Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb309b79-d534-378e-8391-a62dfccc86df.roa
File:                     cb309b79-d534-378e-8391-a62dfccc86df.roa (raw, json)
Hash identifier:          LxmzRkLaIfSdXBhJzXCI5ESEBFDeDcBziEbkkoJaDro=
Subject key identifier:   F2:40:97:84:48:29:07:F1:C6:42:8D:AF:77:76:2B:02:17:F2:85:09
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584975444D042FB17C06BC5E0500
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb309b79-d534-378e-8391-a62dfccc86df.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     39618
IP address blocks:        2602:fd92:c30::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:4d:04:2f:b1:7c:06:bc:5e:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=c8a37b1a-02b4-44bd-8226-3d3dec47e2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:fe:8d:7a:96:9f:67:0f:ad:51:31:53:2f:
                    9a:3e:7b:29:7d:a5:05:20:14:f6:ce:c8:bb:72:46:
                    56:22:34:f2:d2:7b:97:69:29:07:82:55:30:61:4f:
                    eb:fc:d2:2d:25:c7:9a:94:2c:a6:85:e6:14:9b:a6:
                    41:63:9e:ff:4f:eb:c5:61:1f:f1:6d:0e:80:89:de:
                    bf:51:d0:cd:6e:60:67:b6:b8:13:91:ac:58:65:ca:
                    84:37:e2:59:6f:df:b4:67:08:07:4f:8d:f3:90:eb:
                    62:f4:c7:03:95:60:ab:95:67:50:b0:f6:a1:f8:bf:
                    c0:7d:87:f3:42:d0:59:7f:a8:d9:01:fe:8f:27:cb:
                    60:e6:37:ba:f0:98:b9:8a:7d:93:3a:86:93:92:78:
                    c6:52:98:f5:02:75:c4:b2:40:97:8b:a9:7b:e3:06:
                    89:d6:e4:7f:59:d3:ad:77:f1:a0:9d:80:c2:ae:57:
                    6f:36:63:b9:89:40:96:cb:e5:b8:48:ab:73:35:43:
                    6b:d3:7b:bf:0e:7d:a3:5a:a4:a0:0d:51:c4:7b:3b:
                    7a:17:7d:74:a5:c2:e6:4d:a5:c0:ed:a7:31:95:67:
                    b8:e4:72:7a:e9:87:eb:da:8d:8b:bc:8f:b2:fb:61:
                    ee:f6:34:c7:85:1f:c9:84:6c:68:5b:72:e2:b0:94:
                    dc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:40:97:84:48:29:07:F1:C6:42:8D:AF:77:76:2B:02:17:F2:85:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb309b79-d534-378e-8391-a62dfccc86df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:c30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:46:e3:38:99:61:cf:2d:77:27:0b:26:31:84:0c:e3:ee:
         b1:b8:e5:97:aa:fd:cb:73:15:60:ce:5f:b1:c5:c9:67:ed:af:
         b8:fb:80:e1:ed:76:27:a1:17:46:ad:64:95:18:ee:31:96:54:
         ab:56:f5:e5:1d:1d:95:ec:a6:0e:ee:72:20:60:3a:a6:e4:e6:
         f3:f1:82:a0:70:4a:58:bb:5e:41:6b:3b:75:a6:0d:fd:58:e7:
         10:78:a9:35:5f:17:42:6c:9a:d5:83:0e:84:34:7c:ee:10:32:
         e5:62:ba:81:c9:56:f0:97:46:ff:9b:ad:f6:f3:ac:cb:8f:49:
         f5:90:22:91:0d:2e:09:34:7f:7c:65:c8:2f:c4:8f:bb:51:8a:
         63:6c:d3:1d:1f:6c:14:a6:2d:c7:35:2f:ca:03:3b:36:97:5a:
         0e:c1:07:f2:14:5b:05:32:1e:34:28:9b:a9:24:90:4f:02:dc:
         a2:cf:ce:36:37:a2:32:81:b3:bc:8a:7f:1e:a7:11:19:a5:b6:
         d1:a9:a6:9d:27:37:4d:11:5d:73:68:54:d9:70:f0:10:1f:8a:
         94:16:09:1f:7f:8c:bf:9e:a1:40:55:77:40:6d:52:e7:a7:78:
         db:66:b1:91:a8:02:0b:36:3d:74:dc:a6:ac:2e:6a:33:29:cb:
         83:d0:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:17:41 2025 by rpki-client