Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa
File:                     6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa (raw, json)
Hash identifier:          +xyX/m3U8nxWs0o/xdn50w3L4vR4qrcDfCZ2sFcsJEY=
Subject key identifier:   78:93:06:17:15:F2:A7:3B:69:5D:1A:8A:76:0B:7A:FF:DA:7D:F9:DE
Certificate issuer:       /CN=b9b55179-aeab-48dc-ba09-e41903a9550e
Certificate serial:       010D0C9F432858491246C838B38E325BA1476830
Authority key identifier: 44:A4:6F:7A:73:56:C0:C5:2F:51:F5:CC:87:A9:34:6C:A6:5A:C9:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     400810
IP address blocks:        2602:fa62::/40 maxlen: 40
                          2602:fa62:100::/40 maxlen: 40
                          2602:fa62:200::/40 maxlen: 40
                          2602:fa62:300::/40 maxlen: 40
                          2602:fa62:400::/40 maxlen: 40
                          2602:fa62:500::/40 maxlen: 40
                          2602:fa62:600::/40 maxlen: 40
                          2602:fa62:700::/40 maxlen: 40
                          2602:fa62:800::/40 maxlen: 40
                          2602:fa62:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/b9b55179-aeab-48dc-ba09-e41903a9550e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/b9b55179-aeab-48dc-ba09-e41903a9550e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:c8:38:b3:8e:32:5b:a1:47:68:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b55179-aeab-48dc-ba09-e41903a9550e
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=5d4ae260-2ca9-44d5-9061-688ee678984d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c4:75:02:7b:39:00:a7:48:55:c6:35:23:bc:
                    35:df:67:64:7d:50:e9:51:8b:ea:2e:68:0c:de:83:
                    b1:7b:60:a7:fd:a6:79:7d:76:85:ad:8e:84:2a:eb:
                    8d:3e:24:d3:24:43:86:47:d3:2b:0e:9f:7f:0c:ee:
                    ff:0d:b2:4d:c1:dc:ec:d1:be:52:f2:7a:91:39:f1:
                    f4:ee:ed:c8:fa:8b:7d:55:94:90:3b:38:63:68:16:
                    8b:dd:e6:46:51:94:0c:44:b7:26:bd:04:b2:87:28:
                    43:88:c3:da:d3:41:ae:3c:43:5a:c9:56:ce:17:3d:
                    97:7e:40:e1:42:16:bd:bf:93:04:95:2c:f0:d0:74:
                    c4:0e:0a:e7:2c:61:ea:8a:3d:5b:24:f4:7d:81:22:
                    78:3d:3d:1b:81:f0:5b:6e:93:ae:e6:46:4e:af:a6:
                    ce:d4:a7:45:c3:4c:da:49:81:c2:9e:f2:86:37:5d:
                    65:a8:d6:40:a8:69:9b:65:0d:bb:4d:96:4a:7e:cd:
                    00:52:c0:c1:3a:8c:de:01:3c:84:5b:03:92:de:f4:
                    8d:5a:24:fa:66:3f:ac:14:6f:cf:5a:3e:92:35:c4:
                    33:0d:e7:f6:09:87:8d:58:cf:e3:1d:4a:98:3f:e2:
                    91:49:08:c9:d4:23:d8:4f:81:dc:5f:89:51:2f:26:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:06:17:15:F2:A7:3B:69:5D:1A:8A:76:0B:7A:FF:DA:7D:F9:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/6c6a56ba-7e29-352a-9b8a-d2bdf0cf77a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e/b9b55179-aeab-48dc-ba09-e41903a9550e.crl

            X509v3 Authority Key Identifier:
                keyid:44:A4:6F:7A:73:56:C0:C5:2F:51:F5:CC:87:A9:34:6C:A6:5A:C9:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b9b55179-aeab-48dc-ba09-e41903a9550e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa62::-2602:fa62:9ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:ec:4d:8e:37:bb:ad:2a:33:20:c1:fa:ad:80:dc:e8:1d:a5:
         ae:b1:9e:af:4c:f0:34:27:74:94:5e:3a:b1:05:26:42:6b:ab:
         6a:be:f9:36:17:a9:38:5a:d3:09:b7:33:55:c7:fe:30:ed:dd:
         3a:ae:06:dd:7e:80:a1:35:d5:5c:82:1b:21:f1:e0:7c:6c:ef:
         fc:87:c2:ff:5a:b1:e5:15:bf:fa:8b:5d:0a:81:50:86:68:b0:
         d8:2b:d5:17:b1:66:0a:83:d1:cd:fb:70:d1:b3:87:bb:ba:d4:
         0b:9b:c6:a6:00:b7:6b:7f:c2:05:fb:74:47:01:77:a3:2e:c2:
         76:1e:79:64:b6:ea:67:a3:03:d8:71:b6:34:d4:1e:3c:fc:95:
         50:fc:28:04:77:ae:7a:6a:91:c7:90:53:8f:9e:75:68:c0:46:
         da:ff:20:29:a8:b0:45:ad:f7:13:49:37:fb:49:00:53:85:5b:
         d5:1b:db:53:82:72:75:4a:aa:d4:e1:af:e8:40:bd:78:7d:f6:
         e0:8d:0f:23:4f:8c:6a:04:41:40:0e:10:0f:79:e4:cb:3e:3a:
         78:5f:0d:51:c9:7d:f5:28:b3:96:21:f0:ec:bc:31:7f:23:b7:
         39:9a:64:10:c0:11:cf:e6:41:4d:9a:30:61:18:3d:51:45:73:
         40:29:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:09:51 2025 by rpki-client