Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/4aefe46d-a1ac-3521-a56a-a07d158cf3bb.roa
File:                     4aefe46d-a1ac-3521-a56a-a07d158cf3bb.roa (raw, json)
Hash identifier:          ff0YQ9sjF/F6ZQ/BydwkcUYc1WuAddGEBukjQBhTfxs=
Subject key identifier:   09:A2:A8:C5:5A:D2:AC:88:0A:1F:F5:33:14:EE:41:26:15:8D:97:9D
Certificate issuer:       /CN=9af44307-21f9-411b-ba04-dedf105fd206
Certificate serial:       010D0C9F432858491CB782DBE43D096C70DA3D80
Authority key identifier: 73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/4aefe46d-a1ac-3521-a56a-a07d158cf3bb.roa
Signing time:             Fri 07 Mar 2025 19:46:13 +0000
ROA not before:           Fri 07 Mar 2025 19:46:13 +0000
ROA not after:            Thu 05 Jun 2025 18:46:13 +0000
asID:                     54365
IP address blocks:        2602:f6c6::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1c:b7:82:db:e4:3d:09:6c:70:da:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af44307-21f9-411b-ba04-dedf105fd206
        Validity
            Not Before: Mar  7 19:46:13 2025 GMT
            Not After : Jun  5 18:46:13 2025 GMT
        Subject: CN=2e0a24e8-793d-4cf1-a70f-d6e3d88b27f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:65:a5:be:61:56:07:32:13:19:b4:ea:cc:
                    5a:66:26:4e:ed:92:1d:3f:d0:6e:d5:32:50:60:c4:
                    a0:3a:51:55:6f:99:7c:4f:75:a9:7a:5d:e2:3d:6f:
                    53:0c:2d:25:0f:1a:dc:92:df:37:1c:40:05:fe:fe:
                    a2:ba:ac:d7:29:f6:78:dc:97:58:1e:83:cb:2d:c2:
                    c1:27:ac:48:85:d6:af:b9:51:42:fc:4f:18:20:19:
                    be:dc:63:ef:7c:88:c2:29:0d:8b:d5:77:9e:bf:57:
                    a6:5e:97:9a:6c:48:70:ad:98:51:57:37:91:e9:d9:
                    c1:c4:fd:3b:d3:20:a2:b5:f5:79:70:b4:59:24:e9:
                    23:5c:2a:87:6d:d6:c9:87:cc:31:b4:13:18:ff:64:
                    f6:a1:57:06:31:bb:00:db:20:21:b8:9c:d1:46:0d:
                    36:c5:60:78:75:38:43:ad:d5:b4:70:c2:2b:ca:04:
                    f9:f8:c2:3f:41:57:36:8a:5d:4d:70:c7:40:6a:41:
                    42:99:01:30:50:7a:99:fa:a8:7f:78:81:31:f2:28:
                    e3:4d:f5:53:7a:f4:15:b2:ae:5a:ad:ab:6c:fc:a7:
                    a5:e8:5c:1f:6f:14:e0:c5:0b:5d:00:b3:21:cf:7c:
                    08:45:a1:8f:3f:49:05:23:39:a8:da:6c:7d:38:90:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A2:A8:C5:5A:D2:AC:88:0A:1F:F5:33:14:EE:41:26:15:8D:97:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/4aefe46d-a1ac-3521-a56a-a07d158cf3bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl

            X509v3 Authority Key Identifier:
                keyid:73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6c6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:be:6a:84:5f:83:d0:cb:81:5c:98:45:53:02:a0:24:5f:e4:
         a2:f0:66:7a:61:61:c3:04:92:c2:0b:2a:85:6e:b3:94:4e:fe:
         9d:29:b9:c7:9b:d0:3f:f2:5b:48:12:c4:2d:a6:d3:42:cf:21:
         6a:96:f0:ce:1a:56:03:ab:8c:de:15:67:04:b0:99:74:8d:22:
         b2:1f:18:df:82:d0:40:f1:4f:c9:9b:d9:b3:77:1a:7e:2a:50:
         32:f0:67:41:79:99:0b:39:3c:ca:12:b5:aa:0f:93:5a:32:7b:
         be:1b:dd:1a:87:13:29:b5:33:d0:1f:58:f8:4a:83:74:97:c4:
         e8:f8:cd:44:d5:ce:ad:45:89:2c:bb:a3:9f:f4:4a:b7:41:0c:
         ca:0f:d1:83:15:ad:e4:c8:31:e7:f7:98:9f:e1:76:cf:d3:a1:
         97:3e:bb:a3:5d:28:23:bb:1e:97:af:99:8f:de:02:69:19:80:
         ec:49:a7:fc:07:32:9c:be:93:db:a5:1d:c2:46:f5:70:fa:75:
         a7:b3:db:f5:e4:21:dd:ad:ab:32:c9:fd:ea:9d:55:43:d0:75:
         b3:71:92:3a:20:c6:bb:a4:2b:bd:d2:93:f9:e4:3e:f7:f8:fa:
         59:30:68:0d:1e:dd:21:19:65:c9:46:17:81:fe:94:a0:6c:15:
         ad:e7:7e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:02:27 2025 by rpki-client