Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d2362234-9c1e-344f-b444-d1fd331ffa47.roa
File:                     d2362234-9c1e-344f-b444-d1fd331ffa47.roa (raw, json)
Hash identifier:          cKLz0Alx4vI4ivFbhCDZYkgPzN9LVvJNI2oFjLrJKg4=
Subject key identifier:   09:FC:A2:AB:3A:C2:CD:1A:20:09:5D:B6:CD:ED:9E:86:96:C6:C6:FD
Certificate issuer:       /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial:       010D0C9F4328584993F9E173EA8026BACFAC9720
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d2362234-9c1e-344f-b444-d1fd331ffa47.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     203023
IP address blocks:        2602:f93b:a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:e1:73:ea:80:26:ba:cf:ac:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=411fb5bf-2345-4237-a0bc-42d7be5e4011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:40:b0:c3:fa:a1:9c:05:58:50:79:82:7b:
                    d1:a3:ab:15:b0:fa:d4:49:ee:42:f1:62:c5:98:9c:
                    c3:78:5b:9c:da:e1:48:bf:2c:6d:e9:d4:d2:4a:42:
                    a7:2b:e0:09:99:dd:21:a7:e5:c5:fd:06:d0:1f:78:
                    89:d7:67:19:b7:8a:86:6a:db:97:be:30:34:77:1f:
                    0b:30:6b:cc:cf:c7:2f:16:63:fa:a5:95:67:d2:87:
                    3c:6f:1a:6b:ae:6f:f1:fe:c9:e9:5d:33:a4:59:78:
                    90:ff:54:15:b8:17:d8:64:d6:5e:89:86:c0:fe:89:
                    5a:89:22:4e:8b:69:da:f0:c1:7d:d5:9f:f7:e3:6a:
                    5d:75:b9:8c:2a:76:b8:82:95:a1:ad:de:d1:4c:f3:
                    f7:e6:a1:bb:b5:4f:8a:3e:c6:b5:4b:b8:69:2c:59:
                    b7:df:8f:d7:dc:0a:f5:39:35:0a:71:5e:a8:df:d0:
                    84:8d:bc:eb:2b:34:9b:11:51:61:6c:cc:2e:79:97:
                    01:f5:b5:76:01:17:33:4f:73:72:93:88:21:24:ec:
                    cf:4e:ca:84:c6:8d:58:62:57:31:41:f3:7e:c3:a5:
                    c0:c5:8d:31:ac:f6:13:80:55:cd:e3:c9:92:c3:25:
                    10:a8:d2:f8:35:fe:ce:e5:c6:9a:d1:f5:07:49:74:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FC:A2:AB:3A:C2:CD:1A:20:09:5D:B6:CD:ED:9E:86:96:C6:C6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/d2362234-9c1e-344f-b444-d1fd331ffa47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f93b:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:37:89:71:a0:e7:b0:8a:05:f9:b9:c4:02:a2:80:45:1c:f6:
         ce:79:16:ac:17:bf:d1:2a:c9:69:41:4f:78:98:26:d2:a7:34:
         c6:34:c2:5b:47:0b:26:e4:ce:b3:d7:29:fc:a8:b5:ef:f8:df:
         ad:19:91:7e:81:c6:82:46:d6:66:01:2e:57:8e:94:db:ae:90:
         80:4a:25:04:e1:03:44:2e:37:65:d5:61:80:fc:a7:e7:4b:9f:
         f6:8a:64:e1:c1:69:82:51:e2:10:fc:da:93:07:3d:38:09:4a:
         90:98:0b:87:a7:5b:0a:88:73:37:df:6c:26:42:77:67:20:a9:
         6b:2e:61:7f:d1:43:de:4c:3e:1f:d7:18:0b:ca:ec:ed:82:d4:
         bf:7e:17:31:c1:62:a4:01:5e:b8:57:23:66:0a:48:5b:85:39:
         5c:1a:19:19:1d:ac:50:50:d8:72:cd:35:3c:ec:05:c4:e1:75:
         29:ca:8c:ef:c1:55:93:d7:66:c3:c3:f4:0e:80:97:8d:65:cc:
         c4:16:85:1e:3b:63:a5:3f:71:a0:d4:c4:1e:01:11:16:b4:9e:
         8e:81:24:d3:c7:1e:95:8b:83:fe:c2:03:c7:9b:7b:52:8b:08:
         95:cd:7b:8a:61:81:2d:11:1c:aa:1f:7e:f1:18:5b:2b:fe:3b:
         6f:2e:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:32:20 2025 by rpki-client