Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa
File:                     efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa (raw, json)
Hash identifier:          rUo6z4MyLpwiHDENNQ5Ukuleue4PE2a1ZjslxYQQ4Bg=
Subject key identifier:   AE:E9:BA:2B:CE:C5:70:AE:10:FE:5B:92:91:90:0C:9A:0F:28:F0:FC
Certificate issuer:       /CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
Certificate serial:       010D0C9F4328584961B981AE83EDE642054A6700
Authority key identifier: C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     401578
IP address blocks:        2602:f739::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:81:ae:83:ed:e6:42:05:4a:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=f822b05b-c855-4647-a838-bfa0a0fea8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:18:d7:2b:b0:5b:3d:7c:66:79:cc:eb:19:
                    1f:76:d9:20:58:46:22:da:1c:6a:bc:57:4e:6b:bc:
                    4f:79:4c:60:6e:16:3c:e8:27:12:ca:09:c9:bc:e1:
                    06:4c:06:d2:82:46:98:6d:42:8f:53:bb:92:83:a7:
                    96:03:97:4f:7f:cf:b8:99:77:ec:00:9a:94:93:2d:
                    2c:b0:db:07:e9:aa:b4:6f:bc:5f:3b:2a:3c:3c:46:
                    52:f0:af:d1:e2:39:6f:e3:49:5b:1f:c3:9f:ba:84:
                    89:cf:ba:47:2e:84:7a:55:f7:76:3b:49:ea:5a:68:
                    4f:50:1a:a2:72:17:0c:bd:da:4b:da:14:1c:bc:90:
                    a5:b4:9a:6d:ba:2c:ee:1a:13:20:09:39:0d:5f:0a:
                    8c:af:af:2a:07:2a:1a:bf:a6:52:24:60:e7:95:79:
                    37:f4:d5:16:13:5e:3f:4c:1a:bb:a3:b8:77:1d:0e:
                    16:f7:07:2b:21:5a:64:7e:6c:b7:04:67:68:00:b0:
                    45:34:6f:ad:70:3e:7b:9d:1a:ff:9c:4e:ef:1d:73:
                    d0:c2:1f:60:69:82:4c:cd:1e:5a:2e:d0:98:af:95:
                    85:c7:95:3d:22:57:37:3e:80:5e:4d:da:2d:88:ce:
                    32:49:27:83:50:b5:8c:e7:b7:9c:4c:ef:52:85:85:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E9:BA:2B:CE:C5:70:AE:10:FE:5B:92:91:90:0C:9A:0F:28:F0:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/efc746f0-f8d2-385b-85f0-01e0ba70dbbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl

            X509v3 Authority Key Identifier:
                keyid:C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f739::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:19:b3:94:2d:23:cb:e2:ec:1c:64:ef:31:08:43:9b:da:
         dd:c5:b0:c9:3c:2f:3a:48:a2:17:8f:e1:0f:dc:94:25:12:9d:
         25:57:8a:b2:98:a9:b6:62:6a:13:5a:ae:58:96:24:c2:23:c8:
         63:0f:3e:ec:7d:4d:41:86:73:68:ea:0a:da:9f:d9:8b:fa:bc:
         d5:a7:9a:a2:96:e1:5e:ac:e4:a3:b5:34:cf:c9:b6:4b:df:8d:
         77:54:34:23:84:8c:94:22:f2:eb:51:25:0e:2b:12:22:8c:5b:
         70:6d:91:cf:aa:e3:63:e3:ff:e4:91:c4:03:97:8e:f4:db:63:
         c5:3c:14:53:56:b1:82:e7:f7:69:a5:32:75:59:b8:30:f1:bb:
         9d:b1:1d:71:78:44:55:68:48:58:c7:16:7c:ca:b0:a3:f9:32:
         61:5f:cb:2d:5a:f9:94:bd:a6:c8:4e:60:7e:0f:61:60:43:45:
         0c:ac:9d:d0:58:42:e0:cc:b2:39:58:f9:bb:18:97:d6:c4:3e:
         71:c9:c8:af:a8:e7:7c:a9:43:c4:34:e9:aa:cd:e3:c6:77:0b:
         7d:69:d3:43:00:69:f2:88:d7:c5:2a:9e:00:8d:1d:0a:9a:5b:
         76:94:57:a4:9c:23:00:67:eb:73:28:b1:f1:25:b7:fd:f8:d3:
         f5:0d:6e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:10:16 2025 by rpki-client