Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d567c5e4-ea0b-377b-8b42-6c3d68c8b992.roa
File:                     d567c5e4-ea0b-377b-8b42-6c3d68c8b992.roa (raw, json)
Hash identifier:          sdp9cnq+Psz9HVjuE/18Civta7eOYrpd+EJv1n+7YR0=
Subject key identifier:   AF:2D:2C:6F:98:D9:4C:D9:69:18:AC:72:06:4D:D3:CF:44:C3:15:7D
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F4328584976A9971928213431F3971580
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d567c5e4-ea0b-377b-8b42-6c3d68c8b992.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     401390
IP address blocks:        2602:f7da:39::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:97:19:28:21:34:31:f3:97:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=23791725-416c-439f-957e-2a50f465b0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:aa:4f:60:93:42:f7:a3:dd:7e:40:11:f0:0a:
                    c0:8b:55:43:ab:4f:87:96:31:ab:e3:a8:5f:63:5d:
                    a6:c7:33:55:f7:42:4e:dc:ce:d6:f6:e1:57:8c:1b:
                    c6:d6:72:5a:b5:38:b7:5d:5d:36:9d:91:02:1e:d6:
                    85:98:3e:b7:46:41:93:cb:f6:01:5c:f7:3b:d2:66:
                    6b:05:46:0a:b2:c3:6f:bf:aa:14:fd:cb:18:a2:ca:
                    00:b3:10:36:2a:4d:4a:ea:64:be:47:89:95:08:06:
                    0c:bd:fa:c0:c3:31:d5:f7:86:e4:26:9b:17:a5:92:
                    84:e6:b7:c4:86:4b:7a:33:3a:5c:0a:d1:d4:77:47:
                    7e:7c:f2:c0:95:ed:b5:93:58:41:ca:0a:3c:bd:bb:
                    c5:c7:53:ba:6c:03:79:89:3f:a7:7e:91:b9:de:24:
                    f0:eb:98:b2:82:b9:32:1b:8b:af:35:5a:92:89:d1:
                    c0:39:26:62:5c:72:33:ae:6c:8a:0e:9d:91:00:a8:
                    d9:2c:05:50:b2:bf:a3:70:25:1d:68:a0:64:a8:7c:
                    81:15:a2:36:75:69:0b:f5:13:8b:80:45:c4:b2:76:
                    ec:a2:70:76:2c:b4:9b:53:79:d7:77:62:76:d0:1f:
                    f9:c8:42:06:31:57:90:48:78:ea:a0:18:3c:2b:f3:
                    66:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2D:2C:6F:98:D9:4C:D9:69:18:AC:72:06:4D:D3:CF:44:C3:15:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/d567c5e4-ea0b-377b-8b42-6c3d68c8b992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7da:39::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7b:cc:6e:ca:84:2e:cd:f7:76:bb:14:a8:8c:c6:ce:8c:9e:
         c8:89:b1:12:8d:a9:52:6d:55:b3:3e:4f:d3:aa:5b:d7:bd:62:
         07:ac:74:14:67:1b:6d:51:a2:e5:fc:8d:25:3c:81:df:ec:2b:
         5a:24:e7:6f:f4:43:15:88:23:33:7a:c7:cf:3b:5a:35:4e:eb:
         79:b9:42:6a:bd:5e:36:d8:7b:63:01:b2:61:52:81:92:24:7a:
         84:00:71:43:b2:54:ea:fc:4b:77:64:e7:73:e1:fa:b2:20:99:
         ce:2e:58:bd:8a:08:dc:20:bb:79:f4:af:0b:32:c8:fd:68:49:
         4a:ea:ef:4b:26:48:75:57:94:e1:b9:0d:26:02:32:28:45:d6:
         94:93:1f:1b:b9:b9:9a:27:ce:ec:8a:b9:0a:22:34:d6:4a:d2:
         8c:95:f1:59:37:c5:f2:e6:43:bb:76:13:5a:51:ef:38:8a:26:
         ca:e7:8d:6e:2a:ca:79:4b:09:fd:b0:2f:54:18:0c:ed:8a:19:
         a5:8c:4c:66:76:08:cc:db:14:a7:ee:24:99:fc:a6:be:47:35:
         45:76:3d:2c:cc:42:b4:b7:74:20:47:62:34:bc:df:f2:31:7c:
         dd:2f:57:6b:11:83:12:29:8d:64:72:46:44:3e:3e:3a:31:bd:
         e7:f7:0f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:54:00 2025 by rpki-client