Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/e559faa1-5818-3f96-88eb-d521d4d181b6.roa
File:                     e559faa1-5818-3f96-88eb-d521d4d181b6.roa (raw, json)
Hash identifier:          0q5TA0aNcQln93anFx3RbNC/5DOtl9Yk9fD13dwIAd4=
Subject key identifier:   2C:77:C1:1E:9E:94:39:E7:1F:34:80:E6:F5:0F:5E:5C:17:98:AF:EB
Certificate issuer:       /CN=0942cd1e-1350-41d5-a14e-51bddb52c336
Certificate serial:       010D0C9F4328584A7A4B38328598B974FFB7A4F0
Authority key identifier: 5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/e559faa1-5818-3f96-88eb-d521d4d181b6.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     26157
IP address blocks:        2602:2ba::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:38:32:85:98:b9:74:ff:b7:a4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0942cd1e-1350-41d5-a14e-51bddb52c336
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=e83955f6-7264-4a42-8291-261d021a1fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:85:07:89:4f:5c:07:5f:8e:04:2e:bb:bf:
                    ae:46:05:d6:3e:bb:98:db:4e:bd:fe:04:6b:4d:a6:
                    f2:84:7f:55:68:2e:a0:a4:59:fe:1e:f8:12:fb:00:
                    6e:24:ff:a5:99:e2:3b:da:77:06:df:cb:43:37:41:
                    2e:2b:44:89:d2:96:4f:43:5d:af:92:14:93:c5:f8:
                    06:91:c7:cd:43:a3:e6:95:b4:01:b6:f1:b6:6c:68:
                    82:67:73:76:24:25:66:61:3b:0e:8b:d6:4f:9b:15:
                    09:3a:b4:55:00:96:04:b2:4e:d3:cb:17:69:6d:5c:
                    bf:78:07:32:72:b1:53:c3:33:e1:50:5e:bc:17:66:
                    d7:7d:b0:00:78:bc:d0:a5:7a:64:39:d5:2d:10:36:
                    bc:e4:95:ca:1e:84:f2:f2:29:9b:5b:6d:8f:bd:fc:
                    c9:70:99:85:23:e7:dd:fe:b9:80:13:19:59:93:f5:
                    b6:25:28:e8:a2:42:b3:80:6b:66:f7:c3:6e:c9:dd:
                    cc:c3:f5:b6:41:64:ef:2b:3a:49:cb:64:c2:e5:82:
                    1c:0c:89:dc:19:1b:65:bf:c1:8c:d3:6e:b7:c3:09:
                    76:e7:7c:c7:bf:13:e1:1c:3d:45:57:60:62:bc:9c:
                    42:13:b6:8e:1a:13:e8:ff:d2:10:78:75:88:20:56:
                    6d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:77:C1:1E:9E:94:39:E7:1F:34:80:E6:F5:0F:5E:5C:17:98:AF:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/e559faa1-5818-3f96-88eb-d521d4d181b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl

            X509v3 Authority Key Identifier:
                keyid:5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2ba::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:21:b7:37:b5:56:74:17:51:9c:73:9b:7d:42:3b:24:a0:56:
         04:8d:1a:b7:c9:05:5a:34:c4:f9:d1:e0:7d:a5:1e:49:33:cf:
         eb:20:81:8d:16:5d:53:41:16:40:24:36:92:ab:a2:5e:c4:77:
         c5:61:46:fc:60:a9:a4:ae:3d:84:92:c7:86:c1:0a:f4:9b:d8:
         b5:39:9b:e5:30:cb:9f:ff:ac:ca:4f:dd:88:ba:80:32:4f:d5:
         2f:61:96:d2:3c:ce:fc:83:12:c7:d2:a2:44:75:50:a5:6f:be:
         a3:e5:68:89:85:d1:d4:48:34:19:2a:ed:26:3e:6d:90:04:1f:
         0f:ed:10:b1:73:bc:14:95:4c:fa:e5:23:36:2d:d7:9c:20:cc:
         d2:96:ca:5e:fe:1f:38:8c:90:cd:45:8b:4c:a6:e6:44:53:60:
         99:66:74:f5:a7:76:1d:67:47:16:ad:d9:83:c7:97:47:db:27:
         2d:1d:b2:f9:15:8d:f6:44:22:13:ee:f3:45:6c:ef:0e:35:da:
         99:d4:25:98:35:f9:00:36:9a:63:da:70:67:9c:74:b3:a1:cc:
         a5:a4:0f:00:61:b2:70:d5:ee:59:b4:89:95:9b:ce:e3:24:b0:
         21:a8:0b:89:e5:0c:51:4a:bd:17:31:7c:fa:3e:f0:18:4e:68:
         b3:5c:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 11 04:57:22 2025 by rpki-client