Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/e8ade94f-71c7-3847-9891-9cce69f41ac8.roa
File:                     e8ade94f-71c7-3847-9891-9cce69f41ac8.roa (raw, json)
Hash identifier:          uPeRFoIQF+RThezPDTSByh7CajrH5v4RcNcwdMlcUcM=
Subject key identifier:   6D:7C:37:3A:5C:4E:FD:E1:01:25:42:20:EB:0A:28:96:63:06:68:F4
Certificate issuer:       /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
Certificate serial:       010D0C9F4328584944693982162CB0DC60D11FE0
Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/e8ade94f-71c7-3847-9891-9cce69f41ac8.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     398419
IP address blocks:        2602:fb82::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:39:82:16:2c:b0:dc:60:d1:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=a5a27624-d463-41a1-8c34-a95909a0e64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:6c:75:4a:ae:47:9d:fc:2c:5a:3c:01:2e:
                    88:36:a6:b7:98:3c:36:ec:0e:4c:7b:86:77:9e:12:
                    e4:2b:d1:f7:76:86:b9:28:71:91:49:e8:1a:78:af:
                    fc:ce:15:3b:e8:26:be:00:cb:ff:fa:aa:91:bb:b7:
                    ac:a6:01:c3:10:2c:83:26:bf:c3:0c:4d:2d:1f:24:
                    a4:0a:05:47:53:a9:72:65:7e:87:75:64:b0:56:57:
                    21:7f:39:e4:75:a4:08:02:56:92:f8:0d:48:e1:d2:
                    88:4a:f3:c6:e3:ff:96:1e:bb:36:5f:16:c8:c5:59:
                    73:a4:5c:7b:ac:43:0d:d2:d9:bc:52:35:23:f8:23:
                    09:15:24:72:60:ca:fd:ee:6c:f8:8a:e3:3f:7f:9c:
                    34:38:54:7a:43:d2:13:6d:15:34:71:cb:74:53:0e:
                    a5:c8:b2:19:53:39:7a:ca:2d:76:2a:67:61:ed:0b:
                    6e:10:e0:83:5d:6c:9a:e8:ab:b7:dc:d9:56:38:e0:
                    aa:e5:9e:47:69:45:8a:e9:76:f9:4f:27:70:36:ee:
                    7a:81:5c:d7:d9:10:32:f7:fc:3c:b3:76:30:9d:d8:
                    b8:9b:3a:f7:34:e5:da:ae:c0:46:fe:53:05:ec:1d:
                    6c:d3:b5:07:7a:8c:1f:54:a5:f1:71:d2:6f:69:fa:
                    dd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7C:37:3A:5C:4E:FD:E1:01:25:42:20:EB:0A:28:96:63:06:68:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/e8ade94f-71c7-3847-9891-9cce69f41ac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl

            X509v3 Authority Key Identifier:
                keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb82::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:d4:ba:7f:55:80:82:bb:af:30:be:c9:df:cc:2c:72:64:ad:
         23:82:82:c8:d1:66:14:36:4d:55:9e:c9:20:a8:9e:1b:a8:6d:
         a8:dd:52:21:93:86:c1:89:b6:18:32:eb:a4:dc:a7:9d:dd:ae:
         ca:77:f6:75:6b:44:a6:81:f4:c8:93:ba:39:7d:c4:c7:8a:b0:
         2b:10:5c:a2:e4:e2:f5:1a:63:44:c7:ee:a3:5c:69:57:cb:50:
         19:b1:fd:0b:2a:29:6d:cf:b5:c3:3a:67:b8:91:2a:c5:00:43:
         34:c4:28:af:13:91:cc:eb:40:b0:dc:e6:f8:e5:f7:b8:9f:e6:
         4c:30:9b:83:3a:a3:17:e7:bf:f2:9d:3d:4e:98:77:62:e5:c8:
         3f:10:45:77:c3:25:b1:90:5f:bd:c6:49:37:3a:c1:d4:c0:0d:
         77:67:03:05:a9:c0:46:59:8a:44:be:1d:35:5f:28:c4:aa:d8:
         a6:72:7c:c2:79:4c:18:16:29:69:74:59:48:99:9b:4f:62:a0:
         37:b5:d1:a7:e9:f7:78:07:32:ed:11:d9:04:b4:41:ba:ea:a0:
         f8:11:8f:97:a1:78:98:d6:c1:f1:b2:96:6f:b1:73:0c:53:3d:
         47:24:e7:fe:ea:48:c0:dd:cb:ce:ee:eb:00:20:49:d0:f2:bf:
         e2:98:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:39 2025 by rpki-client