Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa
File:                     aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa (raw, json)
Hash identifier:          fWUO2+xpTdXYJhbX+wSb5RMMJWaArLteO9ESGAVp2C4=
Subject key identifier:   C8:46:8C:5D:62:C5:E6:FA:A3:48:25:00:48:D7:8B:6D:8A:62:3F:51
Certificate issuer:       /CN=4e424533-541a-4c27-93d7-8d76453fe152
Certificate serial:       010D0C9F4328584A17300517712BAA7C2DEEC4C0
Authority key identifier: CB:F0:85:73:F9:51:8E:80:A5:B6:D5:EC:C0:F6:5F:D2:39:0F:41:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     401036
IP address blocks:        2602:f90e::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:05:17:71:2b:aa:7c:2d:ee:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e424533-541a-4c27-93d7-8d76453fe152
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=5424d3bf-ea9c-4fab-bcf1-7956e3fb7c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:54:49:71:ca:be:94:b4:a4:d0:66:ae:1d:04:
                    0c:6e:cd:27:65:74:c5:52:e0:36:45:9e:92:13:68:
                    ef:5f:02:9b:ae:be:2d:a8:d3:cf:56:3a:6b:9f:32:
                    9c:b4:8e:25:37:03:bb:22:48:12:2a:68:aa:81:1c:
                    8e:3a:74:6d:dd:fe:b4:d7:ff:9a:70:74:cd:c8:d5:
                    7b:d9:2a:ea:07:14:7e:23:57:f6:a7:a3:f8:38:82:
                    34:76:61:54:75:d4:bd:26:90:6d:c2:d2:1e:29:16:
                    4f:12:60:31:ee:2e:c1:d0:cd:c9:9f:b7:cf:0f:58:
                    e1:b2:c5:95:cd:0a:d3:a7:ce:43:da:5b:17:d6:7a:
                    f3:4f:70:1c:59:cc:70:7f:1a:9f:9c:5e:3b:48:fc:
                    72:b1:f1:0a:06:49:e5:94:ea:18:16:d9:b0:eb:58:
                    90:c3:5e:16:17:9c:8b:5f:63:13:35:dc:79:05:ee:
                    c4:c2:b2:2f:0c:2b:8d:e4:ca:62:d0:f6:66:0a:03:
                    4f:5c:95:53:47:1f:6d:b9:4e:c9:00:d4:fc:26:fe:
                    aa:28:25:7b:c6:50:e4:af:df:04:b2:af:c7:22:5b:
                    cf:36:34:dc:81:a1:a2:0e:33:bf:3f:22:9b:36:c3:
                    66:4a:84:95:21:bc:f9:98:18:46:c0:d6:8a:6e:d3:
                    b9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:46:8C:5D:62:C5:E6:FA:A3:48:25:00:48:D7:8B:6D:8A:62:3F:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/aa3b1f4e-5a24-31b6-be94-ef7f63731abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152/4e424533-541a-4c27-93d7-8d76453fe152.crl

            X509v3 Authority Key Identifier:
                keyid:CB:F0:85:73:F9:51:8E:80:A5:B6:D5:EC:C0:F6:5F:D2:39:0F:41:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e424533-541a-4c27-93d7-8d76453fe152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f90e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:d9:2b:42:62:c0:02:f2:27:44:d5:81:1b:87:16:0d:3a:45:
         2a:42:22:9f:55:62:f5:f5:60:e6:5e:bb:33:41:10:2f:e4:0d:
         19:ce:3e:db:e2:30:35:22:20:27:23:04:35:b7:b6:c2:bc:85:
         18:6f:0c:26:cb:01:1f:f4:b9:0b:b3:94:00:ae:50:3b:28:9a:
         f0:e3:92:0f:62:1e:b6:bd:68:09:4b:fe:dd:a6:d6:f7:25:31:
         b1:18:b9:0b:1f:2d:0c:ba:84:f1:a9:25:cb:1c:c0:13:30:06:
         3c:6e:94:53:0b:4a:43:8e:ad:45:f6:40:1b:76:5b:f5:e6:18:
         5a:39:a7:2a:2c:9d:a9:5e:7f:35:f3:83:b0:56:c0:8c:f5:ad:
         ed:ce:d5:b5:f1:55:1b:0e:61:ee:32:a0:6c:ac:6f:8b:1a:4b:
         88:2d:57:77:b7:a9:b4:3e:23:ed:ae:0d:d4:e6:86:5d:7f:b7:
         91:25:9f:3f:90:e1:5a:1c:d9:1b:9c:a6:dd:4d:d3:48:1f:db:
         62:db:fd:4b:54:6e:3a:7e:c1:f8:9d:f9:fe:cf:18:2b:ed:17:
         36:75:aa:9a:2e:3e:6e:d5:a8:f1:5a:68:a7:ad:f6:31:c7:ba:
         89:96:dc:cd:6c:73:0a:3c:0a:06:81:dc:99:c1:86:46:89:3e:
         ea:26:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:22:55 2025 by rpki-client