44:02:ba:
                    c6:ef:72:9f:7b:70:c3:f3:3a:7e:22:7a:8d:f0:9c:
                    4b:f8:8e:2c:ec:3d:b0:0b:a7:e9:51:20:d7:7a:db:
                    e9:10:33:05:13:0c:18:b1:ac:0a:6b:08:3b:62:0d:
                    69:45:98:5d:dd:21:b6:a9:93:c8:b2:9f:2d:81:9c:
                    9a:25:fe:65:25:57:fc:a3:98:ee:e1:69:a2:4d:6c:
                    36:7e:08:e4:cd:62:c4:80:82:33:12:57:90:c1:03:
                    43:12:52:a5:17:43:a9:29:e8:71:36:7d:96:2e:b6:
                    7e:e1:60:bc:bc:9c:54:32:b6:c6:53:55:94:18:6f:
                    2a:74:ed:cc:1d:c9:43:9e:e1:10:0e:39:0e:25:65:
                    32:47:02:d5:19:7a:e6:80:5d:c3:46:d1:45:87:98:
                    71:0e:39:fa:c0:6c:74:bb:6a:0d:04:8c:34:2a:aa:
                    a4:54:50:90:cb:78:28:a2:3f:c1:ee:53:ec:b9:b0:
                    9f:3e:26:b4:a3:93:c6:80:b9:37:b4:14:bb:fb:19:
                    da:a0:1a:51:fe:8d:49:97:25:7d:7d:21:72:89:60:
                    d6:d1:b8:9e:ea:aa:1f:aa:b7:4b:fb:93:96:1f:1b:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AF:D0:A0:4C:DE:F9:2F:FA:94:B0:6E:44:3F:2D:37:54:9D:C2:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/4af36c30-68b2-3899-961c-a1d8cbaed381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:5555::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:42:f2:8e:b2:56:10:1d:c9:d1:67:85:ce:3b:fd:aa:1f:52:
         dc:72:88:f8:17:4e:cc:ac:2f:a5:ca:48:a3:7b:b6:62:0c:bc:
         d8:4d:fd:4c:01:d4:5f:22:1b:a6:71:f4:68:0f:93:10:b8:b6:
         f4:3f:48:44:d3:ad:5d:98:de:d8:79:76:ee:16:4a:f6:8f:e7:
         a1:d5:87:ca:1d:21:3d:bf:32:65:cf:1f:1d:30:4b:e2:23:39:
         70:6c:e7:96:3b:63:54:47:f1:48:e8:9a:cd:d1:50:41:21:ee:
         8a:72:ec:0a:fb:47:53:c4:f3:6c:51:57:99:df:c1:59:e1:fe:
         06:78:73:e4:0d:9c:41:92:30:7d:d9:56:8f:76:11:d3:f2:3f:
         79:ce:26:08:da:d6:30:a4:cb:bb:4c:bb:c5:f2:00:e0:07:71:
         21:7f:e6:a5:58:77:3a:54:3c:09:8d:20:20:4f:f0:ad:80:72:
         b8:83:42:55:15:7d:3f:a3:9d:b2:a9:b3:26:27:e3:ff:30:25:
         ff:47:e9:d3:11:f4:01:27:05:51:c3:0b:9d:ee:d9:6e:d5:f2:
         ab:d1:6e:58:c8:bd:c0:bd:42:1b:b0:e1:36:a3:61:b3:3c:ef:
         40:6d:56:4c:fa:1f:f4:3f:73:45:7c:f9:ce:55:8c:58:d5:39:
         4c:1d:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:59:16 2025 by rpki-client