Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa
File:                     7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa (raw, json)
Hash identifier:          4K4pccPlAPAgrPIFntrmzwnAJShsH1/VGI8Rd11gWjM=
Subject key identifier:   DE:0A:92:74:BF:BF:7F:5A:65:99:02:A8:A2:53:9C:54:D4:3D:36:95
Certificate issuer:       /CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
Certificate serial:       010D0C9F43285849A8E9DEB6CF9833817CEAF940
Authority key identifier: 0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     14217
IP address blocks:        2602:f96f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:de:b6:cf:98:33:81:7c:ea:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=404002de-4d32-4deb-85ed-985ec094d397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:88:7e:97:d1:94:aa:26:54:5a:9a:d2:6b:
                    a4:27:bc:2a:a9:fa:28:6e:b4:b7:1b:84:7d:b7:19:
                    62:ed:71:42:72:04:17:94:f2:ba:b1:37:ae:9d:bb:
                    40:74:24:58:c6:c6:c3:04:3d:a1:70:28:fe:40:1b:
                    e2:3e:6e:6b:1e:35:23:2c:ee:36:a8:7a:ab:e7:1f:
                    5e:12:5e:6c:52:f2:11:9d:d2:86:1b:8b:d8:be:3f:
                    81:c8:93:1d:1a:ef:d0:e1:d6:33:e8:df:33:08:1d:
                    40:0f:0e:28:8d:87:39:4d:86:1f:a3:6d:cb:30:2b:
                    ff:c2:a1:54:16:18:68:0a:f5:08:85:7a:de:3f:d8:
                    41:8b:c0:9c:73:07:36:d7:24:2f:c0:70:bd:2c:87:
                    78:d4:f2:64:95:e5:01:d1:b0:69:8f:6a:81:4b:a1:
                    ba:51:45:9d:9a:0e:2f:07:1b:fd:e9:4c:ca:8f:b1:
                    e8:57:96:cd:af:75:dd:0e:27:b1:15:2c:50:92:19:
                    61:33:51:31:2a:8a:9a:2a:49:ca:f0:cd:56:4d:60:
                    23:f6:9e:a1:89:50:7c:0c:e0:21:ad:4f:a3:54:f6:
                    05:28:71:8b:55:f2:a6:13:90:10:fe:35:a0:69:d6:
                    1c:eb:dd:53:96:19:6d:12:cf:aa:a9:d5:d4:0c:e7:
                    be:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0A:92:74:BF:BF:7F:5A:65:99:02:A8:A2:53:9C:54:D4:3D:36:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e0:11:c3:c4:eb:7c:0d:51:8f:a2:d9:be:d4:28:56:2f:f3:
         e2:5a:bf:46:07:1b:59:f0:6b:17:cc:62:6c:55:18:f6:81:2c:
         ec:e5:36:b9:9c:c2:24:28:db:5f:f1:0a:4a:8a:61:c6:2c:26:
         a9:a1:18:c6:63:27:7e:b8:d2:77:8d:6e:c3:da:a6:3a:8b:38:
         99:a5:35:11:3f:b7:7d:5a:fb:e8:87:2a:1b:8a:af:96:5c:c4:
         7c:e0:2f:74:7e:0d:c1:a0:26:f9:8a:e8:60:76:0f:a5:82:ed:
         80:1e:ee:bc:11:01:e8:a1:b9:c9:29:19:77:93:e9:45:63:18:
         0d:7e:9e:9c:27:98:44:12:09:de:32:07:97:6e:53:40:41:29:
         2d:c0:6a:8c:99:27:a8:e3:cf:ff:fc:9b:01:13:2a:84:a0:36:
         3a:0d:48:3b:c0:18:bf:f9:f1:a7:44:18:9d:ea:bc:3b:e6:6b:
         83:ba:ab:02:b5:83:69:7d:34:63:54:8f:8d:39:f8:95:85:be:
         f2:d2:f8:a1:d8:86:32:44:a4:b0:19:60:b4:62:eb:54:0c:af:
         cc:5c:57:72:05:1c:33:f6:8b:1a:ec:3c:58:3a:a6:f4:1a:77:
         18:eb:be:4a:81:d4:bf:99:d1:5f:7e:c4:42:c9:5b:bf:18:a8:
         7c:44:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:25 2025 by rpki-client