Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa
File:                     d4835f23-c62a-3ced-954d-94b4dda54d19.roa (raw, json)
Hash identifier:          gQEUL56LXCXsUzfwC4e65ocI8TNeM4kX7i+YkfN14tQ=
Subject key identifier:   A6:8D:E3:6A:80:6E:A4:37:C6:7A:0F:9B:4B:87:08:42:7B:A8:CD:61
Certificate issuer:       /CN=940078fb-65b7-4c74-922c-09f44f222b6e
Certificate serial:       010D0C9F43285849D1650E6ACE5B66DF24E35700
Authority key identifier: 45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     20473
IP address blocks:        2602:f8a2::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0e:6a:ce:5b:66:df:24:e3:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940078fb-65b7-4c74-922c-09f44f222b6e
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=5d581e63-72d6-460e-8f86-4c22f1b17408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:17:52:7a:f1:23:84:db:a3:fe:07:b5:31:
                    6c:85:ea:b1:d9:82:71:55:ae:11:db:78:4c:72:d7:
                    11:16:a3:1a:36:1c:aa:ce:71:26:51:b7:d6:2e:4d:
                    26:a1:c7:eb:ed:52:58:82:bb:d1:37:90:fd:07:81:
                    01:e1:6e:e9:74:f1:d1:a0:e3:00:da:19:3e:b5:9d:
                    c1:dd:f3:6f:d0:20:f5:b3:e9:63:85:b1:9c:f6:3a:
                    98:c5:12:62:5d:ea:06:42:1d:35:18:0f:85:f3:9c:
                    c1:85:fd:e8:d5:80:ee:d7:20:92:7d:66:a2:cc:38:
                    2f:bd:ed:7b:81:80:36:f1:c7:40:24:17:36:87:6d:
                    b9:d0:67:0c:f9:2b:9e:71:0a:cd:74:84:ec:18:66:
                    c0:44:d6:3c:f3:4d:f7:1e:29:ac:87:74:83:33:fa:
                    9b:d6:cd:c0:2a:b9:63:84:63:a2:42:fa:7b:3b:a4:
                    a4:9c:c9:c4:b7:fa:8a:6b:64:0a:c9:f0:77:7f:75:
                    bd:0b:65:84:16:3a:a2:44:90:e5:33:ef:0d:d9:04:
                    26:76:85:e3:1e:7c:86:7d:81:b3:7c:fc:e9:52:ce:
                    46:2c:27:5d:d2:05:02:d0:0b:f6:8b:8d:db:38:fd:
                    88:46:2c:e8:f6:8e:47:de:23:f8:73:0c:f3:a9:71:
                    20:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8D:E3:6A:80:6E:A4:37:C6:7A:0F:9B:4B:87:08:42:7B:A8:CD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/d4835f23-c62a-3ced-954d-94b4dda54d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl

            X509v3 Authority Key Identifier:
                keyid:45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:1e:dc:ea:e3:67:28:6f:25:a5:d3:b4:5e:a5:e7:07:5e:fc:
         8b:b4:5c:a6:d8:06:bf:ec:cb:93:1a:a3:c3:7f:be:0e:e0:a8:
         e6:43:50:4a:f6:cf:e4:6d:57:10:cf:d7:ba:9a:09:21:83:03:
         40:54:24:48:3d:87:6e:d2:51:10:5c:85:04:f1:fb:b0:8d:9d:
         2c:ab:3a:26:43:54:db:62:4b:70:74:53:43:9d:b9:14:10:80:
         74:d7:10:a7:d2:38:6e:17:10:42:98:f0:da:8c:a8:c3:00:09:
         48:df:c3:a0:fc:4a:90:dd:8a:19:84:4f:55:2d:55:fa:4f:e4:
         30:f4:47:ec:5d:ae:45:bc:0d:78:aa:f5:3c:c8:03:9d:8e:e1:
         a3:77:19:a1:1f:20:d6:7f:38:9e:8d:76:45:fb:49:5f:d7:10:
         f0:94:73:f3:2c:c6:32:7b:0a:76:da:a0:58:b3:0a:c5:7c:76:
         79:ce:1c:83:7c:bc:f5:8d:c2:de:ad:22:f1:29:c6:71:0e:ba:
         87:b0:aa:0f:aa:b9:d4:42:bc:e3:81:73:23:59:f9:52:af:d2:
         74:37:2e:de:b3:5b:19:c1:ec:c4:8c:b5:12:3f:63:56:db:13:
         13:00:44:32:17:db:8b:ba:9c:4d:6b:b1:1e:1a:31:49:33:86:
         73:41:d8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 20 10:11:28 2025 by rpki-client