Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa
File:                     f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa (raw, json)
Hash identifier:          TFpeiGlmG0ffrCPoxNux+2cXRGC36KzUKNXbu64oGKs=
Subject key identifier:   1A:FF:C5:6A:3A:CE:21:E2:E0:A6:00:E1:81:E9:0E:E0:69:A7:7D:18
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F43285849A1EF77304361DC0246858480
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     8070
IP address blocks:        2603:1063:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:77:30:43:61:dc:02:46:85:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=08d3af7c-85cd-4344-9e2b-50499d2196a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:6f:88:f5:01:ec:cb:d5:3e:1d:cc:10:d0:
                    79:55:a4:d6:01:8d:53:81:f7:be:f0:01:ad:76:6f:
                    83:7f:f7:48:79:fb:48:20:2c:ff:16:ea:35:28:d5:
                    39:e7:ac:b4:63:77:f8:bd:f8:6c:68:b2:7e:52:59:
                    18:a9:e2:41:c9:3f:02:57:b5:e8:09:29:19:4f:34:
                    3e:84:09:cd:cb:aa:3e:0e:63:4e:7a:81:14:70:f4:
                    fd:f7:38:cd:dd:7a:b3:f7:88:5e:e0:42:15:30:23:
                    6c:0e:46:9f:50:7f:f7:53:f5:cb:0c:1c:ce:bd:5a:
                    87:85:10:cc:d9:66:34:db:a0:ee:85:93:d1:3f:c0:
                    10:49:f2:cc:8b:d5:89:ca:d0:21:2c:13:bf:53:b6:
                    7f:00:bb:b9:c1:ff:a5:87:67:89:ec:d1:d0:f1:41:
                    00:ca:1a:67:0f:1d:48:ac:cd:25:f8:61:09:61:cd:
                    8e:c3:c9:69:47:ba:42:89:e6:4b:e3:e5:02:e9:3c:
                    6f:c5:4c:b9:33:a3:d9:73:5b:82:ae:67:3a:3b:84:
                    2a:84:4c:e0:35:74:f7:0a:4e:19:99:73:80:91:57:
                    1c:03:69:74:c0:4e:63:8e:37:d4:aa:6c:c7:37:d5:
                    24:15:42:c6:b3:e2:91:70:a8:ce:37:75:2d:ca:61:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FF:C5:6A:3A:CE:21:E2:E0:A6:00:E1:81:E9:0E:E0:69:A7:7D:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:1063:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:6a:3d:15:29:92:db:cf:8c:fe:9c:3e:bb:58:f0:e5:6d:
         32:b2:10:0b:c9:28:29:61:fa:19:41:8e:d2:2b:00:3f:f2:53:
         0e:25:da:db:7f:d4:0d:f0:aa:72:20:d6:2d:01:b9:39:0e:ae:
         a4:e0:f8:33:0c:ab:11:3a:ed:7a:56:0f:73:72:d4:df:6e:0d:
         1f:d1:54:fb:0e:a2:5b:db:21:ae:0a:d1:f6:81:01:2f:f1:f6:
         f3:8d:0f:85:1d:c6:81:a6:f1:d5:f3:7d:c9:56:6a:6e:29:6f:
         b7:da:4f:83:31:83:eb:3d:ab:73:45:c6:7a:49:b2:51:da:75:
         5e:15:0a:55:4d:f6:88:f1:89:ad:c3:24:28:be:dc:89:a4:bc:
         1e:86:f6:06:0f:e6:c2:ee:e8:c0:16:66:4e:9b:5f:04:b5:5b:
         3e:2d:93:70:22:a1:41:83:d3:02:77:c4:ed:53:4d:23:a1:ae:
         a5:92:d9:c5:07:dc:02:80:87:ae:00:8c:cb:c5:e3:b2:c9:a4:
         c6:4e:35:9d:69:a1:51:32:9f:bb:c1:bc:3c:13:75:58:9e:30:
         5b:5d:87:d5:9e:c6:12:57:61:17:62:5c:fd:b1:d2:e8:de:7b:
         b6:19:ef:4f:26:30:d2:78:cc:85:1f:14:6e:ca:8a:fe:71:b9:
         75:a6:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:22 2025 by rpki-client