Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa
File:                     a012f434-0893-309d-a03c-6d4dea6c7567.roa (raw, json)
Hash identifier:          T1GXd3/JY69iJjdgP2djdBsNoxGB4kPMEE/mS+VMaUQ=
Subject key identifier:   14:24:49:33:B7:53:16:46:34:E1:84:50:C7:00:32:B8:41:C6:6A:D3
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285849FE0FEE09B5FD8BFE2576DC00
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     52112
IP address blocks:        2602:fd92:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:ee:09:b5:fd:8b:fe:25:76:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=1bdbaa8d-1464-4970-a334-78cae6bfb8bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:94:1b:ed:43:d7:32:de:06:8c:9f:01:99:a1:
                    49:fa:f8:68:e8:97:09:d5:bb:60:e1:0d:fe:b0:92:
                    a2:22:55:39:75:e3:14:41:f2:d1:f8:4a:29:b6:47:
                    77:83:5e:26:a6:0d:a6:bd:81:3b:bc:5f:e4:7b:f3:
                    de:89:2d:3a:30:d9:a2:e9:fd:5a:72:b3:90:60:51:
                    18:2e:59:b6:6b:6c:7a:26:aa:03:57:58:1c:a4:6c:
                    e5:22:08:38:59:de:7f:03:b5:8d:99:c6:0e:7e:d3:
                    1c:7b:63:3c:82:fc:db:6c:79:ff:1e:17:78:1a:9a:
                    3b:02:1d:8d:f4:f2:e0:4e:bd:51:92:63:77:e9:fc:
                    a0:13:a6:0b:a3:13:1a:6e:22:d1:04:d7:fa:74:d8:
                    97:2f:20:dc:d0:20:6b:cb:37:08:4f:46:5f:2a:09:
                    78:cd:db:40:63:ba:58:b0:b1:9f:12:45:fd:45:a6:
                    d2:52:83:07:d3:10:4b:f9:79:57:dc:1e:6a:92:0d:
                    87:4e:e1:fb:47:a7:21:42:dd:ed:e4:40:e1:d2:88:
                    4c:c3:ec:fe:23:2d:08:fc:56:cb:6e:4f:e2:a8:57:
                    3e:0d:ce:eb:00:7b:07:af:c3:26:57:f8:da:7b:4a:
                    e7:e4:0e:ff:1b:f6:64:bc:1d:77:d1:02:cf:dd:9c:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:24:49:33:B7:53:16:46:34:E1:84:50:C7:00:32:B8:41:C6:6A:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:02:b3:9f:f1:ee:57:01:70:90:df:22:b8:33:98:be:d8:
         2b:bd:70:b0:db:eb:d5:30:4a:48:26:ac:32:e5:d0:50:72:10:
         af:7f:df:89:84:ef:4b:46:0d:fe:3a:77:ba:f0:38:79:eb:6d:
         0f:a1:aa:7b:92:cc:61:0e:60:4e:83:2c:b8:73:f1:ec:eb:df:
         8b:42:ea:35:03:db:fb:78:01:72:71:88:08:a3:64:08:bc:a1:
         f6:dd:48:26:60:72:e6:ea:4e:be:6f:46:0d:6a:09:71:c2:59:
         f6:59:1d:96:db:82:48:62:39:c0:d9:c6:19:a1:7a:9f:fc:d4:
         f6:d6:94:05:8d:ed:5b:7c:41:05:96:5c:c6:de:f8:47:3b:03:
         0f:2c:3e:a2:60:ad:b3:48:98:96:5a:8b:d9:cf:31:48:b2:5b:
         33:5b:94:56:4c:f4:8a:04:55:fe:18:a2:51:af:5e:a0:16:40:
         1c:38:d6:bd:3b:0a:2b:1d:73:de:4e:18:44:fa:71:0a:c6:58:
         30:9a:f0:e3:a9:4b:8c:40:ac:03:3d:44:e6:94:67:d4:af:f5:
         b8:63:cb:f0:e8:6a:46:82:41:64:3f:3b:c0:96:06:30:73:19:
         b3:52:0b:68:2f:07:52:ed:db:78:57:a6:fc:06:97:de:2d:71:
         5a:f1:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:10:41 2025 by rpki-client