Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4139eca6-6259-3ed1-890d-09f137a3cb89.roa
File:                     4139eca6-6259-3ed1-890d-09f137a3cb89.roa (raw, json)
Hash identifier:          PQDaY3x5xepgLcSosBUBprBqCflWzqPf+jX/yvsH+xM=
Subject key identifier:   7A:A7:3F:52:2D:F7:E4:59:D9:BC:EB:46:CE:C1:48:E5:43:FA:8A:F9
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F432858497F099B51BC3BE4A2789B2100
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4139eca6-6259-3ed1-890d-09f137a3cb89.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     61112
IP address blocks:        2602:fa4f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:9b:51:bc:3b:e4:a2:78:9b:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=e5e25065-8c47-41cd-b18a-40d1755072ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:50:26:5b:78:94:b7:4c:32:58:f1:d9:e7:
                    41:94:6a:60:be:d1:b4:1c:f4:2b:86:8c:ec:c0:de:
                    4b:48:5d:58:2d:0d:d7:06:b8:34:05:0c:2d:24:24:
                    f7:db:0b:a9:08:d7:bc:39:f1:01:44:5f:54:8b:fe:
                    0c:84:38:d0:e8:1c:d0:fb:f7:0d:dc:08:44:49:93:
                    23:62:04:80:60:86:ff:cc:7d:30:19:05:14:6a:50:
                    9b:18:99:97:5d:4a:f4:d3:12:82:84:14:49:fb:69:
                    69:f6:b4:07:fd:0f:49:6a:34:66:fd:42:8a:08:00:
                    c9:9e:6d:f4:b6:3e:32:33:a4:22:87:1f:22:95:28:
                    09:78:f6:5b:e7:61:6d:6f:88:2b:ff:3a:a1:c3:1a:
                    65:97:a6:4a:5e:45:be:b6:26:87:a7:bf:dd:d6:a1:
                    22:47:0e:dc:2a:45:04:51:ff:5e:37:66:7a:fb:88:
                    50:c6:a0:f3:61:3c:02:ab:da:d6:4c:fb:d2:2a:1b:
                    86:14:3e:8a:02:a6:ca:a6:95:23:ab:85:20:6b:84:
                    7f:7e:2a:98:ad:32:b2:e7:a3:51:ce:91:c9:3c:97:
                    7f:f7:21:d1:87:a1:89:15:5a:f9:1b:90:b9:51:c1:
                    29:a3:c8:bf:ca:80:bf:de:04:5f:89:47:05:b4:b3:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A7:3F:52:2D:F7:E4:59:D9:BC:EB:46:CE:C1:48:E5:43:FA:8A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4139eca6-6259-3ed1-890d-09f137a3cb89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7d:ca:a9:27:3c:74:8d:6c:fc:89:9f:a5:c0:6b:b9:02:3c:
         f6:89:a7:bf:da:5f:56:9a:6e:70:54:39:95:60:5f:0a:54:a3:
         61:d6:27:5d:41:61:bd:af:18:22:c5:88:f7:b5:c8:e1:89:62:
         4c:1b:1a:e4:bd:d2:a9:9c:57:3c:2c:ed:28:4f:f5:03:67:d4:
         09:7b:43:55:23:99:8b:48:55:e1:db:23:8d:14:cf:07:e1:e2:
         de:2b:75:6b:72:eb:db:70:62:00:fa:99:8c:84:cc:f0:8b:38:
         9b:08:21:9b:b1:2f:e1:68:e7:0e:9e:83:d7:ce:5f:79:73:3e:
         de:67:f8:6d:eb:f6:51:5a:98:8f:f8:29:ec:1d:91:77:fc:d5:
         78:cc:8a:c1:75:50:1e:1d:dc:f8:ab:dd:6d:e5:d1:4b:6d:ec:
         4a:e2:75:66:75:f3:49:c2:2c:db:26:5b:f9:66:1d:fd:59:85:
         82:7e:21:29:a9:40:ee:f3:cc:da:34:bc:0f:d9:5d:71:6c:cb:
         60:8d:d0:62:47:2b:41:0c:f2:53:2d:e2:17:51:05:33:a0:36:
         2b:25:5e:07:91:84:cb:bf:c7:0c:e8:75:51:c1:eb:64:8e:b6:
         f5:31:7f:e5:bd:2c:a4:b0:1b:ce:be:a1:f5:04:09:8c:e6:df:
         54:fc:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:20:03 2025 by rpki-client