Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/40eb335e-db14-3b46-9df0-1e2302b1928e.roa
File:                     40eb335e-db14-3b46-9df0-1e2302b1928e.roa (raw, json)
Hash identifier:          CgIuNk+hSXCh4v8Ch/8QE+ZrG6fVyy4kuZsyCvnXY0c=
Subject key identifier:   DA:6A:22:07:78:32:B1:82:75:EB:EB:F6:EF:87:74:72:D9:F6:24:42
Certificate issuer:       /CN=89ee541c-de14-47cf-b4d0-081e933fb330
Certificate serial:       010D0C9F432858493C0927D2531D5B6F356FEA00
Authority key identifier: E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/40eb335e-db14-3b46-9df0-1e2302b1928e.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     53809
IP address blocks:        2602:805::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:27:d2:53:1d:5b:6f:35:6f:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ee541c-de14-47cf-b4d0-081e933fb330
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=a5a49731-13f6-4aee-b89c-5652d4555a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e4:89:2d:14:2a:d9:78:ad:eb:ef:8f:9e:45:
                    a3:60:60:6d:41:98:15:e8:c7:d6:db:39:33:82:e6:
                    fd:e6:39:0b:cb:34:51:24:dd:e1:e4:15:a2:9b:ee:
                    d3:50:76:17:c5:33:07:f0:a2:f9:fc:9f:fe:cd:34:
                    6f:6f:31:2e:51:10:e2:71:86:14:9e:48:50:4e:5c:
                    d5:72:8e:58:26:94:c8:4e:92:be:cc:80:05:3b:e6:
                    25:ec:5b:9d:57:6c:af:f3:59:8c:61:d8:71:bc:86:
                    0e:27:07:c5:ac:e2:d9:be:1c:1c:bc:67:d2:45:41:
                    80:20:f8:33:49:b3:a2:79:e5:41:a4:f3:af:1d:5c:
                    50:a3:a2:6c:bb:01:76:79:2d:06:60:9a:8f:0c:c0:
                    7c:66:7c:e0:48:f4:7f:cd:d6:01:27:90:0b:3b:5e:
                    9a:33:2d:d9:e0:4a:b2:53:37:87:a7:12:fb:05:28:
                    4d:96:58:4d:93:ac:17:f6:af:6d:0a:ea:0a:48:dc:
                    9d:f5:1c:e5:db:68:75:23:50:10:8d:49:20:c5:10:
                    0f:47:23:2f:dd:9f:37:ea:fc:3e:57:fc:67:8f:72:
                    6d:f2:e3:3e:15:83:13:5d:9d:54:98:93:85:1e:d7:
                    e9:f1:01:b2:a1:e3:4e:1f:8d:1e:1a:7d:79:d0:cf:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6A:22:07:78:32:B1:82:75:EB:EB:F6:EF:87:74:72:D9:F6:24:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/40eb335e-db14-3b46-9df0-1e2302b1928e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330/89ee541c-de14-47cf-b4d0-081e933fb330.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CE:97:53:78:E4:8B:6A:54:42:7E:4C:4B:8F:D7:26:F5:4B:E7:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/89ee541c-de14-47cf-b4d0-081e933fb330.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:805::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:8f:2f:09:75:5e:52:7a:53:28:5b:76:16:8c:28:7e:1e:
         d2:dd:79:52:76:c6:9f:e5:cc:7f:b6:c4:74:29:a1:97:fa:2c:
         12:c8:ed:a7:26:72:10:38:be:43:24:f5:f0:ac:33:6e:89:28:
         61:34:bd:02:a7:85:25:56:57:27:6e:df:32:a8:b7:b3:ab:88:
         e3:36:6b:cd:e7:48:f6:6d:b2:9d:b0:d7:ee:dc:f1:85:fa:74:
         cc:e1:cc:9b:3b:e9:00:8b:97:ae:8b:11:1b:00:b0:ce:cf:b2:
         05:2a:44:26:a8:2f:48:86:6b:bf:0c:a1:d8:a9:6b:9b:ea:aa:
         e9:cf:5e:9d:1e:bf:a4:9e:e5:c9:9d:af:43:af:1f:b0:7b:1e:
         90:bc:a7:2c:a3:d0:a2:40:7d:2f:d0:a4:59:be:60:bb:8d:dd:
         46:d6:6b:c4:eb:64:71:6f:dc:bd:f2:ee:61:78:41:c5:02:08:
         65:1e:ff:f4:e4:f8:ef:c8:e0:9c:c6:9a:6d:49:67:99:18:1b:
         7f:63:e8:1e:e2:7e:1a:3b:1c:77:76:8c:18:20:31:1f:e9:2d:
         26:b6:a5:b1:36:02:b9:e8:02:9b:fe:f0:1b:e2:1b:47:b7:49:
         b1:a4:a5:68:66:66:fd:bc:31:ad:da:bb:a2:72:fd:79:f5:f5:
         8d:6b:25:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:35:04 2025 by rpki-client