Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa
File:                     dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa (raw, json)
Hash identifier:          ZB2bZ8AzHBjhs09IvUUsBsMRfAWITLo1v18Rr29dX4o=
Subject key identifier:   3A:26:21:40:55:04:89:EE:49:1E:D0:5E:E2:DA:EE:13:B9:3D:A0:41
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285849ED4FC1E99C2028B46A986620
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     211584
IP address blocks:        2602:fd92:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c1:e9:9c:20:28:b4:6a:98:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=7a58b775-95e0-4592-bcdb-6d8278fc533a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:92:b5:e5:b5:95:c1:ba:af:0d:4f:79:5d:3b:
                    3d:e8:ff:90:4d:2c:e4:5d:7b:7b:19:2f:4f:6a:2b:
                    7a:2a:f5:8d:86:96:84:28:f2:89:17:65:1f:0f:da:
                    a7:96:77:e3:b8:12:1c:33:16:ea:62:89:76:1e:80:
                    dd:f5:25:ad:6b:5e:cc:ab:bd:79:92:3d:88:b4:54:
                    02:8c:31:8a:4f:8a:4d:2b:3d:db:a7:f5:95:0f:e0:
                    f9:6d:6b:27:81:38:2b:a5:e6:ab:c2:2b:7c:be:50:
                    7b:cf:e8:86:85:e6:b5:29:eb:30:f5:5d:e4:1f:4e:
                    c6:99:47:17:00:92:37:22:f4:62:e6:e3:99:3d:34:
                    3d:d9:3b:13:bf:be:85:7f:32:70:ec:36:e4:0c:d6:
                    76:71:70:a4:f7:57:f0:52:3c:ca:e3:16:3f:1d:2d:
                    3a:b4:73:13:3c:fc:11:7c:fd:b0:24:29:32:d5:a7:
                    ba:c1:1e:00:f0:76:bb:58:ac:f8:6d:34:9f:58:2e:
                    cf:6a:81:61:df:c4:4b:2e:ca:9e:72:ba:cb:62:9a:
                    35:eb:54:4e:f0:49:af:4c:ef:0a:d1:80:96:ca:9e:
                    c9:84:b8:ef:0a:d6:7f:48:ba:ef:ba:e5:6a:0f:86:
                    bd:ac:27:ae:4b:d8:be:d7:32:89:7e:0e:de:3d:a1:
                    74:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:26:21:40:55:04:89:EE:49:1E:D0:5E:E2:DA:EE:13:B9:3D:A0:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd3ae45d-a76a-35f5-84b7-06871366b1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:79:4f:6d:3f:57:b0:0c:bf:c8:4c:6d:3f:88:c9:3e:a8:da:
         34:28:11:d8:5a:a6:cd:0b:05:ba:ee:21:88:39:23:b4:10:2c:
         2e:b3:ed:8d:04:14:b3:78:ed:6c:c7:d0:5f:e3:14:da:57:bf:
         81:63:8d:a9:0d:26:ed:05:67:92:2f:59:8c:a8:57:7f:8a:d0:
         2a:45:24:c7:be:9c:01:9b:65:ad:ec:84:d9:97:7a:30:87:ca:
         20:4f:ee:9f:ae:1e:a1:31:ae:15:58:14:60:06:8f:e7:86:c2:
         f3:82:fb:eb:95:57:f6:94:98:0c:70:a0:a4:68:57:47:1c:b2:
         7a:65:a6:49:53:54:44:0c:0b:82:89:6c:62:8e:d8:88:bc:16:
         b0:33:67:55:e7:34:f7:47:04:24:8b:bb:4a:4f:7c:51:a9:3f:
         56:03:78:90:55:28:a6:87:74:60:05:30:48:24:ab:f3:c8:0b:
         a3:cd:a9:02:16:3b:93:c2:3a:48:6b:2d:3f:8f:6b:33:e8:51:
         7f:08:59:88:94:4f:b6:12:1b:31:3e:69:e3:df:19:b7:dc:02:
         cd:07:bd:a8:52:fc:fc:50:aa:e9:06:3c:58:46:4a:89:33:d9:
         93:b2:0a:63:f2:3a:29:4d:0e:e0:1f:03:72:a4:99:c1:c2:7e:
         45:d2:36:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:56:21 2025 by rpki-client