Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa
File:                     c057190d-ef07-3947-b98a-abc03a5cd3ac.roa (raw, json)
Hash identifier:          aUMcW8MvYYSbc73KWxWAT4pUoh0HdUdQN5j6fFI3ZIA=
Subject key identifier:   37:CA:E0:3A:A9:C8:64:86:60:88:53:C4:A8:D8:CE:45:E7:BC:D3:7B
Certificate issuer:       /CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
Certificate serial:       010D0C9F43285849C79F66ABF7006ACE88DFAA8C
Authority key identifier: 41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     400647
IP address blocks:        2602:f8ce::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:66:ab:f7:00:6a:ce:88:df:aa:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=436b9892-2bc1-42e7-9f0b-fc169862bf8b
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=7c9a177b-1c23-4552-b5f9-f7e3c853f14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:1f:5e:97:d6:3d:e6:4e:ae:ca:10:dc:52:
                    8f:b1:27:9e:dd:38:af:d1:98:60:e6:40:3d:93:ee:
                    ed:74:a5:dd:f2:3e:fc:5d:f7:94:2b:89:25:10:a8:
                    94:a0:ab:b0:95:29:bd:ef:79:ba:7c:13:d3:31:69:
                    fb:0d:7c:52:e5:e9:f0:76:cf:d7:45:56:c5:f9:91:
                    79:62:8f:76:9b:45:7d:ce:a2:a9:5a:68:9a:aa:91:
                    a4:f4:92:77:12:2b:49:10:f0:09:73:8f:66:2f:a5:
                    10:11:bf:41:da:b6:13:23:bd:e3:7e:1f:60:2e:27:
                    7a:c0:b9:87:4c:01:8a:07:ce:38:0f:33:3e:cd:ed:
                    a5:c5:e1:bf:25:2a:0f:11:2d:fc:d6:13:80:5f:10:
                    f9:fc:19:2d:25:6e:87:9b:22:68:2c:ae:99:38:0f:
                    b2:df:5b:f3:c6:85:ea:d1:a7:85:5d:94:6a:60:f5:
                    b5:ad:13:11:8d:90:e5:fd:6b:7c:51:60:ac:50:06:
                    81:8d:e2:d4:29:19:a8:0f:7a:21:4b:6f:e2:f9:6a:
                    be:63:eb:d7:76:c7:fe:52:68:9f:7e:82:0a:fc:a9:
                    3e:cc:06:ae:7f:02:cf:99:71:20:fa:ba:6c:76:c1:
                    f7:21:b4:78:5a:c8:16:a2:25:c2:bf:13:dc:d2:5a:
                    a7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CA:E0:3A:A9:C8:64:86:60:88:53:C4:A8:D8:CE:45:E7:BC:D3:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/c057190d-ef07-3947-b98a-abc03a5cd3ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b/436b9892-2bc1-42e7-9f0b-fc169862bf8b.crl

            X509v3 Authority Key Identifier:
                keyid:41:09:62:98:B9:A9:D0:C1:31:18:0E:12:3A:C4:10:8F:F7:6B:F0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/436b9892-2bc1-42e7-9f0b-fc169862bf8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ce::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:62:63:b9:ef:6c:3c:80:86:ed:04:a6:13:c9:9d:a3:3a:70:
         4e:46:15:76:88:67:80:de:70:ce:39:5f:c4:8b:76:53:65:01:
         bd:4f:ce:89:60:6b:bb:f3:05:50:e9:4d:61:60:2c:4f:77:07:
         e1:e9:79:ce:c4:fe:2d:8e:c1:9a:7d:1f:26:ee:f4:5a:42:f8:
         56:29:29:db:ff:13:42:7b:ff:90:aa:3d:b6:3d:2a:45:27:75:
         ec:1b:42:e7:3b:10:2d:ec:b0:95:0b:bc:9d:38:8d:ae:59:41:
         2f:e7:05:ec:bb:4b:20:dd:89:8a:f2:7e:1d:cd:24:81:60:2d:
         36:dc:d9:ce:f1:a9:61:df:45:25:32:e0:08:b2:aa:2c:8c:ef:
         bf:97:81:f2:36:6d:38:94:e1:9f:58:39:6a:ca:ce:91:78:8d:
         d3:af:b3:96:94:7c:22:4c:f5:bf:e6:be:5d:6a:0d:a4:bc:35:
         ac:d1:0e:4d:d7:7d:6d:65:70:c9:b1:43:d9:d4:40:38:ac:38:
         c2:9f:47:57:f5:df:0f:22:e1:e0:6c:e5:a2:1d:b3:f2:b2:e3:
         8e:54:a6:9f:5a:15:00:40:fd:79:5e:af:f0:d5:87:d3:0b:35:
         29:80:c9:50:ea:f2:0f:1a:01:95:9a:59:27:90:06:1e:04:3a:
         fa:8b:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:35 2025 by rpki-client