Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
File:                     62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa (raw, json)
Hash identifier:          qK5zg/EM2j1BrY9v4NtQNIpbgWaRU/DMmetE6qPUDn0=
Subject key identifier:   4B:89:8D:82:1F:8C:93:2B:D1:9D:9A:00:79:2A:37:72:03:56:D7:68
Certificate issuer:       /CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
Certificate serial:       010D0C9F4328584A2CE3B88E0E4E220C76386DF0
Authority key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     399525
IP address blocks:        2602:fc9e::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:e3:b8:8e:0e:4e:22:0c:76:38:6d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=cf0d2a85-ce15-4d74-a11f-0a4eb495583c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:0b:23:17:2b:b5:f9:cd:f0:fb:65:82:d0:
                    2d:d6:c9:97:a5:f4:80:80:46:2c:b3:d6:e0:f7:bf:
                    b1:e8:91:85:79:06:f2:e7:10:5c:26:88:27:3c:f3:
                    30:45:9b:80:ae:eb:f9:e3:8c:3e:32:c0:32:b0:d1:
                    6b:8f:68:94:d9:03:0d:a9:9d:f4:2c:6b:73:21:a4:
                    76:9c:cb:42:bf:af:7c:f9:c7:d1:b4:7c:d9:f2:62:
                    74:aa:f8:06:d6:f2:28:2d:3d:ee:8d:59:9b:7a:f8:
                    40:f3:e4:78:5c:2f:23:92:60:0d:17:9b:da:f7:22:
                    be:55:d4:f4:0b:6e:a8:f6:5f:18:32:ed:25:4c:6d:
                    fb:ad:ed:c8:5f:b3:8f:f6:d6:14:93:d9:41:79:86:
                    37:14:d8:e9:49:e3:9d:2e:50:dd:1f:26:fa:f1:2f:
                    dd:3c:e3:2a:f9:29:3d:12:21:18:1e:e5:d2:e0:a2:
                    57:f7:61:ae:6d:9c:92:db:96:82:d5:37:d8:00:da:
                    ac:4a:1c:e6:dd:61:dd:9d:f0:6c:89:1a:81:09:45:
                    60:a3:42:0d:16:7a:49:45:46:bf:09:ba:fc:3e:46:
                    fc:c1:3f:56:d5:b6:b8:20:8b:9d:59:d2:c7:de:1f:
                    5b:4c:6d:f3:a6:0d:a2:4c:82:d1:13:63:c2:4b:9e:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:89:8D:82:1F:8C:93:2B:D1:9D:9A:00:79:2A:37:72:03:56:D7:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl

            X509v3 Authority Key Identifier:
                keyid:FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc9e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:10:26:02:d6:16:d7:7a:0f:0c:da:35:ca:11:09:d8:f8:28:
         40:a0:86:be:91:bf:a7:1d:a5:aa:21:dd:ac:a9:2c:29:49:79:
         f8:02:f5:da:ee:f7:1b:d5:fa:5e:4f:81:fe:b3:5e:28:42:81:
         f7:ae:11:36:86:3f:d2:0f:4a:a1:db:92:a0:02:7c:b6:6c:74:
         7c:ca:c2:25:6b:13:64:23:fa:82:1d:d0:cb:fa:5c:dc:fd:0a:
         16:c5:e9:f2:b3:05:41:9d:e7:6c:d5:3f:b7:c3:55:76:d7:00:
         3c:52:51:c1:af:5e:d1:34:cc:99:e3:cd:a4:3c:2e:a3:bb:6f:
         60:5f:64:0c:5e:8e:67:9e:88:f0:52:a1:cb:ba:09:e2:e6:59:
         c6:5a:6f:3b:7a:61:9f:fb:c8:61:53:c4:d4:ab:f0:52:1b:94:
         ca:58:f9:3a:ae:79:b1:2a:57:3d:09:ef:28:b9:93:53:3b:70:
         88:70:97:30:d3:9f:95:d6:27:5c:ff:2b:92:71:18:c2:0a:c2:
         e9:be:28:58:c8:7b:e6:d9:01:24:7a:ea:b7:5e:2a:c2:9e:8e:
         21:41:02:c7:9c:a2:de:2b:d0:33:f3:64:65:4b:f4:6f:a0:d3:
         61:f0:87:cc:fa:5b:fe:fd:23:96:45:86:c0:78:d5:92:f7:84:
         5b:24:13:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:05:48 2025 by rpki-client