Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
File:                     c8350e69-c682-3045-a668-12659de11f07.roa (raw, json)
Hash identifier:          /5NtTPl3QLCshdahjHrLXdDbdD413iq/3W0q8bXQJ6w=
Subject key identifier:   C5:B7:30:F4:24:58:4B:D9:57:31:A5:57:9B:B5:01:F1:BF:16:13:FE
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F43285849CBCFA32789FCD39536F6C700
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     400861
IP address blocks:        2602:2da::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:a3:27:89:fc:d3:95:36:f6:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=cb6583a3-2ce0-44ff-96c9-c9fe6461c01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:26:f9:68:53:4a:22:fa:dd:7a:1d:7d:87:ab:
                    49:5b:08:0e:cc:80:26:21:af:2d:75:a0:62:dc:d3:
                    e0:8f:15:52:7a:eb:1c:cb:db:25:e9:a4:05:44:16:
                    76:5b:48:fd:7f:71:58:64:49:46:88:bf:e1:e6:e7:
                    21:02:7d:82:43:84:f0:9f:35:69:49:df:a2:b6:58:
                    78:0f:d3:c7:33:b3:60:1b:16:67:bf:97:59:01:c1:
                    0b:a5:a3:8a:4d:3d:a4:27:64:db:ef:a0:46:fc:84:
                    c8:1e:4c:4e:76:90:47:6a:cf:fb:1c:3b:fa:f3:09:
                    65:f5:cc:35:cb:67:24:12:3f:e8:b0:fc:e4:61:bc:
                    76:ac:0a:ce:fa:a7:ca:e3:22:cf:ce:6c:a7:77:3b:
                    54:29:38:f6:8f:b3:fc:01:5c:02:26:3f:9e:9c:b7:
                    e1:82:f3:5a:3f:e0:76:b3:76:95:41:90:f9:d7:1f:
                    76:e3:eb:b1:44:18:b9:cd:6d:89:2c:e4:fd:81:70:
                    fb:04:44:b0:de:79:6a:41:c6:da:14:fa:cb:16:97:
                    29:e5:b0:87:3c:de:c8:95:b1:2c:8b:ec:b8:05:1b:
                    de:bf:fa:85:d0:1c:9d:ae:21:9d:c5:93:0c:bd:4c:
                    94:3a:22:cc:d8:20:bc:00:89:2a:99:69:76:89:ba:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B7:30:F4:24:58:4B:D9:57:31:A5:57:9B:B5:01:F1:BF:16:13:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fd:3f:a2:8c:ec:b2:44:51:2e:a6:4b:46:be:6a:7c:cb:db:
         75:b4:6d:5b:ce:9a:ab:e1:b9:4c:50:15:02:82:6f:2e:31:5c:
         7c:a3:d9:f6:ae:ee:5c:83:24:76:63:38:68:ed:06:41:46:9a:
         68:ea:46:16:b8:38:f1:b0:34:77:4c:d3:a9:40:bb:96:26:49:
         4b:bc:11:d0:57:96:35:dc:c3:2c:0b:f2:ab:a4:b0:d8:a7:3b:
         91:1f:07:75:fe:d4:dd:27:aa:7d:cb:63:32:ed:26:33:f3:10:
         41:08:1c:cd:3c:90:63:9a:20:56:a0:4f:86:8d:73:4b:ee:f8:
         08:48:14:c4:3c:51:b2:97:2a:99:13:41:12:f8:d1:a9:55:b8:
         2a:ab:f7:3f:de:4d:bd:97:3b:75:39:a5:a2:27:13:86:76:f8:
         bf:a5:39:fb:d8:b1:ee:18:73:51:93:da:97:e9:66:fe:74:6c:
         50:eb:8f:52:26:69:6f:49:ff:1b:72:58:14:93:f7:0d:49:f4:
         42:16:24:1b:34:57:f8:17:04:9d:c3:14:c7:37:08:06:28:5d:
         34:21:9c:e8:54:5a:7a:ce:a6:c8:e6:67:df:80:71:77:ec:e5:
         1a:25:03:48:26:8f:c4:8a:a9:16:21:e9:ee:25:91:18:14:26:
         87:8d:b1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:46 2025 by rpki-client