Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/6ed61fca-ee25-3235-a6c3-67eac468976a.roa
File:                     6ed61fca-ee25-3235-a6c3-67eac468976a.roa (raw, json)
Hash identifier:          2phLMKhwp0zqcDv1ETpgGuAiAMyFD0Wctevpb6zUbuc=
Subject key identifier:   C6:DA:D9:F8:AD:1C:76:7E:53:96:97:B8:DB:4D:EE:E7:08:9A:9F:EB
Certificate issuer:       /CN=3d1c406c-fcae-4d83-9c1a-5c930e814683
Certificate serial:       010D0C9F43285848A9961904ABE9C48856826200
Authority key identifier: 9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/6ed61fca-ee25-3235-a6c3-67eac468976a.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     401473
IP address blocks:        2602:f7ae::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:19:04:ab:e9:c4:88:56:82:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d1c406c-fcae-4d83-9c1a-5c930e814683
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=288923af-a425-4325-9a88-31f82e1011f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:f1:a7:b5:43:fc:bf:b4:ca:a9:4c:18:00:
                    d6:bd:4b:1c:00:2d:5d:d9:76:de:52:5b:58:bd:9b:
                    b7:ac:76:89:b1:23:d3:55:60:7f:a9:07:36:ce:29:
                    9b:04:04:2c:54:bb:3d:70:da:bd:20:e1:e1:c8:74:
                    57:b2:b3:85:5c:81:6d:69:15:a6:a7:83:ef:57:9e:
                    5e:62:13:61:f3:ed:2c:e2:c5:6d:61:b2:f1:e8:b9:
                    ce:f4:77:69:07:36:4e:59:e9:63:18:be:d6:8c:92:
                    c8:ff:f3:68:aa:58:d5:ce:48:01:70:64:5f:e7:bd:
                    75:24:02:8c:3b:d4:25:1a:12:fd:df:94:e7:42:50:
                    17:38:79:1f:c1:03:4b:0b:63:00:77:d9:76:e0:c1:
                    96:ba:fb:76:74:d5:3c:8b:37:ec:29:9a:64:cd:a6:
                    f8:d4:b5:f3:37:62:7e:c4:88:d7:02:60:e2:75:70:
                    e1:1c:3d:a3:03:c4:1e:46:b0:35:7b:15:d8:59:0f:
                    8f:29:4b:7a:4c:4f:16:df:13:59:42:02:9b:46:32:
                    5a:71:f1:3a:60:b8:5e:c8:f0:d3:cd:73:bd:f2:1d:
                    4b:1d:3e:ce:1d:6b:f7:cb:47:ce:38:fd:a5:78:8a:
                    12:b3:38:58:af:88:c7:99:4a:36:dc:60:96:85:aa:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:D9:F8:AD:1C:76:7E:53:96:97:B8:DB:4D:EE:E7:08:9A:9F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/6ed61fca-ee25-3235-a6c3-67eac468976a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl

            X509v3 Authority Key Identifier:
                keyid:9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ae::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e5:39:b4:18:f5:06:f5:37:27:89:7b:ed:8b:88:e2:74:52:
         b4:6c:82:06:90:b6:3e:4b:a5:d8:79:0d:aa:f9:2c:42:01:3e:
         04:fc:93:a7:ce:66:18:1a:3e:d2:bc:ce:91:b2:f9:ee:f5:8a:
         a7:9d:bf:e2:2b:fd:83:4c:86:09:cf:0a:65:c1:ac:c6:a0:ea:
         fd:16:5a:47:c0:95:5b:b3:71:03:7a:9a:bd:07:4c:e0:ce:f4:
         47:f9:a2:6c:4b:17:40:42:de:3e:e8:2c:45:51:e8:df:2b:92:
         37:87:30:77:5a:6e:63:20:cf:69:29:3c:02:9b:93:db:fd:21:
         75:a6:0d:95:76:ca:03:a7:92:75:e0:c0:12:f4:72:e9:9e:61:
         7f:77:c7:98:8a:55:54:69:de:65:0f:d4:33:33:e8:74:fb:8d:
         e5:66:d6:3d:d8:91:3a:f2:23:da:11:67:a4:05:1f:14:ba:61:
         65:08:83:72:4e:f2:ad:f0:0e:07:18:1f:ee:57:90:c2:34:72:
         bd:7f:67:37:bd:8e:e1:1b:19:6d:c2:ca:15:b4:0b:c3:69:21:
         5b:59:c3:56:a2:41:49:87:80:dc:cf:00:d4:09:fb:87:63:55:
         99:fe:85:22:a5:26:32:44:8f:49:ee:bb:18:95:b6:0a:89:73:
         4b:81:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:30 2025 by rpki-client