Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/acc2a3d0-8ddc-3241-af18-bc6c5f256f7a.roa
File:                     acc2a3d0-8ddc-3241-af18-bc6c5f256f7a.roa (raw, json)
Hash identifier:          DiX6gUQVs1Z2vO5jIhhgmhcmqmAS+h46l76JuePMHP8=
Subject key identifier:   79:8A:07:D0:5B:1F:34:34:EF:E4:3A:BB:22:E4:87:37:39:6D:34:B5
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F43285849F9DFBE17EB40C6638A018500
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/acc2a3d0-8ddc-3241-af18-bc6c5f256f7a.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     0
IP address blocks:        2602:fd10:f00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:be:17:eb:40:c6:63:8a:01:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=bba95658-ff6b-4d96-979b-11e0df7f8194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:db:a8:27:3c:74:81:ac:5d:05:49:02:38:
                    d0:d9:20:e5:f9:e2:c4:f9:d4:aa:ef:7f:2c:40:3b:
                    81:75:71:c5:55:af:d8:d2:36:16:e4:e8:a0:42:56:
                    46:6d:33:a0:fb:6c:f6:98:e0:d6:07:e6:67:0b:52:
                    8a:ac:7a:22:04:a8:56:32:96:2f:98:c3:cb:f3:30:
                    c9:39:46:07:2c:27:7a:cf:c0:71:68:90:99:12:ee:
                    c9:34:53:4b:db:9a:e4:ec:b6:d3:74:6f:3f:f2:bb:
                    47:17:00:3d:f9:00:ef:85:9d:4d:42:10:ec:e7:30:
                    07:7d:56:2b:0f:43:6d:a6:e7:e1:9e:06:03:64:cd:
                    0a:5a:79:5d:d4:06:31:45:4c:1b:8b:3b:43:5c:bc:
                    f0:09:39:f6:7d:ff:84:ee:17:9c:0b:f5:e5:24:9c:
                    23:6f:88:6f:5e:07:80:bf:6d:98:ba:8f:79:8f:20:
                    9b:e0:d5:ea:50:5f:09:4b:9f:07:5e:5e:28:7d:42:
                    a7:6f:08:b6:6b:4d:8b:35:6a:62:ca:38:59:d8:e9:
                    2c:9d:6a:8b:e2:ad:02:36:c5:8c:fd:76:6f:8b:5a:
                    9b:10:20:6b:24:9a:58:d0:45:67:9e:39:a3:f4:31:
                    08:ee:a5:c5:d5:cb:24:08:26:fe:15:c3:b0:21:5c:
                    22:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8A:07:D0:5B:1F:34:34:EF:E4:3A:BB:22:E4:87:37:39:6D:34:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/acc2a3d0-8ddc-3241-af18-bc6c5f256f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:0a:07:39:c9:8b:48:c1:0c:46:f9:aa:a3:f0:20:98:fe:34:
         f1:55:e4:f0:cf:48:7e:e3:de:0f:1d:1c:fe:54:5b:fc:7d:d2:
         d4:bd:c7:46:27:f4:ac:db:4c:4d:26:25:93:4d:81:53:95:db:
         a8:cc:93:e2:53:86:62:2c:2b:83:bf:7c:1d:86:22:df:a7:a9:
         f7:35:33:51:49:f0:8b:9f:56:7a:ba:fc:74:11:01:15:4c:fa:
         bf:e9:6d:d1:f7:04:17:1e:10:2b:fe:13:9d:38:76:a6:bd:8b:
         97:d1:74:22:a0:5d:b8:1e:f4:13:d5:c4:c5:66:0c:c4:3d:e2:
         55:ad:fa:84:b8:20:62:70:50:86:be:75:e5:e4:38:88:86:ec:
         5e:75:29:07:f0:8a:e6:54:c1:f1:ae:f0:6f:8b:e0:65:45:01:
         4a:30:46:99:77:8e:e1:59:b5:27:d3:14:11:77:2e:f1:3c:65:
         ad:d4:9c:ef:43:af:76:02:af:b8:95:7e:88:5d:31:83:1e:11:
         6f:09:de:6a:ae:c6:21:95:1d:02:26:46:11:07:57:9e:df:52:
         59:b7:3f:b7:6b:a2:3d:8d:fd:fc:a4:86:8b:91:fd:d5:4f:cc:
         86:18:3e:3a:0c:26:da:3f:22:74:91:19:a2:58:58:48:81:a4:
         66:16:b5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:21:09 2025 by rpki-client