Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/6cd0bba9-129b-39b1-b942-efb9d16b311f.roa
File:                     6cd0bba9-129b-39b1-b942-efb9d16b311f.roa (raw, json)
Hash identifier:          2DL2ZAK3lM8S3JCEIeX5J/z65CZD/XzDs9icDKSpvHQ=
Subject key identifier:   0B:FE:84:31:15:43:33:0A:D7:46:F7:0F:4F:BA:48:B6:B6:63:C3:1D
Certificate issuer:       /CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3
Certificate serial:       010D0C9F432858493ED3CF7A56266CCDF31075D0
Authority key identifier: 4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/6cd0bba9-129b-39b1-b942-efb9d16b311f.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     400490
IP address blocks:        2602:fbc2::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:cf:7a:56:26:6c:cd:f3:10:75:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0de37d17-2664-4c85-9be4-a35baf0fd2b3
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=133f6d33-589c-4d63-9a03-6312520306fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:5b:33:83:10:6b:77:4b:82:ba:72:0d:8e:
                    20:28:47:91:28:97:6f:7e:68:28:58:10:07:ec:b1:
                    18:56:4f:5f:74:54:9b:45:6e:cf:c8:86:8d:03:34:
                    69:d3:a9:f1:91:28:65:5a:c9:3f:07:72:cc:ff:6b:
                    36:96:6b:7b:1f:5d:1f:64:2f:7f:1f:f6:99:49:1f:
                    20:d6:90:95:0a:6f:ef:04:4f:9e:ed:0b:24:a1:31:
                    ae:02:57:57:b8:d7:99:31:a3:0f:e9:84:e9:cc:ba:
                    3d:81:79:c7:a1:f5:d7:a8:21:ef:18:e2:b4:7a:f6:
                    9f:81:53:d9:1c:f4:be:f8:1b:67:1b:c6:a7:46:3a:
                    2e:c9:c5:f1:01:ea:3c:13:4c:c6:26:06:14:1a:1b:
                    f9:47:42:0c:f0:16:39:0b:8c:08:5b:06:45:69:3d:
                    70:21:30:88:e1:0d:56:24:13:16:ff:fa:21:97:eb:
                    6e:95:3e:61:af:58:20:5e:52:ab:76:f9:0f:dd:67:
                    73:d3:c9:ea:65:78:96:c4:ed:73:e4:3f:4f:85:03:
                    b5:c1:d7:f4:af:02:88:7a:aa:33:f2:9e:e9:96:0c:
                    ac:ee:c3:95:75:1f:e5:b3:c4:52:c4:96:0a:6a:d5:
                    06:b5:33:e2:42:46:5e:c3:e5:53:6c:42:ce:ef:94:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FE:84:31:15:43:33:0A:D7:46:F7:0F:4F:BA:48:B6:B6:63:C3:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/6cd0bba9-129b-39b1-b942-efb9d16b311f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3/0de37d17-2664-4c85-9be4-a35baf0fd2b3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:73:9C:88:EF:4B:17:58:90:09:43:09:76:8C:0E:3B:F8:65:EB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0de37d17-2664-4c85-9be4-a35baf0fd2b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbc2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ac:af:62:95:59:20:83:2d:89:d2:6c:1a:1a:24:64:b4:23:
         55:e8:ea:fb:2c:de:7d:80:2a:7d:86:a7:b9:61:e5:5e:53:bd:
         b3:6a:f1:bf:aa:61:6e:57:ba:a6:ef:61:0d:58:82:c2:05:09:
         63:46:51:c3:48:10:6e:28:37:b9:5f:f6:3d:c6:ba:81:89:5c:
         5b:5b:43:58:f3:66:c4:71:2f:bb:a7:a1:e0:b5:dd:a7:6a:f5:
         74:29:5e:b6:9b:c5:59:13:bd:56:05:a5:2c:9f:78:32:9f:a0:
         17:35:c6:d4:c9:d0:3c:42:9b:1d:0d:ad:7f:05:98:e3:8e:6d:
         07:d3:47:3d:80:99:6d:02:23:4f:47:61:e8:d7:9e:b0:6a:24:
         55:1c:fc:5e:4a:24:c6:d8:bf:63:b1:98:d6:4a:6a:87:58:8c:
         3a:cd:7d:74:98:b7:2c:2c:6c:75:f9:88:c3:ed:a1:ed:08:f6:
         ac:b0:d6:4e:1c:14:ca:84:cf:2d:bc:89:ff:8a:26:7e:7b:7c:
         90:ac:16:67:11:34:b9:96:6d:92:ec:b1:fa:f8:98:ad:7b:9d:
         a8:e4:9e:3c:36:3a:fd:35:4d:64:38:96:eb:b2:22:9b:d4:6c:
         b5:66:7e:b5:44:8b:f1:1c:10:3d:b8:d1:be:ea:ac:41:e3:17:
         5a:70:51:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:20:34 2025 by rpki-client