Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/507d604b-8071-3fe1-bf1d-4fb8eaf14f40.roa
File:                     507d604b-8071-3fe1-bf1d-4fb8eaf14f40.roa (raw, json)
Hash identifier:          tFLGEPyvWGpqEStlJ5A64I4N6U6xvHE43CeZQNue4e0=
Subject key identifier:   5F:C0:00:F5:C1:13:CC:EB:CC:65:4F:B8:3C:AD:6B:F8:D3:7E:46:F5
Certificate issuer:       /CN=73d32729-3efa-4a4c-a5ce-85790b40d100
Certificate serial:       010D0C9F43285848D7A642FAA9602869D9CCC600
Authority key identifier: DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/507d604b-8071-3fe1-bf1d-4fb8eaf14f40.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     53356
IP address blocks:        2602:f91e::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:42:fa:a9:60:28:69:d9:cc:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d32729-3efa-4a4c-a5ce-85790b40d100
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=49e3d9c2-1d9f-4f44-93a7-04222d0bfe3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:d2:bc:04:13:34:ae:cb:31:84:3e:65:9f:
                    42:81:f1:3d:44:24:fc:04:88:f6:93:33:1b:92:27:
                    23:47:fd:80:ee:13:e2:dd:82:9b:fa:35:b1:2b:d7:
                    98:e2:ef:d8:fc:13:ec:08:4b:0e:92:49:b3:ba:af:
                    c7:96:e7:01:dd:24:60:2a:0b:1e:0c:0e:13:87:fa:
                    e2:c3:1a:a0:f5:61:52:d5:a5:d4:7f:ea:0c:2a:fe:
                    49:8c:4a:a1:f1:c1:fd:d3:81:c7:3c:55:d6:0b:77:
                    54:47:eb:5f:dc:54:59:e6:92:72:ce:c6:f9:da:40:
                    5d:20:31:06:8d:62:b4:84:da:9c:87:82:90:9e:51:
                    ac:05:46:3b:e0:32:77:5b:1d:4a:c5:5f:8f:62:48:
                    6e:f9:3a:bc:fd:bb:3e:32:1b:54:97:a2:da:07:4f:
                    a3:6a:a3:f8:b5:c5:d0:e2:d5:8e:98:59:51:dd:c3:
                    ec:cf:91:11:1d:c1:f0:30:05:e9:e3:81:ad:c8:6e:
                    a3:07:89:c0:ea:f5:e8:ff:cc:ee:c2:0a:92:d4:27:
                    b0:cd:ca:de:c0:ad:b6:5c:c1:5c:3a:df:07:24:04:
                    f5:d7:22:65:77:1e:ea:3a:c9:a1:a4:9f:a8:46:54:
                    1e:6c:e7:fd:76:63:ea:e6:f3:10:82:30:ec:47:a2:
                    94:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C0:00:F5:C1:13:CC:EB:CC:65:4F:B8:3C:AD:6B:F8:D3:7E:46:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/507d604b-8071-3fe1-bf1d-4fb8eaf14f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.crl

            X509v3 Authority Key Identifier:
                keyid:DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f91e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3b:d3:29:11:ff:af:cf:70:ba:33:26:1c:5f:e8:db:08:24:
         67:5d:a2:60:8c:14:32:d1:eb:80:c4:7e:00:1a:ee:74:51:e8:
         de:0a:2a:ad:2d:13:91:a4:59:a4:80:10:cf:45:f7:7d:8f:3b:
         9c:82:13:fb:b0:9b:94:f9:80:4f:a8:d3:d3:5d:1f:1a:94:7a:
         f8:d9:1a:90:51:4e:1f:9d:1a:a8:25:8a:14:f9:14:53:61:b9:
         c7:c9:54:a8:4b:d3:e9:a9:12:2a:a8:b8:fd:da:e2:63:e0:dc:
         f4:99:5e:79:cf:46:18:76:da:66:c9:af:c1:94:56:dc:6b:fc:
         40:42:b7:41:22:7e:a1:d1:df:a0:2b:5f:f3:20:60:db:a5:9b:
         3d:92:d1:5c:ff:b6:5e:c0:9c:5e:dd:6d:d7:af:81:a2:91:04:
         bc:0c:01:f2:05:42:c0:e5:e4:bb:5e:f4:b8:23:18:5c:41:1c:
         82:27:99:1a:9d:a1:58:db:9a:fe:55:98:71:f8:c4:5a:b1:00:
         95:06:4f:ad:38:f4:21:01:e2:22:3f:85:d4:22:d6:9e:b5:95:
         3b:fa:41:a2:fe:cc:63:77:fd:aa:3c:ab:48:d1:0d:5c:c0:b3:
         ff:93:47:2e:f2:c5:97:75:f0:c6:49:1e:98:01:0f:09:8f:da:
         bd:60:e5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:57:56 2025 by rpki-client