Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa
File:                     bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa (raw, json)
Hash identifier:          cboTxkYPwqoe6ws/z3nblSteeNuRbEsEbPqjiIBnJGE=
Subject key identifier:   DB:9E:7D:6C:FF:A6:41:69:A5:61:7D:0A:CA:4E:56:23:9D:D1:C3:4F
Certificate issuer:       /CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
Certificate serial:       010D0C9F43285848D7A6465D7ED0E54CCAEDCCC0
Authority key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     53356
IP address blocks:        2602:f90c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:46:5d:7e:d0:e5:4c:ca:ed:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=21cceae4-719a-426d-9123-49b77ecadd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:50:3f:2f:3e:7a:f0:6e:a2:db:29:4c:94:9f:
                    35:03:25:86:2d:d4:51:93:1b:28:85:5a:62:41:c8:
                    ba:ab:73:bf:8e:be:8c:a8:2b:1c:13:3f:77:a0:98:
                    ba:12:01:98:3c:87:0b:cc:97:2f:f7:44:9b:91:fe:
                    ea:7d:ff:0b:3f:a5:28:ab:d0:7d:7e:b9:f0:3f:78:
                    e3:5a:03:32:c3:26:45:eb:7a:49:26:cf:0c:fa:48:
                    c3:5a:1f:0c:aa:3d:39:0c:45:cc:67:c2:b6:f4:89:
                    db:13:7f:4e:f4:da:a2:91:e3:34:24:97:97:a4:42:
                    18:38:89:a2:b5:a0:fc:3e:b2:e9:e7:8b:32:f3:f1:
                    c2:67:6b:b3:7e:0c:40:26:38:4e:a5:ca:e2:f5:63:
                    92:0e:34:7c:06:26:3c:1a:b2:52:de:57:98:65:44:
                    e1:8b:c5:4d:5f:4f:f4:9c:83:b2:61:80:f0:f6:f1:
                    7d:ac:b2:c6:f8:b9:c3:aa:20:80:3e:b7:ae:9a:f4:
                    59:21:6a:8b:da:05:8d:b0:84:76:b7:04:19:22:79:
                    e4:ae:8b:33:62:b3:ef:e3:45:83:6c:e2:7e:c0:5f:
                    50:f6:af:ce:23:44:f8:f8:e6:6f:70:1f:e6:67:73:
                    f5:ac:1f:96:c9:7e:7e:53:1a:05:c6:08:97:fc:52:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9E:7D:6C:FF:A6:41:69:A5:61:7D:0A:CA:4E:56:23:9D:D1:C3:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/bee0c934-62b9-34a4-a77f-b77706cfc6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.crl

            X509v3 Authority Key Identifier:
                keyid:00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:86:a2:e7:d9:7a:3a:6f:8f:13:f9:f4:22:bc:8c:47:f1:32:
         36:47:1a:18:7e:ed:f0:1c:2b:55:58:b2:ba:2f:dc:c9:a4:44:
         27:cc:28:da:ce:ef:37:87:28:cb:1c:53:fd:e4:a1:44:1c:68:
         f4:a8:00:3c:7f:30:70:40:5e:af:23:72:a7:eb:ea:80:99:60:
         1f:68:ed:d6:12:12:97:87:a5:54:e1:71:27:d8:7e:df:4a:9f:
         6e:a7:9f:36:d1:35:8c:29:0d:f9:7d:16:28:6a:20:9d:75:13:
         5e:3c:4f:5c:ab:8d:6e:8d:40:5a:88:8f:6b:c6:db:ed:a6:bc:
         37:ad:d1:38:06:27:13:4d:89:c1:a4:e6:be:91:59:e1:76:a9:
         2d:10:d6:2b:57:3f:f4:a4:a3:90:38:ff:ed:2e:0b:bc:88:79:
         a3:0b:aa:d4:ec:a8:ab:c8:a3:ef:99:ab:58:4a:2b:cd:00:fa:
         f0:96:9e:05:58:b5:8b:6a:ad:fa:b2:e4:ed:68:17:a3:6d:f2:
         47:ad:af:f4:23:de:c1:c1:84:47:53:ab:93:9c:e5:cb:1b:88:
         ee:8d:7c:58:d0:9d:03:14:3a:c6:d0:06:ea:25:24:cf:e8:dd:
         e0:75:30:13:35:51:89:ea:d1:44:71:99:00:6c:07:6e:fd:01:
         52:d8:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:48 2025 by rpki-client