Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/35ae5d38-189b-36c7-91a9-9c5eb9065299.roa
File:                     35ae5d38-189b-36c7-91a9-9c5eb9065299.roa (raw, json)
Hash identifier:          8hDoOBanRZdHY02ScmUXHgZExF/+Y77KCuKNlrmkb1w=
Subject key identifier:   8A:F7:EB:CC:A2:A4:4A:29:E4:2D:25:F1:67:8B:10:04:2D:8C:FF:6C
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F43285849ABB49F5E60AD95D684545980
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/35ae5d38-189b-36c7-91a9-9c5eb9065299.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     23428
IP address blocks:        2602:fb68:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:9f:5e:60:ad:95:d6:84:54:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=28f1b04d-cd55-4178-b28e-013287b26d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:9c:c7:02:1c:b7:31:c6:1f:de:c3:79:49:
                    6f:54:4f:21:a9:f7:01:e8:b7:54:db:72:df:30:75:
                    16:dc:46:ef:b0:e4:59:8f:df:49:13:ba:c1:d2:80:
                    de:c1:31:a3:99:0e:bc:a7:ac:06:3e:e9:d3:d9:36:
                    26:60:34:73:34:fe:31:26:68:f4:82:d4:a3:7d:fe:
                    95:aa:ec:ac:7e:39:e0:03:a9:ea:7f:3d:f9:de:75:
                    c3:da:54:50:0f:a6:d0:47:c0:7f:dd:fd:b0:15:ec:
                    32:c9:a5:d1:53:89:7c:bd:ba:ba:63:25:4a:2d:ad:
                    64:0d:26:67:2b:b4:40:5d:f2:90:e4:ef:f0:0a:80:
                    63:8f:13:a9:90:bb:e6:ee:ee:33:28:c7:d0:18:7a:
                    25:3c:1c:52:fa:f8:7c:11:4c:b4:34:28:2c:be:27:
                    1b:70:0a:ed:5b:06:e4:fd:99:c9:ee:4a:74:86:c5:
                    04:e3:e8:a6:f4:3f:65:45:97:c6:23:8e:f2:2f:08:
                    bf:c9:74:86:30:44:90:7d:7f:58:a8:4e:70:22:a8:
                    e0:01:e4:e4:e6:dc:71:dd:d8:8e:0e:04:8b:a5:b2:
                    a4:5c:81:21:29:6c:b3:60:fd:e1:27:ce:57:04:76:
                    63:bd:ba:f3:37:3f:73:02:ca:3b:63:73:90:56:4f:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F7:EB:CC:A2:A4:4A:29:E4:2D:25:F1:67:8B:10:04:2D:8C:FF:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/35ae5d38-189b-36c7-91a9-9c5eb9065299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68:800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ac:6b:64:4e:4b:2c:45:23:21:3f:b6:d2:96:4c:c2:4a:d3:
         ea:38:7d:8b:30:97:a4:10:92:fa:f4:3c:28:83:40:f4:43:36:
         1c:af:df:34:70:24:80:c0:53:1f:99:48:ee:53:be:9d:7d:2a:
         11:5a:49:58:2b:a6:f9:a5:ca:91:66:49:a5:98:95:98:70:59:
         4d:ed:0b:6f:d3:6b:9d:ca:c4:39:bf:31:b1:89:ba:1f:42:ce:
         42:11:e2:95:f4:ad:93:68:b9:0a:ed:da:02:a4:4f:b4:a8:d3:
         bd:72:16:d5:4a:91:ee:60:23:af:58:9e:f2:16:28:4f:d7:3b:
         52:96:2e:1b:71:9d:a7:0d:ac:4b:2b:2d:4c:89:fb:95:6e:f4:
         25:bb:a7:14:7b:94:f4:63:03:a4:a2:ef:3f:1c:1b:ba:1e:f1:
         3b:cc:94:dd:0b:c7:6d:b1:f6:f6:0d:e6:d2:e6:51:6b:86:07:
         89:92:50:50:e3:4c:d0:96:d7:f1:24:ec:31:a8:42:43:28:09:
         87:2a:ce:0b:fd:b3:f8:fc:84:2e:94:1a:23:85:95:e2:18:0b:
         3b:c7:23:69:b2:6b:e2:6d:58:00:3e:33:7b:1d:eb:f2:28:7d:
         93:cc:52:89:69:86:fb:42:d0:48:e0:f0:07:a6:e2:64:9a:4e:
         04:25:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:59:50 2025 by rpki-client