Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/a006277e-88c8-325b-b138-bbfc7abf1ccd.roa
File:                     a006277e-88c8-325b-b138-bbfc7abf1ccd.roa (raw, json)
Hash identifier:          l6thSTXJYETjCkHctgkXzZd4Dga0rg5uu3P/O2UV27Y=
Subject key identifier:   7A:AC:0A:AB:68:9B:51:A2:58:C1:57:70:E6:71:03:9F:F4:1C:FD:2F
Certificate issuer:       /CN=31c5953d-e37e-4639-a814-20faebab1999
Certificate serial:       010D0C9F4328584976A98BEC789D05AE95148D20
Authority key identifier: BF:91:09:05:0E:8F:F1:2B:31:C1:2C:8E:DD:F8:72:A7:BB:01:C8:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/a006277e-88c8-325b-b138-bbfc7abf1ccd.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     401604
IP address blocks:        2602:f72c::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/31c5953d-e37e-4639-a814-20faebab1999.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/31c5953d-e37e-4639-a814-20faebab1999.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:8b:ec:78:9d:05:ae:95:14:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c5953d-e37e-4639-a814-20faebab1999
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=a8dbc290-8446-4980-9af0-19dec36dd008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:74:23:0b:39:b1:07:54:08:93:ff:8c:fe:
                    20:2d:b4:33:95:98:3d:9b:c3:52:32:8b:86:97:ea:
                    54:cf:12:4a:d4:8b:01:0e:7f:b2:d1:65:86:ba:90:
                    68:7c:d9:2c:dc:b7:b1:e3:e7:a2:f6:f4:fd:7f:c5:
                    68:b3:35:d3:c4:88:73:41:f3:49:03:01:3c:03:57:
                    26:39:48:80:30:7c:0a:ae:43:2c:8a:f2:44:8b:b3:
                    79:70:80:6b:fe:90:69:c4:07:71:f3:d1:cf:26:8c:
                    f0:37:60:c9:25:93:08:e9:18:c0:49:09:cc:14:ec:
                    79:5e:b2:f8:31:56:93:93:34:43:b1:6a:5d:a4:9f:
                    14:c7:a1:f8:7c:81:4b:2a:63:13:f9:c7:07:fa:2f:
                    2a:81:eb:dd:22:dc:0c:cf:e6:e9:0b:5d:c5:d2:fe:
                    b2:02:34:7a:ee:3c:2a:33:14:db:55:43:da:ae:47:
                    ef:ae:d4:ad:bb:90:aa:1d:bb:4b:db:14:19:4e:5a:
                    4e:16:c0:94:56:5a:fb:21:3c:af:f5:38:49:40:82:
                    f6:51:e6:db:59:c9:02:e2:38:7c:c0:84:4e:ad:47:
                    28:dc:f2:92:83:9a:97:43:e3:4f:f1:56:06:49:10:
                    8d:51:10:6b:74:6c:91:c8:22:04:e2:59:18:c1:9d:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AC:0A:AB:68:9B:51:A2:58:C1:57:70:E6:71:03:9F:F4:1C:FD:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/a006277e-88c8-325b-b138-bbfc7abf1ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999/31c5953d-e37e-4639-a814-20faebab1999.crl

            X509v3 Authority Key Identifier:
                keyid:BF:91:09:05:0E:8F:F1:2B:31:C1:2C:8E:DD:F8:72:A7:BB:01:C8:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/31c5953d-e37e-4639-a814-20faebab1999.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:be:d4:02:cb:75:c9:65:43:f9:9a:5f:73:5d:2c:a6:ab:18:
         ee:de:ac:a1:2d:1f:8e:30:b9:c5:07:c2:8e:aa:ea:1f:e0:71:
         e7:ef:b3:d7:10:7c:0d:1e:84:a3:92:e9:7e:ba:0d:4c:38:18:
         b5:ef:3b:65:0e:38:74:b5:b6:8b:07:06:dd:54:f1:87:89:df:
         31:e3:c8:64:4a:e1:bb:21:ef:9c:86:e0:f3:6e:56:03:dc:31:
         b6:d5:9a:8b:e0:1d:b0:1d:3b:da:0a:28:15:54:39:76:98:75:
         a1:64:5b:84:f2:28:ce:ee:79:4d:58:af:16:0f:87:d6:eb:75:
         e1:e7:87:fa:2b:da:a1:0b:07:6e:8c:f9:39:fa:24:02:bb:b3:
         97:c6:44:4f:2e:3b:c8:ed:de:62:4c:53:6b:f0:80:49:2c:1b:
         37:1f:ad:0d:6f:2f:d2:13:12:8a:20:34:05:67:81:e8:91:82:
         99:2d:49:f0:65:1e:7d:16:f4:2f:35:79:0c:cb:7d:c3:65:c7:
         18:54:80:38:be:83:0e:73:07:51:2e:21:76:8c:b9:3e:5c:4f:
         6b:6b:05:c6:60:a4:00:24:a5:ec:00:3e:a9:28:ab:5b:85:29:
         97:2b:3b:7c:53:e8:25:fc:7e:74:21:08:dc:19:bd:64:c8:94:
         75:40:dd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:00 2025 by rpki-client