Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa
File:                     aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa (raw, json)
Hash identifier:          aD8dt8B39Nxpu3NeDihxfvm31AndVaeSDyDVTsJ6r34=
Subject key identifier:   6B:B3:E8:AA:B7:8F:7D:CD:15:4E:98:3F:1E:EA:87:8E:E9:F5:AF:E0
Certificate issuer:       /CN=4e424533-541a-4c27-93d7-8d76453fe152
Certificate serial:       010D0C9F4328584937D93259089B361B05EF3C80
Authority key identifier: CB:F0:85:73:F9:51:8E:80:A5:B6:D5:EC:C0:F6:5F:D2:39:0F:41:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     401036
IP address blocks:        2602:f90e::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:32:59:08:9b:36:1b:05:ef:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e424533-541a-4c27-93d7-8d76453fe152
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=18042c6f-c73c-4e49-8b56-d85fa78481f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:8f:ab:e2:71:df:f2:de:5f:47:87:d6:ec:
                    bb:76:6a:da:1b:6c:8e:35:ea:7f:37:f6:b2:9b:17:
                    91:99:4b:4f:8f:7d:ea:ae:cf:6b:f8:12:99:31:0f:
                    c2:a4:39:7a:67:a8:39:27:2f:1c:91:f0:cb:53:75:
                    0f:96:47:d1:a6:77:b0:a8:df:66:91:a0:0d:91:bc:
                    27:20:76:71:77:80:e8:c7:9d:e1:54:0f:5d:63:b4:
                    da:6c:1f:bb:3c:87:4a:ea:4e:0d:d8:0a:85:d8:82:
                    9f:16:46:a9:12:ca:f0:26:af:e3:1b:2e:b8:13:47:
                    4f:10:c1:9c:55:27:a8:eb:9b:81:ba:0b:11:b2:a5:
                    d2:55:71:3d:01:2c:f5:75:1a:03:26:fc:9f:22:91:
                    ed:4a:67:51:c5:4b:44:dc:6b:c0:98:c1:72:71:a5:
                    53:b4:aa:e2:7f:de:68:25:c7:8d:90:11:25:4d:d4:
                    0e:39:8c:97:35:2b:99:c0:ae:d8:cc:50:a8:8d:0c:
                    5b:4d:4a:56:93:f0:08:27:4d:7c:a7:42:b3:46:b8:
                    55:94:1e:46:78:2e:18:79:ee:99:ef:cd:89:0d:cc:
                    68:16:6e:64:6a:9b:86:d6:ff:08:2b:b5:30:15:3b:
                    4c:9b:45:c7:1a:1c:76:f7:40:a6:21:f5:22:69:02:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B3:E8:AA:B7:8F:7D:CD:15:4E:98:3F:1E:EA:87:8E:E9:F5:AF:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.crl

            X509v3 Authority Key Identifier:
                keyid:CB:F0:85:73:F9:51:8E:80:A5:B6:D5:EC:C0:F6:5F:D2:39:0F:41:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c9:4c:57:69:42:43:c9:23:c3:c8:5a:79:ab:4e:b1:4f:36:
         52:f6:1a:15:91:0d:77:5b:a0:3d:a5:a3:b3:da:ce:76:14:ac:
         a4:4b:e7:fa:ca:5a:57:36:32:c9:b2:21:f6:1f:a0:d9:53:2e:
         00:8d:c4:a7:8c:3c:d7:95:22:31:7e:fb:78:bd:5d:c0:04:f0:
         b1:aa:39:dc:e0:03:24:a2:54:69:48:a0:a6:13:ec:32:65:e5:
         2b:fd:4e:ad:52:b0:77:00:66:91:87:6a:3b:d5:5c:8b:60:a3:
         84:e6:48:f6:36:fe:93:19:57:71:eb:70:61:1b:9a:56:89:08:
         e7:2f:5d:0a:72:47:77:be:4e:07:e5:2d:30:51:d0:cf:e8:96:
         79:d2:65:9a:48:25:22:17:2a:48:b9:92:72:2b:de:da:6e:bc:
         25:b9:20:76:73:4b:8f:34:64:5b:60:60:80:cd:5a:59:05:e4:
         55:f3:de:51:b0:7a:15:b8:db:61:0b:26:e9:05:3e:ab:73:9f:
         f9:9a:f4:8c:e4:66:2e:b3:3a:3b:ea:d2:63:e9:7d:c2:f1:2f:
         f2:f9:de:e2:05:89:8a:48:90:d6:0c:ad:9a:a9:46:47:00:d0:
         73:e3:a8:32:b4:a3:f9:15:b2:35:0d:67:32:d9:2f:dd:92:bd:
         76:9e:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:59 2025 by rpki-client