Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/5ecf6e9d-9516-32a2-9864-2408ded5aa46.roa
File:                     5ecf6e9d-9516-32a2-9864-2408ded5aa46.roa (raw, json)
Hash identifier:          hxj0I3luZsSe/OrdHw2z3TTqTOkwiHj5L7utONrP2CQ=
Subject key identifier:   C0:41:2D:98:F1:AC:7E:9B:BB:3B:1C:5F:9E:97:97:C3:D9:7E:C9:3B
Certificate issuer:       /CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
Certificate serial:       010D0C9F432858491246BD82C3758540F8A2F480
Authority key identifier: 63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/5ecf6e9d-9516-32a2-9864-2408ded5aa46.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     40846
IP address blocks:        2602:2e4::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:bd:82:c3:75:85:40:f8:a2:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f601ba70-383e-4f5d-aacb-7e45e33ac6ba
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=c99184e7-6190-4790-8d4f-136fccea4787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:ee:cb:81:fd:80:a6:56:4c:c8:c3:9a:0b:
                    34:6a:3a:8a:f1:0d:ea:b1:95:6f:e9:d8:a5:fd:46:
                    6c:cd:b8:ba:5a:07:18:0a:04:ac:f7:f8:7f:e4:88:
                    a9:59:15:88:e2:20:1a:e0:26:fb:2c:65:56:f4:16:
                    2b:47:80:15:26:8f:48:81:41:ed:31:7c:46:ac:74:
                    71:09:67:99:4e:20:8a:ad:6a:97:06:e2:30:83:dc:
                    5f:5e:69:cf:75:e3:52:0b:bf:a5:44:0f:6a:13:ff:
                    ef:b1:23:d4:41:12:f0:42:65:b2:ee:a9:c5:43:8c:
                    18:72:df:90:62:c3:31:ea:2b:9d:8c:2e:ba:48:a9:
                    a7:11:a8:c9:4c:15:73:63:78:57:19:35:05:75:58:
                    9f:81:63:b6:e6:1a:de:54:79:d8:00:22:f6:f0:c8:
                    c0:fc:6f:55:17:13:c5:bb:05:3e:d8:b4:c7:25:a0:
                    cb:a4:25:ec:0f:eb:64:c7:a1:0c:e4:85:61:ad:2c:
                    ea:89:c1:66:b3:38:1a:97:b7:22:cb:00:7b:c2:6e:
                    a0:1c:49:9c:e2:03:be:c2:71:61:07:15:c4:e9:7d:
                    ac:da:a7:ca:d9:b8:2b:23:70:be:d2:3b:3a:4e:73:
                    ea:0f:9a:df:fb:ce:30:c7:f6:ed:17:8c:68:b0:e8:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:41:2D:98:F1:AC:7E:9B:BB:3B:1C:5F:9E:97:97:C3:D9:7E:C9:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/5ecf6e9d-9516-32a2-9864-2408ded5aa46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.crl

            X509v3 Authority Key Identifier:
                keyid:63:E4:E1:0B:2B:65:78:FC:96:06:23:A2:03:18:67:8B:54:59:F4:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f601ba70-383e-4f5d-aacb-7e45e33ac6ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:63:36:86:fa:19:19:7f:ea:1a:34:29:9d:0a:a2:e8:a6:18:
         10:43:1d:ff:ff:4e:4d:6d:b4:ad:12:da:f4:94:a8:0a:91:45:
         5e:d4:c1:b5:dd:74:22:46:44:26:e9:d1:18:23:14:44:d7:8d:
         f0:d4:de:f9:c0:71:69:5d:98:1a:6e:29:00:2f:92:61:7b:cc:
         aa:12:2a:ca:da:7c:74:45:d9:28:f9:d2:59:36:c0:76:c5:3e:
         17:44:e6:75:6a:18:8f:8a:3c:1c:e6:27:c8:f8:08:e0:9d:49:
         28:c2:e0:99:2a:86:32:d1:86:c8:22:90:bf:3c:c5:a0:ae:27:
         81:2f:fb:04:fb:0d:11:37:fa:24:fb:45:a1:51:3d:a1:01:11:
         9b:f0:4d:54:6a:fa:fa:27:50:b1:94:d1:41:2f:ff:52:43:71:
         3d:d8:82:be:aa:57:54:b1:90:f9:2a:f9:17:7e:94:53:30:d9:
         8c:1b:0a:65:a7:0c:dd:7e:8d:29:fa:da:2a:3c:f3:eb:4e:91:
         b0:5c:62:4d:f7:9f:2a:a8:93:bd:8a:1e:2c:ab:59:88:33:4a:
         9c:39:e2:3d:74:38:50:97:7a:1d:ef:8c:d7:3a:71:54:3a:3e:
         22:d9:bb:3c:f5:8a:15:a4:5f:87:0a:1b:e2:59:1f:e2:34:3b:
         e3:d1:2c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:48 2025 by rpki-client