Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa
File:                     d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa (raw, json)
Hash identifier:          +E6/eyH9yskINz0yCpzq23k/ZgV5GkstCQeGaut02UM=
Subject key identifier:   5E:DF:6F:D2:B2:18:B1:C8:FE:4F:B2:81:52:0E:1E:3E:66:08:8C:C9
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584917DC37FFBDC5D9F711A1B280
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     31898
IP address blocks:        2602:fdaa:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:37:ff:bd:c5:d9:f7:11:a1:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=5ebb626b-29e0-4f0f-8b79-d9b5add8ba47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:1b:05:b5:ad:42:7a:c8:24:8b:26:bd:a3:
                    44:82:8c:d4:7d:90:79:44:87:77:43:7d:d5:78:2c:
                    f2:0f:13:66:cc:b5:bd:53:9e:26:b9:56:0b:c4:0e:
                    5f:0c:a0:5c:b6:d6:c2:5f:67:e5:df:53:a1:e8:c8:
                    aa:09:2d:73:72:27:2f:3a:ca:6a:84:92:de:eb:9f:
                    42:bb:27:72:11:3b:c6:f2:d9:70:21:e4:ad:ef:f8:
                    58:b5:dd:15:1d:7e:a7:1a:6d:16:d7:8b:47:31:69:
                    67:e4:df:6e:92:47:48:95:aa:71:b1:c2:3c:61:ad:
                    11:db:08:7a:9d:d7:be:12:e0:6c:ef:e1:5e:76:01:
                    84:f3:e3:b1:9d:de:19:07:62:d9:e6:23:5f:80:06:
                    2d:ec:80:6b:56:ed:42:d1:e5:e4:ba:18:6f:ff:cf:
                    07:79:3a:42:8c:8e:60:68:47:7b:c9:95:5e:4d:83:
                    b3:c6:5f:b5:ab:08:5e:69:5e:00:71:c8:2d:7a:56:
                    e5:fd:32:77:7c:3d:c4:03:fb:64:f4:be:ab:11:a9:
                    af:9a:d8:c8:af:13:b8:8c:06:af:1a:58:95:86:15:
                    f0:17:81:9c:37:e2:0f:6f:8c:52:07:ac:fa:d9:26:
                    2b:9a:1f:c0:a2:64:29:e9:61:dd:a7:ff:ee:fa:81:
                    ef:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DF:6F:D2:B2:18:B1:C8:FE:4F:B2:81:52:0E:1E:3E:66:08:8C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:09:c4:75:be:71:21:00:0e:1e:03:dc:22:23:06:28:a6:c0:
         d2:92:a8:61:d1:b3:35:e9:fc:ae:9f:ed:e3:fb:50:88:f6:9e:
         03:76:a3:80:f6:c9:38:5a:3c:1b:8b:97:e5:ab:00:cf:21:00:
         23:a5:16:29:3c:28:e4:df:03:3f:c1:0a:3c:65:01:c7:41:cb:
         9e:92:e9:2c:59:b8:a0:63:a1:05:22:da:ec:01:98:e1:cf:e5:
         4b:90:d6:93:1b:95:d4:0e:7f:f4:b5:64:9a:0a:34:2c:62:c6:
         e4:06:7b:63:2b:42:96:1b:86:6c:56:53:0c:c1:88:6a:22:19:
         d9:92:3e:c3:19:b2:d8:7b:3d:a3:b6:bd:88:e1:0a:ee:91:2e:
         2c:b5:64:a7:89:c8:fc:00:33:9d:f8:2d:95:81:87:30:1e:13:
         93:88:41:68:d5:9a:80:11:ce:c1:ad:a5:34:02:7e:c7:86:c4:
         60:14:a3:20:b9:3b:0b:0e:7a:5e:b3:db:ce:7d:5a:55:34:bd:
         2e:a1:fe:88:0f:97:1c:60:37:46:13:1d:8d:a8:f2:f1:ca:4a:
         ec:11:d0:d2:a4:70:7b:65:3c:98:20:12:9c:2d:7f:b1:2f:9a:
         53:62:6c:ba:7b:d8:25:f1:c3:c5:19:c3:e3:9f:cc:a6:89:81:
         ce:ef:a5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:21 2025 by rpki-client