Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
File:                     84a6cb81-8bd5-38db-b496-fd0e590df645.roa (raw, json)
Hash identifier:          plk+2Pmw6n0aCf4uxbiwBNnmNBBc+iTVfpv+uDh4XCo=
Subject key identifier:   2C:95:A1:E4:26:AD:BE:39:D0:AF:BB:3F:85:15:30:42:BA:17:81:13
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F43285849AD1A0C4D3A16CFFEECA43AB0
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     401170
IP address blocks:        2602:f8bf::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:0c:4d:3a:16:cf:fe:ec:a4:3a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=7a7f3002-0e8e-47dd-be71-295b94afe859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:24:85:7b:cc:a2:f1:30:66:18:b8:63:bb:
                    8a:73:10:5c:30:ac:bd:6b:1d:32:d7:2e:f7:02:57:
                    db:2c:5c:67:47:68:2e:48:98:76:7b:c2:7d:14:11:
                    d1:68:a0:a4:67:4c:31:71:8a:c6:03:cd:da:b3:9e:
                    5a:a0:eb:6c:78:cf:de:c9:05:15:7e:27:8f:1d:22:
                    1f:5b:61:37:47:ca:22:83:48:45:ea:34:4d:bc:8a:
                    02:03:31:be:d3:fc:2b:69:a0:0f:49:f9:5d:40:2a:
                    b2:57:1a:ed:d0:04:99:61:10:01:f3:30:9a:a8:91:
                    cc:c1:17:cb:69:0d:ff:72:b1:30:ce:c4:3d:ce:8d:
                    b5:f5:0f:8b:c6:62:58:ea:61:61:95:20:67:83:30:
                    4e:85:2e:59:c5:5a:ec:ce:50:cb:22:9d:e4:e7:f0:
                    61:f3:ad:64:8b:83:18:e5:7c:0c:42:01:0e:8a:03:
                    61:9b:ff:48:18:4d:19:e3:10:0e:fd:be:b8:d0:f4:
                    18:2f:34:79:9c:e1:ce:a0:43:ac:84:8a:30:bf:4b:
                    af:5a:94:e1:a2:e0:71:09:bb:60:27:44:49:c9:08:
                    87:fd:f7:3d:6f:6c:fd:74:53:64:8e:68:d6:76:6e:
                    67:cd:cb:df:72:dd:4c:e4:bf:51:1e:fe:9c:b0:87:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:95:A1:E4:26:AD:BE:39:D0:AF:BB:3F:85:15:30:42:BA:17:81:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/84a6cb81-8bd5-38db-b496-fd0e590df645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:da:17:ff:cd:56:82:78:21:d8:6d:63:76:80:83:df:bc:0d:
         77:e5:b5:f5:df:d3:04:84:4c:e2:7b:22:16:68:a3:8f:90:6c:
         7a:df:b9:cb:3c:1e:18:99:bb:d4:ef:15:e6:99:3b:fc:a5:31:
         f8:36:01:01:2e:2e:d9:87:35:7a:2d:51:15:cf:aa:85:b7:4d:
         0c:ee:09:3c:4a:ac:9b:43:fd:a6:e5:19:aa:2f:f1:e7:ba:ab:
         6e:3e:35:6c:1b:d7:7c:23:91:1b:92:e3:df:4b:38:60:26:b9:
         dc:72:6a:eb:e2:04:95:f3:da:44:11:68:2d:2c:67:d0:05:e6:
         6c:dd:1b:fa:3a:46:5b:95:4d:72:24:6d:d1:56:35:d2:b8:1c:
         ee:7c:f9:0a:0b:15:79:a3:2e:89:d1:a5:29:20:90:08:5e:39:
         3a:3a:c3:0e:f7:c9:d9:a5:d3:77:da:2e:67:99:80:d6:f4:53:
         0d:98:ee:e2:b6:0b:b8:38:cd:a0:39:55:88:39:56:91:2f:0f:
         29:70:32:4b:01:59:f3:74:5e:c3:88:30:ac:e8:10:2e:95:6f:
         65:3f:a6:aa:57:ca:66:37:e0:f3:a2:77:04:53:d3:44:27:97:
         6b:c9:7c:d3:78:de:9b:6a:a5:2a:ab:09:39:34:e7:74:51:0e:
         9c:63:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:29:29 2025 by rpki-client