Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a6b09397-d770-3282-8e4f-62270dbc7da9.roa
File:                     a6b09397-d770-3282-8e4f-62270dbc7da9.roa (raw, json)
Hash identifier:          dyPt0S7qCUyBnfyBHbjPcy1ziOj5/V9zN3ExC1TmeUM=
Subject key identifier:   56:1B:15:F1:EC:F1:86:AF:C1:96:03:8A:D6:9C:12:04:B5:C8:A1:0C
Certificate issuer:       /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
Certificate serial:       010D0C9F432858493BEF4E1852C9F62C64C957C0
Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a6b09397-d770-3282-8e4f-62270dbc7da9.roa
Signing time:             Wed 19 Mar 2025 00:08:41 +0000
ROA not before:           Wed 19 Mar 2025 00:08:41 +0000
ROA not after:            Tue 17 Jun 2025 00:08:41 +0000
asID:                     14618
IP address blocks:        2602:f74b:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:ef:4e:18:52:c9:f6:2c:64:c9:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
        Validity
            Not Before: Mar 19 00:08:41 2025 GMT
            Not After : Jun 17 00:08:41 2025 GMT
        Subject: CN=258adbc1-6e45-4ec9-b21d-fe18a9fddc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:61:db:72:66:55:3d:99:9e:c3:b6:5a:29:
                    13:03:8b:59:55:ed:49:c8:42:1c:f9:9c:fa:35:83:
                    4d:71:ae:16:0f:5a:60:12:ad:87:92:50:58:3b:c7:
                    df:a9:e8:e3:e9:eb:12:b4:48:bb:48:f3:c5:54:6d:
                    c2:ab:98:e8:0f:03:ea:98:a8:87:58:32:3e:0f:fd:
                    76:92:73:6b:01:25:b4:5b:97:c9:ee:34:df:4c:83:
                    a3:ac:52:e8:34:e3:45:d3:2d:12:23:1c:e2:fd:fc:
                    e4:ad:0b:13:97:84:c9:8f:60:07:76:4c:28:93:5e:
                    32:68:e8:39:62:2d:48:cf:06:e9:17:8f:fb:1b:bb:
                    f2:c0:c3:1e:c8:b6:93:c5:6a:03:78:e4:5c:4a:d6:
                    21:03:65:f4:9b:00:8d:23:2d:27:35:ce:b2:80:65:
                    52:88:c9:ad:b5:5e:f5:2b:02:0a:55:ee:46:50:9a:
                    b3:ac:63:0b:ef:24:b6:77:43:06:8c:f1:05:d0:d5:
                    2e:a9:c0:53:02:20:01:f1:42:0d:d7:87:35:15:30:
                    76:c0:d6:76:b1:85:d0:95:64:e1:13:29:8c:c9:18:
                    a2:54:d4:c5:62:4b:41:3e:8f:c4:63:2a:89:cb:8b:
                    f8:09:d6:60:06:54:bd:5d:f5:9a:c2:ff:07:15:9c:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1B:15:F1:EC:F1:86:AF:C1:96:03:8A:D6:9C:12:04:B5:C8:A1:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a6b09397-d770-3282-8e4f-62270dbc7da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl

            X509v3 Authority Key Identifier:
                keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f74b:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:93:54:d8:4f:1d:db:d6:92:66:c5:a6:e1:ab:87:b9:39:65:
         ce:94:94:40:dc:2c:75:51:60:1c:42:ac:8f:86:4f:57:67:84:
         57:03:6b:e9:2f:c8:7f:21:c3:b2:c8:c4:cd:b2:83:cd:54:19:
         2c:35:34:f0:50:c5:8e:08:13:31:85:6e:cc:0a:08:17:b4:56:
         15:9f:ac:c8:be:14:1a:03:e4:2b:c9:bb:70:c9:9f:b7:d9:aa:
         e4:8f:5f:75:35:58:dc:75:cb:e3:72:90:8a:67:cb:71:50:8a:
         be:6d:a2:64:ab:76:c7:df:c8:1f:03:a6:79:31:37:af:7a:2e:
         4b:54:b7:1b:c4:a2:16:e5:ec:6d:a5:e1:7e:79:ea:1a:5b:fe:
         46:4d:a5:24:0e:0b:f8:02:f1:2d:01:62:76:1d:e3:b4:40:73:
         1f:49:95:f4:14:76:ba:86:b3:67:ba:8b:5b:24:70:73:ee:aa:
         7f:9d:0d:2d:74:5a:eb:5b:9a:88:64:2f:8d:6b:9c:8d:f0:96:
         aa:1a:4f:ea:ab:04:0c:50:8d:40:dd:9f:3a:a5:a2:8d:0a:dc:
         2b:82:ae:f2:a5:5e:ac:a3:b8:e4:94:31:29:71:e7:5c:ab:2b:
         27:45:4b:3b:1d:21:43:85:a1:17:62:fc:97:a9:82:0c:0d:fe:
         d1:f4:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:26 2025 by rpki-client