Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/322f3ab9-04ef-35af-883c-22dbee1894e1.roa
File:                     322f3ab9-04ef-35af-883c-22dbee1894e1.roa (raw, json)
Hash identifier:          KltNhB6o/DYtkVaWXB87F23dPoh4BhNGaGuN4qrittI=
Subject key identifier:   B1:9D:98:84:B3:D7:CA:70:8F:29:8A:F5:34:D7:35:30:8D:12:14:2B
Certificate issuer:       /CN=8637a780-1944-4d75-b623-0c10c96f56eb
Certificate serial:       010D0C9F43285848D2114087D53A721B410EB400
Authority key identifier: 97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/322f3ab9-04ef-35af-883c-22dbee1894e1.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     401133
IP address blocks:        2602:f8a3::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:40:87:d5:3a:72:1b:41:0e:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8637a780-1944-4d75-b623-0c10c96f56eb
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=4fb92829-5eb0-4721-aa09-e659499c365b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f7:77:48:25:bc:aa:07:33:69:ee:74:86:cc:
                    29:31:12:93:79:3f:c2:20:6f:bd:1f:e5:48:b8:d9:
                    84:78:eb:23:d7:65:bd:47:f5:1f:71:ba:72:82:76:
                    32:57:22:a1:1b:16:59:e3:d7:60:f8:3e:1c:9f:70:
                    fd:5d:2b:36:65:01:1f:7b:31:d4:d7:48:9b:f1:7b:
                    f7:a7:f2:af:37:71:60:4f:9b:95:eb:0d:ea:08:28:
                    ce:67:e2:a9:85:b3:98:90:09:06:ec:dd:34:cd:11:
                    66:84:a6:f4:2c:af:85:21:22:fb:a3:92:2b:0d:56:
                    df:d7:a9:98:04:e8:8a:a2:98:a9:01:e0:5b:33:12:
                    00:fc:1b:6d:d9:65:36:1c:6f:22:ff:11:3b:0f:7c:
                    38:f3:46:8d:76:df:fd:b6:99:8b:2b:1f:f6:97:2a:
                    9d:46:bf:f5:63:46:81:0a:62:6e:65:62:c8:2e:20:
                    cf:49:38:93:b9:27:3c:1f:cd:c2:d7:9a:5e:d2:2a:
                    c6:4e:ba:c9:47:07:b5:eb:30:99:fc:68:0e:ee:bb:
                    d1:d5:86:d9:98:af:ff:5a:33:e0:b6:b6:08:14:67:
                    7e:80:da:94:2e:72:51:4a:c1:c6:94:d8:37:fa:a5:
                    0d:1f:7b:3b:c9:95:20:9a:2e:d2:6e:ef:ae:bc:cb:
                    c4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9D:98:84:B3:D7:CA:70:8F:29:8A:F5:34:D7:35:30:8D:12:14:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/322f3ab9-04ef-35af-883c-22dbee1894e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl

            X509v3 Authority Key Identifier:
                keyid:97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a3::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:03:a0:bf:93:69:86:01:94:e6:16:b9:23:35:ae:2c:03:
         34:4a:0f:f8:b3:61:db:01:26:6b:5d:2c:22:15:74:c0:cc:d8:
         2b:d9:cf:f7:32:54:2f:66:44:a5:6e:b6:e0:1f:da:99:6f:13:
         a9:86:3e:b9:b8:86:ab:e2:37:fd:3a:8d:00:e9:69:8a:1b:e6:
         73:31:6c:0b:38:c0:44:21:5c:7b:86:7c:66:42:92:64:49:4d:
         ef:56:d7:78:05:41:68:55:94:f7:0d:e8:ad:29:37:bc:c0:d6:
         90:7f:f7:f0:1e:2b:8f:a2:2b:87:2f:3d:95:3a:0c:cd:d6:ec:
         b0:50:86:a8:f8:96:fe:98:a2:9e:dd:b1:84:83:bd:dc:1e:5d:
         03:70:9e:05:4b:12:b4:f0:f5:54:a2:2f:ce:81:5c:29:64:d1:
         cd:8c:24:50:b9:1f:ae:83:7c:a1:55:9f:66:1b:5d:5f:5c:51:
         b8:b2:f9:c4:31:86:49:ea:ab:15:45:b6:85:09:d6:60:3f:c7:
         68:8a:dd:8a:7a:49:85:af:df:cf:c8:93:29:13:56:b5:39:cb:
         80:de:fa:5d:58:40:71:46:f9:86:b2:43:30:a7:8b:1d:30:f9:
         b5:aa:f5:4d:e3:4b:ad:59:ec:1c:e3:c5:67:7a:be:f7:05:26:
         00:93:e1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:05 2025 by rpki-client