Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/091dfecc-582a-3f4d-b0bb-533bd7df811a.roa
File:                     091dfecc-582a-3f4d-b0bb-533bd7df811a.roa (raw, json)
Hash identifier:          djVMYJtb0YHAb5gn3CquDdDo5Yk0rDPkUtshkY8QzVc=
Subject key identifier:   4B:86:0A:69:6D:2B:59:C7:82:48:38:B9:05:60:79:75:E1:C7:82:D5
Certificate issuer:       /CN=15106386-88d8-4103-adeb-a6e7c684ed09
Certificate serial:       010D0C9F4328584904D814ABDF8984CADE525080
Authority key identifier: 97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/091dfecc-582a-3f4d-b0bb-533bd7df811a.roa
Signing time:             Thu 27 Feb 2025 06:32:26 +0000
ROA not before:           Thu 27 Feb 2025 06:32:26 +0000
ROA not after:            Wed 28 May 2025 05:32:26 +0000
asID:                     29802
IP address blocks:        2602:fa81::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:04:d8:14:ab:df:89:84:ca:de:52:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15106386-88d8-4103-adeb-a6e7c684ed09
        Validity
            Not Before: Feb 27 06:32:26 2025 GMT
            Not After : May 28 05:32:26 2025 GMT
        Subject: CN=f54c0ea0-9360-4cbe-9cd2-b49bc76431fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8f:6e:f8:65:3c:9c:9a:6d:b7:9d:1d:de:20:
                    cf:5e:cd:d8:b3:4e:fd:8d:2d:4b:ac:f0:0d:02:54:
                    7a:8b:03:c5:95:e4:dd:21:45:62:a9:1b:9f:6f:f2:
                    d4:18:98:a8:37:35:0c:49:01:c4:b4:b4:84:e4:60:
                    0c:92:87:e3:d6:d5:7c:e2:0a:b3:28:0f:10:ff:9c:
                    e2:d9:f1:26:d2:19:e0:c9:b0:ec:94:94:25:97:a4:
                    69:e7:85:9a:bf:d1:74:88:24:67:b5:25:b1:37:14:
                    76:d3:2b:3d:d0:c4:fe:93:7e:5f:d2:dc:8a:a5:27:
                    1a:66:46:fd:d1:ce:77:b2:11:ee:46:f6:51:8d:86:
                    2e:a7:72:d4:d6:18:a6:f1:ea:7a:59:21:26:17:92:
                    6a:d8:74:08:d9:55:71:bc:de:e0:69:c1:12:19:33:
                    5b:24:d3:e7:d7:3a:87:a5:ad:e9:aa:e3:0f:cb:ec:
                    45:12:9c:26:a2:93:5a:09:fe:83:b8:8e:8c:08:91:
                    89:f3:7c:bc:37:c4:55:41:da:8a:a1:83:f0:f2:0a:
                    c8:b6:ff:bd:96:af:06:0c:0c:93:05:92:5c:b1:d3:
                    8a:ed:73:d4:7f:17:6e:e8:9f:d3:e1:1c:a4:7b:83:
                    10:90:f9:67:72:27:67:96:ec:92:27:15:1f:23:f1:
                    5f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:86:0A:69:6D:2B:59:C7:82:48:38:B9:05:60:79:75:E1:C7:82:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/091dfecc-582a-3f4d-b0bb-533bd7df811a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl

            X509v3 Authority Key Identifier:
                keyid:97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa81::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:05:04:dd:da:9d:f8:37:58:a5:38:03:00:b6:52:04:61:ef:
         33:38:6a:4d:78:a8:f2:84:79:ee:a7:49:b2:91:7b:e9:0b:2e:
         39:22:59:25:33:f9:b1:66:be:2e:7f:22:01:95:f9:4f:a5:c5:
         d9:6b:29:c0:c9:24:cd:ad:bc:b9:20:60:79:a4:a3:c6:10:93:
         40:b5:68:fe:0a:c0:9d:aa:6e:83:c1:f5:6a:b1:e1:96:2b:3d:
         f5:99:29:50:32:da:aa:5b:0c:a6:34:a8:34:a4:b9:d5:4f:5b:
         89:5e:b4:1f:ba:77:bd:9a:8f:2b:cd:f0:a4:fa:67:a1:f3:58:
         a0:5e:07:85:68:77:0b:b4:0b:3b:b7:85:85:ed:0a:01:57:75:
         95:dd:54:6d:92:24:90:cb:71:5d:4d:eb:b8:b9:ba:24:b9:42:
         f1:46:47:0b:bb:9a:ce:63:e8:bf:73:90:8a:db:ed:dc:76:3c:
         1c:ec:3a:d9:d8:eb:50:9c:73:6e:cf:70:0b:11:59:c1:6f:00:
         ac:c6:f8:d9:45:f0:f1:9f:96:55:75:58:90:5b:a4:fd:c6:4a:
         8c:88:6b:c2:ad:cd:0a:2d:72:72:05:9b:1d:88:8b:ca:5f:c9:
         58:09:8d:cc:d4:44:15:f0:5c:83:2c:25:fa:41:35:26:bf:8c:
         50:cb:40:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:39 2025 by rpki-client