Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa
File:                     83c6daf3-1df5-34c8-bcfe-d09465201564.roa (raw, json)
Hash identifier:          cFGbD3xP3u/RyPJwI5f1QsaHG5XolU19bJ1FcES3SwY=
Subject key identifier:   A7:0D:C2:1A:9F:56:F1:F4:58:DA:57:31:D7:AB:93:C0:BA:B0:89:DC
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F43285848FBF12AA228DFB38F0E63D700
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa
Signing time:             Mon 24 Feb 2025 02:00:38 +0000
ROA not before:           Mon 24 Feb 2025 02:00:38 +0000
ROA not after:            Sun 25 May 2025 01:00:38 +0000
asID:                     0
IP address blocks:        2602:f777::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fb:f1:2a:a2:28:df:b3:8f:0e:63:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Feb 24 02:00:38 2025 GMT
            Not After : May 25 01:00:38 2025 GMT
        Subject: CN=b9f6e6f5-ca10-4e28-8bab-ff586c120e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d1:f5:1d:eb:14:3e:2f:a7:d4:d9:a0:94:31:
                    12:ee:a0:71:49:6b:1a:60:1f:e7:c2:4f:b8:80:93:
                    c6:01:e1:46:c5:f3:30:5e:fe:36:8d:09:69:97:06:
                    74:ba:cf:8a:e9:e6:8c:3a:17:60:3e:dd:80:a6:08:
                    82:e3:0a:8d:3b:82:32:17:46:cb:73:49:33:72:fc:
                    8e:e9:73:ee:24:8e:0f:eb:e6:00:01:c3:d5:ca:8c:
                    08:ab:fe:d9:b2:ed:b5:1b:29:48:23:8f:bb:47:d7:
                    73:53:a6:ba:55:bc:03:74:e4:ea:cf:71:ae:c9:86:
                    b0:f5:73:11:15:8d:06:13:88:29:07:5c:63:95:c8:
                    40:b6:c6:38:4f:d0:bc:2c:14:30:01:f7:ae:3c:3b:
                    a3:31:91:56:f2:8f:f0:2a:48:b1:05:9d:dd:e8:bd:
                    6b:9c:06:6f:dc:1b:76:27:b2:ea:2c:8f:65:21:a4:
                    24:3b:ba:1e:32:d4:6d:cc:ec:a5:b1:4e:05:16:ff:
                    15:33:f3:dd:d3:33:9b:e8:14:42:a3:85:89:5a:93:
                    5a:45:1c:68:a7:fc:a0:84:e8:3b:35:68:a7:96:22:
                    bb:96:c1:e1:37:b0:13:ed:85:61:21:20:35:4e:17:
                    14:9e:77:5a:82:04:a3:c9:43:b3:20:8b:4c:20:56:
                    13:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0D:C2:1A:9F:56:F1:F4:58:DA:57:31:D7:AB:93:C0:BA:B0:89:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f777::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:fb:2d:9e:e7:b1:9b:79:f0:05:2a:96:1c:c5:83:89:ac:f3:
         de:a4:8e:b5:c2:db:ab:e0:05:e7:7d:42:12:a5:fa:76:10:69:
         ea:e0:52:ef:41:ed:dd:c5:4c:15:54:cf:40:38:f3:51:2b:ca:
         ec:bc:b7:8a:38:7e:bb:8c:e3:d1:f4:1a:34:b4:12:7f:dc:da:
         a5:cb:8f:a6:d1:c9:e9:f1:42:75:c2:18:c5:79:ba:9e:e2:2f:
         69:88:8b:0f:e1:91:3e:63:5a:48:ad:55:78:f9:29:1b:59:8d:
         35:71:7f:df:b3:45:24:9a:d5:a3:05:ef:07:88:a4:27:72:21:
         1d:a3:66:7c:6a:46:20:99:a7:59:8d:d9:fe:78:fd:87:cc:82:
         95:c7:5c:e4:b4:2a:e3:28:94:7e:77:10:16:b3:4a:0b:6d:66:
         7e:3d:12:e0:92:84:fe:45:f1:2a:fa:7f:7f:a4:ce:d0:4c:43:
         c3:73:ae:1c:c5:b9:e9:ec:fd:1f:2f:fe:94:b4:ef:38:49:69:
         e3:48:56:9f:e3:a1:19:89:e3:27:c8:66:10:47:14:70:83:8f:
         f2:26:05:92:e1:bf:c8:9c:8a:84:00:18:09:97:8d:e1:ee:f8:
         aa:97:30:1e:e8:a9:21:a5:f1:32:33:66:23:6a:50:a6:7b:12:
         f8:f7:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:53:18 2025 by rpki-client