Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/6c00c77f-25cc-3ef6-a1ec-2c7d1d8d62e4.roa
File:                     6c00c77f-25cc-3ef6-a1ec-2c7d1d8d62e4.roa (raw, json)
Hash identifier:          j/0dgxyqqgph0XbsRSTJj97TqkdabcxDOg7iRfkXIvY=
Subject key identifier:   5D:ED:18:25:7C:3E:A4:4E:69:1D:D3:29:11:8D:2B:60:06:99:C2:79
Certificate issuer:       /CN=e30d9f05-c733-4bb6-bc4c-e72705e580d4
Certificate serial:       010D0C9F4328584902EC0221660D79294405BA80
Authority key identifier: 4D:A2:1A:A9:DC:2F:C1:FF:6A:6D:BF:A5:A0:E1:0B:F3:52:C7:B1:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/6c00c77f-25cc-3ef6-a1ec-2c7d1d8d62e4.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     33385
IP address blocks:        2602:fc60::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/e30d9f05-c733-4bb6-bc4c-e72705e580d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/e30d9f05-c733-4bb6-bc4c-e72705e580d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:02:21:66:0d:79:29:44:05:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30d9f05-c733-4bb6-bc4c-e72705e580d4
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=d188f7f0-507e-4806-ab9b-f804af9d797b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:d0:05:a8:2f:55:6e:a1:70:e7:fb:93:36:
                    cb:c9:fb:e9:4a:ca:bb:a4:74:8e:7f:bf:82:d6:5b:
                    99:87:a2:83:b9:f4:ff:7c:b4:df:d6:9d:2a:56:17:
                    82:d9:9b:7c:1e:f5:7c:7f:5d:a3:ef:65:c5:b3:2a:
                    2b:39:22:6e:8b:4d:cc:82:19:0b:5a:7d:92:37:cc:
                    75:97:08:31:5e:cb:44:39:00:f4:98:df:45:f9:90:
                    1d:3a:65:96:e7:88:5a:d8:2a:78:09:d4:b8:ea:09:
                    96:db:4e:f0:6d:54:a3:b9:22:49:35:dd:0c:59:1d:
                    cd:64:e1:2d:d6:1f:6d:1c:03:5f:93:a6:47:5e:7b:
                    1c:2a:49:2e:4d:33:91:dd:e9:31:72:71:64:b7:97:
                    26:44:fa:bb:22:3b:7d:89:94:c7:d4:49:7d:4a:60:
                    d1:13:12:c8:02:3c:c2:49:c5:7a:00:25:80:58:5e:
                    b7:61:0d:75:64:0d:ba:36:94:33:b6:f5:86:f5:41:
                    b7:b8:4a:60:7b:f1:fd:ee:9f:9f:4c:d8:3f:46:71:
                    46:a5:5f:e0:18:c0:7c:fc:a5:05:ff:53:96:47:2f:
                    42:10:a9:eb:3c:40:d3:ef:35:33:29:a2:eb:5e:0c:
                    e8:dd:75:36:46:03:fc:55:cd:9a:e7:05:96:a3:fe:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:ED:18:25:7C:3E:A4:4E:69:1D:D3:29:11:8D:2B:60:06:99:C2:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/6c00c77f-25cc-3ef6-a1ec-2c7d1d8d62e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/e30d9f05-c733-4bb6-bc4c-e72705e580d4.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A2:1A:A9:DC:2F:C1:FF:6A:6D:BF:A5:A0:E1:0B:F3:52:C7:B1:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc60::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:40:9d:78:ec:ab:18:b3:e6:e2:2a:29:42:87:aa:9d:5b:60:
         60:e1:5a:9e:8b:b9:9c:0f:1f:00:2e:b1:21:20:de:61:2c:a4:
         33:22:31:6e:69:31:19:10:7f:32:56:d3:51:6e:8b:82:32:a9:
         a8:df:bc:ac:46:8d:32:69:3f:77:fa:a9:45:6c:94:88:a3:c8:
         14:07:6b:ed:2b:39:5d:dc:72:26:9d:3c:24:d0:28:3f:78:e1:
         2d:66:fc:33:e3:ad:04:4b:91:e7:29:99:19:bf:48:36:58:5a:
         88:8a:21:d5:86:54:6b:12:81:ba:10:88:bb:6d:6b:bb:74:00:
         32:55:16:f7:14:5b:8d:fb:25:9b:15:d2:1c:fb:e6:8d:86:84:
         58:e6:3c:72:c3:28:c1:7b:3d:fd:52:2b:34:c1:54:59:b4:bb:
         ee:76:fb:a6:22:9e:0b:01:01:10:9d:f9:6f:50:1a:0b:3d:10:
         18:b8:01:cb:18:db:f4:e0:7f:13:8b:14:3e:f0:62:47:e0:9d:
         d7:18:29:d1:05:79:35:b6:bc:aa:17:f9:64:0a:2c:a2:46:cb:
         a5:30:73:60:b7:69:8b:69:fd:77:7b:f6:4e:14:69:33:ca:fd:
         28:20:30:cd:c2:f4:77:3c:94:93:90:b8:28:0e:3d:86:a0:67:
         3d:0e:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:06 2025 by rpki-client