Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa
File:                     994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa (raw, json)
Hash identifier:          h5XirJBzKewGZoI7uIyrW4baykXC/5XkYI7c/IKNY6Y=
Subject key identifier:   80:22:A2:42:E3:21:1F:89:2A:75:3C:45:BE:A7:57:A8:7D:71:BC:AC
Certificate issuer:       /CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
Certificate serial:       010D0C9F43285849A1EF6A0FC29E49522E276180
Authority key identifier: C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     400541
IP address blocks:        2602:fb56::/40 maxlen: 40
                          2602:fb56:100::/40 maxlen: 40
                          2602:fb56:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:6a:0f:c2:9e:49:52:2e:27:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1788a941-40a6-49e3-abc6-1f51f11e6f3a
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=7760ee8a-281f-4036-9318-4ef56f179433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:80:ca:88:8e:cc:c6:5c:ad:7b:77:f5:b7:e2:
                    72:b7:a5:36:ce:77:9e:58:81:c2:aa:a9:5c:c4:f3:
                    a4:8d:8f:a4:e0:bf:79:3c:c8:bb:c4:b7:9b:93:91:
                    41:38:a2:c0:21:4d:ee:7d:a9:be:7c:43:f6:23:f7:
                    65:f8:ca:fc:16:b7:13:00:b5:48:99:f9:d4:2d:0d:
                    48:03:30:b8:1b:ed:01:56:f5:09:92:d3:e0:d4:77:
                    9e:b4:02:8e:e5:be:3f:8d:1e:6b:3b:d6:d3:84:43:
                    52:3c:b7:84:0d:b8:f2:16:8b:0b:c1:02:53:49:50:
                    6c:37:cb:1f:16:61:d4:e9:37:36:14:02:15:fa:b6:
                    b8:fe:e6:58:a1:f2:a5:32:c8:27:ea:e8:50:bd:b6:
                    31:ed:28:6f:ad:7c:02:19:16:25:1f:c9:7c:2a:09:
                    9c:ea:b0:1d:13:6b:61:31:20:e6:b9:ec:d3:f6:1a:
                    4c:17:13:10:58:fb:30:cf:64:77:ff:82:1f:c5:d8:
                    7c:f7:f0:ea:e5:4e:e4:5f:e3:b6:a0:b6:cc:37:74:
                    ed:41:77:a4:2b:86:87:26:01:32:6b:aa:0e:dd:ea:
                    a0:cc:fb:42:a5:95:d9:1e:cf:49:d6:55:82:b2:cd:
                    b3:82:ba:10:06:ad:9c:92:31:c9:6e:87:60:e7:61:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:22:A2:42:E3:21:1F:89:2A:75:3C:45:BE:A7:57:A8:7D:71:BC:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/994ccb96-b4ee-39eb-81f9-d3694149ed6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a/1788a941-40a6-49e3-abc6-1f51f11e6f3a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:E7:19:9F:DD:17:25:4E:CC:CF:F9:A1:21:F2:61:54:A2:B1:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1788a941-40a6-49e3-abc6-1f51f11e6f3a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb56::-2602:fb56:2ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a0:a2:f5:d8:62:3a:89:3b:26:e3:da:0a:97:66:df:c0:12:
         30:e9:44:c7:99:4d:72:4d:0d:21:67:ea:82:ca:67:8e:96:f0:
         c9:fa:36:b1:a3:49:77:f2:8c:f3:0d:82:82:83:da:75:38:79:
         7b:67:a2:5f:5f:1a:14:d3:a4:71:92:e8:2c:94:7b:15:a9:a8:
         90:9f:9c:81:b1:ce:01:99:f8:d1:01:b0:7b:a6:9b:85:87:e5:
         6d:94:58:ed:21:9f:5c:e5:66:c1:08:2a:69:38:b7:0b:d1:14:
         d8:b6:f6:7b:b2:d3:d0:7d:d6:8d:52:a0:8c:8f:02:a0:53:63:
         59:ed:11:d3:f8:a0:71:8d:24:75:09:63:76:c1:78:22:ff:dd:
         f1:f3:25:e7:db:f4:56:4e:fc:a1:31:c5:ce:87:44:b7:2d:5b:
         54:99:a2:1b:3a:89:0e:8b:9f:c7:a3:4d:63:d8:26:ac:1d:68:
         fe:c7:7a:fc:f1:c7:02:e7:07:d5:4f:5f:87:3d:92:6e:61:ac:
         6e:aa:f7:cb:66:f8:fd:30:db:57:b5:9c:31:8e:2d:d3:6e:83:
         cc:ed:8d:11:99:f5:48:b4:3f:e9:a3:fc:d4:1c:75:07:6d:4c:
         31:d3:f1:19:2d:24:5a:73:bc:8c:d2:23:50:3c:25:70:a8:f6:
         44:3b:6e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:21:50 2025 by rpki-client