Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6a6395b7-200c-4ea4-8531-ec46be0840a1/823a634d-8dbd-3e74-a20f-a91af3b90db2.roa
File:                     823a634d-8dbd-3e74-a20f-a91af3b90db2.roa (raw, json)
Hash identifier:          7yQuYhCmZsq7HeeSIJ//ELvm6nvaCR1e2SDXz+2/yrc=
Subject key identifier:   5A:A1:7D:EC:E3:B5:74:BC:6E:84:26:F0:BF:E1:07:53:E8:F6:33:5F
Certificate issuer:       /CN=6a6395b7-200c-4ea4-8531-ec46be0840a1
Certificate serial:       010D0C9F43285849E0340918E84948D8889645C8
Authority key identifier: 46:EC:51:02:3D:77:BC:D0:18:ED:6B:5F:AD:82:85:9B:48:8E:F5:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6a6395b7-200c-4ea4-8531-ec46be0840a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6a6395b7-200c-4ea4-8531-ec46be0840a1/823a634d-8dbd-3e74-a20f-a91af3b90db2.roa
Signing time:             Fri 16 May 2025 20:19:44 +0000
ROA not before:           Fri 16 May 2025 20:19:44 +0000
ROA not after:            Thu 14 Aug 2025 20:19:44 +0000
asID:                     13737
IP address blocks:        2602:f649::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6a6395b7-200c-4ea4-8531-ec46be0840a1/6a6395b7-200c-4ea4-8531-ec46be0840a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6a6395b7-200c-4ea4-8531-ec46be0840a1/6a6395b7-200c-4ea4-8531-ec46be0840a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6a6395b7-200c-4ea4-8531-ec46be0840a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e0:34:09:18:e8:49:48:d8:88:96:45:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6395b7-200c-4ea4-8531-ec46be0840a1
        Validity
            Not Before: May 16 20:19:44 2025 GMT
            Not After : Aug 14 20:19:44 2025 GMT
        Subject: CN=bd0da679-723d-42a9-aae2-3e8b6f464213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:26:1a:cf:e4:bf:9f:79:26:7d:3b:45:6e:7c:
                    38:bc:21:08:1e:c7:12:15:47:6d:51:67:51:e2:bb:
                    d1:47:43:6a:a5:7f:6d:1f:b3:16:23:9b:f8:8a:3d:
                    fc:77:c3:6a:d3:d8:cd:74:d9:42:b7:10:ac:50:c4:
                    10:5c:23:50:42:f0:fd:20:6c:35:7b:18:32:cf:44:
                    1c:89:8d:fe:b7:40:ff:93:94:fd:ce:42:78:90:98:
                    74:f0:06:76:84:3b:bd:7e:5c:59:6c:15:b8:f1:90:
                    1d:25:51:9a:38:cd:e8:49:ca:54:f0:61:59:3c:7a:
                    5e:95:18:ef:ea:35:f4:29:58:5c:ce:2c:3b:15:c3:
                    f4:9f:dd:6d:5e:3a:07:21:54:20:7a:d2:f8:78:21:
                    09:c3:f5:4c:03:a6:4d:f7:84:38:18:c0:2f:0f:c7:
                    18:a5:44:93:36:18:39:ab:95:b7:d3:f9:4f:25:bc:
                    21:48:00:f8:7c:3a:62:7f:16:c0:cd:8d:fb:1c:d0:
                    f8:db:24:9a:4d:f1:d7:49:92:0c:be:07:f5:12:7d:
                    88:4a:69:1d:59:7a:03:58:5e:32:cf:12:df:6c:58:
                    92:49:95:70:4c:02:6e:58:24:5c:95:a9:38:53:7c:
                    31:32:c0:71:6f:88:27:67:e5:e6:ed:05:4b:b9:dd:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A1:7D:EC:E3:B5:74:BC:6E:84:26:F0:BF:E1:07:53:E8:F6:33:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6a6395b7-200c-4ea4-8531-ec46be0840a1/823a634d-8dbd-3e74-a20f-a91af3b90db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6a6395b7-200c-4ea4-8531-ec46be0840a1/6a6395b7-200c-4ea4-8531-ec46be0840a1.crl

            X509v3 Authority Key Identifier:
                keyid:46:EC:51:02:3D:77:BC:D0:18:ED:6B:5F:AD:82:85:9B:48:8E:F5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6a6395b7-200c-4ea4-8531-ec46be0840a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f649::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:72:25:22:47:95:70:78:bd:8f:6b:76:5a:95:43:1a:f9:2e:
         e3:dc:42:70:e3:86:e8:88:31:84:cf:db:5f:d3:73:3c:10:da:
         7c:45:82:f5:5b:69:cf:c7:cd:a7:b8:19:7b:be:86:f7:5a:b0:
         28:aa:af:34:0b:d7:3d:3d:97:28:b5:e6:2d:9b:28:7e:72:19:
         96:66:88:d7:ae:6c:82:58:c2:de:d8:66:e4:c6:9f:22:5b:c4:
         83:5c:61:90:3f:6e:7a:26:3a:20:6e:f8:60:04:bf:71:f6:9e:
         77:45:b7:e2:af:c8:19:b8:08:00:d8:47:60:05:19:56:25:f6:
         53:23:6e:c5:51:92:06:f5:20:48:9a:a6:32:1c:8e:5b:c4:44:
         f3:a1:61:15:52:a4:19:54:e0:ce:18:e7:ce:d6:c9:d3:b1:18:
         2c:8d:c0:6e:3c:2c:33:d9:20:f3:48:87:94:60:b3:6b:75:cb:
         6d:1a:25:75:35:10:3e:17:3d:4d:11:95:0d:05:69:df:9d:71:
         cf:5b:4d:e7:2a:36:e3:a3:79:21:ac:b0:2d:fe:c3:5f:da:ff:
         7c:42:fb:14:ca:6f:ad:18:8e:36:35:28:bf:32:9e:88:c5:49:
         2b:4d:ad:e1:59:ab:4d:a3:ea:3d:15:fd:87:1a:d0:67:9f:4d:
         05:ec:c5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:33:17 2025 by rpki-client