Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/e2b765f3-a13d-355e-9bca-81bb1d95fba3.roa
File:                     e2b765f3-a13d-355e-9bca-81bb1d95fba3.roa (raw, json)
Hash identifier:          d+ml1IdvxoB6DJf7Xl/zP7LYOutmEPzpoSdr5mDp7kk=
Subject key identifier:   8B:AF:06:7B:0C:CC:15:24:72:17:6A:CE:68:7A:10:15:9E:21:F0:2F
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F43285849F9DFBD94BBB2DE89958C6400
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/e2b765f3-a13d-355e-9bca-81bb1d95fba3.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     0
IP address blocks:        2602:fd10:600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:bd:94:bb:b2:de:89:95:8c:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=2f00870a-3ae4-4a8d-b212-1e649c81c720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:0d:91:85:bf:26:d8:9c:11:0c:fb:eb:45:
                    bf:3e:b3:1a:dc:4f:ab:1c:32:9b:d7:ab:4f:1e:4f:
                    fa:6f:e8:b8:ab:97:d6:d0:05:73:7d:a2:9c:c2:9d:
                    97:68:9e:c4:c0:56:15:5c:f1:9d:25:f4:d2:d1:30:
                    2f:34:6c:62:8c:43:09:9b:59:6c:b7:8e:6c:f3:a9:
                    55:e7:ac:b7:2f:23:0b:be:c0:4b:65:5f:e8:62:b2:
                    d7:86:7b:57:ef:7f:62:14:f0:54:40:01:cf:e2:dd:
                    ae:24:84:24:a3:32:24:a7:55:bf:4f:13:e3:6e:93:
                    c5:ad:dd:f4:d2:fd:1d:ea:f2:67:7b:cb:6a:04:b0:
                    04:5d:ed:63:64:8d:ab:c0:ee:a6:fc:3e:d2:39:4a:
                    b7:64:ec:68:d8:6e:fc:47:46:3a:3d:04:9b:e3:b9:
                    d8:d2:83:c0:29:0a:65:39:bb:20:a5:06:40:30:9e:
                    8e:1b:23:80:22:c4:10:84:06:15:0c:bb:4b:04:42:
                    b1:21:5e:04:f0:8d:65:91:62:e2:72:c1:0b:88:ad:
                    90:aa:95:b5:c8:e5:fd:7f:fb:ee:dd:88:dc:01:c2:
                    4c:34:34:c8:d3:e1:3f:96:c8:40:31:07:fb:81:da:
                    72:78:df:bf:de:19:35:62:84:16:f6:79:e9:17:43:
                    64:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AF:06:7B:0C:CC:15:24:72:17:6A:CE:68:7A:10:15:9E:21:F0:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/e2b765f3-a13d-355e-9bca-81bb1d95fba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:7b:5f:48:6c:a8:cf:17:dc:03:5e:4c:a3:d8:6d:4c:ef:0a:
         2d:92:32:2e:f2:35:28:ab:63:5c:22:ce:b2:50:83:55:49:2d:
         22:c9:fd:e3:d5:41:9d:1e:3a:9f:2d:e5:b5:c5:88:4d:ce:dc:
         44:7d:62:ed:e2:d8:30:5b:27:39:87:f2:be:a7:dd:91:78:71:
         18:6d:04:97:4d:c8:07:63:e3:be:07:5f:86:a0:35:73:d8:b5:
         a6:93:7c:01:c4:99:b8:51:8c:19:da:87:db:83:55:58:bf:f4:
         8c:23:bd:8a:49:59:10:0e:1b:5f:d5:27:5c:c0:b1:65:96:53:
         53:39:74:b6:b6:df:3c:51:79:8a:13:d0:08:9c:79:fa:ee:a4:
         4a:93:8e:44:37:88:43:24:de:b2:4d:f1:ec:e3:73:33:65:b5:
         33:20:77:1d:ef:74:5a:62:ca:62:7e:d5:e0:f8:96:ca:03:12:
         7d:7c:14:57:0c:62:6a:fa:b2:04:ca:39:88:cd:44:73:e6:2d:
         c4:2b:16:63:6d:56:61:58:5a:25:92:c1:3f:63:9e:3a:1e:a0:
         1d:94:f6:a8:be:40:35:3a:94:d7:12:5b:54:cb:f1:31:e6:8e:
         2f:ce:05:22:28:68:03:a4:69:df:24:d9:cd:ed:e0:8a:3f:b1:
         a7:f4:be:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:26:42 2025 by rpki-client