Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/97afeb14-5201-33b2-b51e-fc4d85bb7550.roa
File:                     97afeb14-5201-33b2-b51e-fc4d85bb7550.roa (raw, json)
Hash identifier:          4qXqzuuHQdAgq5IOyNwVvM3CZbLhihvigP/9H6ADKK4=
Subject key identifier:   69:5B:4D:9E:D9:CF:1F:83:1C:3A:0D:0D:A8:64:D2:67:A3:F5:07:89
Certificate issuer:       /CN=f936a1e1-90de-4d04-8bef-ca6fea25558c
Certificate serial:       010D0C9F4328584A1BAFC2745F7EF8709FE21380
Authority key identifier: 2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/97afeb14-5201-33b2-b51e-fc4d85bb7550.roa
Signing time:             Sat 07 Jun 2025 03:41:43 +0000
ROA not before:           Sat 07 Jun 2025 03:41:43 +0000
ROA not after:            Fri 05 Sep 2025 03:41:43 +0000
asID:                     401371
IP address blocks:        2602:f638::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:af:c2:74:5f:7e:f8:70:9f:e2:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f936a1e1-90de-4d04-8bef-ca6fea25558c
        Validity
            Not Before: Jun  7 03:41:43 2025 GMT
            Not After : Sep  5 03:41:43 2025 GMT
        Subject: CN=309a1796-42dc-4eda-8180-3eb9dc3aff70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5a:a0:ba:f2:d6:aa:ca:99:d6:dd:3b:92:17:
                    5a:1a:4f:23:a9:0f:20:2f:2e:88:5b:98:3a:e0:27:
                    49:cf:98:bd:5c:82:1f:bd:b4:10:2c:a7:1c:f6:c1:
                    f2:ff:5e:62:35:21:63:36:08:83:2e:8a:36:d9:40:
                    e0:6f:20:3c:88:dd:f7:88:2b:81:67:04:9a:4c:e9:
                    f7:fc:d3:bd:94:8c:a9:9e:bd:96:1e:27:bf:84:71:
                    da:f8:c7:9c:ce:63:f5:90:c0:39:3a:15:47:7b:cb:
                    59:db:d5:9d:9b:84:10:e7:13:6e:0b:10:46:64:39:
                    18:6f:40:4a:72:f0:f7:8c:ce:0d:4a:ca:02:a9:d6:
                    91:a0:55:dc:c7:ca:81:99:7d:6f:da:14:8d:36:1b:
                    27:d4:87:93:7c:f9:9b:72:30:b2:9d:81:ea:c3:5d:
                    10:98:21:2f:e4:da:bb:b8:74:5a:94:ce:e7:05:66:
                    42:30:17:71:03:dc:65:ac:f6:8e:04:34:0e:5a:73:
                    bb:1d:21:12:51:17:fa:1e:e5:d3:b8:3b:b3:5c:cd:
                    a5:89:5d:ec:b0:58:a0:7e:e3:a8:c6:bb:0b:81:f3:
                    1a:0b:c3:3e:a5:ba:80:77:6e:5a:4e:f9:87:e1:4a:
                    4f:9f:10:91:aa:a8:15:87:e9:00:38:98:39:bb:57:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5B:4D:9E:D9:CF:1F:83:1C:3A:0D:0D:A8:64:D2:67:A3:F5:07:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/97afeb14-5201-33b2-b51e-fc4d85bb7550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.crl

            X509v3 Authority Key Identifier:
                keyid:2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f638::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:18:8a:4c:c5:f3:3c:82:e1:8c:40:37:37:f8:18:20:fb:7f:
         9b:97:bc:d0:99:21:ee:06:fc:62:2e:b2:9e:34:53:ba:01:03:
         b1:49:f4:ad:cd:04:35:0f:4e:b9:89:1f:46:d5:a5:6c:9c:ec:
         44:47:03:b4:12:1b:75:87:46:ef:62:a9:6f:bc:5c:ba:61:8d:
         40:9d:fa:0e:ce:9b:a7:d0:11:9d:63:07:5e:f1:08:f2:49:2c:
         db:b2:73:fe:f8:2f:a2:1b:6e:9a:86:ec:fd:c4:f5:9e:00:f1:
         39:53:93:48:c0:d3:6f:e7:a7:09:81:04:12:d2:93:b4:f9:92:
         f8:7b:ca:e8:d6:ab:32:44:bc:fd:28:70:05:24:8b:8b:07:0c:
         3c:66:d7:53:3f:86:87:85:f0:d9:a1:7c:5b:c7:b4:d6:8c:2f:
         2a:6f:fc:fa:cc:c0:76:fb:bf:9e:5f:94:13:e4:28:de:92:27:
         3d:6b:4b:54:8d:b7:9b:53:a9:e3:ea:9f:eb:56:80:60:01:46:
         11:03:96:85:d3:dd:85:e9:45:7c:06:28:49:f1:87:fe:8e:36:
         9c:67:4f:f4:56:24:64:4c:80:30:20:a8:01:3c:70:a0:b4:f2:
         78:9d:ea:b5:b0:cf:0d:64:08:dc:2d:19:f4:f4:b3:5d:3c:73:
         49:e4:31:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:02:39 2025 by rpki-client