Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/2e1726e6-f1cf-3062-b6f5-c84851c6b2e1.roa
File:                     2e1726e6-f1cf-3062-b6f5-c84851c6b2e1.roa (raw, json)
Hash identifier:          4JOaq5WjEdGwV9xa22jphI7pdjnq9SInrNGf6YTBags=
Subject key identifier:   99:97:F0:00:54:9A:8C:9E:B5:A1:9F:C4:2E:84:48:AD:57:19:94:EE
Certificate issuer:       /CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
Certificate serial:       010D0C9F43285849DB2A2C14D909E80318238B00
Authority key identifier: EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/2e1726e6-f1cf-3062-b6f5-c84851c6b2e1.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     401512
IP address blocks:        2602:f78b:a00::/40 maxlen: 40
                          2602:f78b:a00::/44 maxlen: 44
                          2602:f78b:a31::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:2c:14:d9:09:e8:03:18:23:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd3c550-5bde-4569-b35d-a3ea570cff1c
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=0f154f65-cc10-4868-8d68-77cd1809816c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:cc:53:de:94:52:d4:dd:3b:0c:0a:d1:18:
                    de:d2:38:09:47:33:a7:cd:34:08:f1:cd:59:8a:54:
                    22:02:bc:e8:6b:e1:4c:d5:bf:f9:8a:0e:c5:50:50:
                    5c:22:16:d0:7e:8f:dd:79:1a:7f:e5:65:1a:8f:0e:
                    01:fe:91:e2:8b:65:7c:38:b4:7f:83:fb:20:7e:1b:
                    3d:c1:49:2b:ef:f1:a7:c9:76:87:d8:4c:85:c2:93:
                    b7:9c:a9:b4:77:40:93:f1:8e:19:0b:9e:a2:70:24:
                    84:80:8e:47:a3:b1:27:0c:c2:e1:49:e7:24:4c:e5:
                    63:00:ee:3c:8f:45:1a:71:44:25:d4:23:57:4a:c0:
                    95:08:a5:cc:84:a0:f3:08:6e:a1:fa:8b:3e:eb:ea:
                    c6:f7:ce:36:87:26:eb:fd:3b:e4:9c:1c:02:39:f3:
                    1b:dc:ab:27:5e:b0:18:34:e7:f0:e0:59:5d:d8:7a:
                    d3:81:99:d2:fd:c3:7a:e3:16:f0:50:66:fa:38:45:
                    ff:9f:e0:b0:6d:6e:e5:7f:e2:4f:36:af:85:fd:2b:
                    54:cc:4e:48:42:85:2e:f9:f1:46:7d:4c:02:f5:95:
                    7a:e5:c4:cd:90:da:6b:a0:ef:3b:11:6d:9b:e4:e7:
                    6f:20:04:11:de:dd:bf:14:93:4e:29:85:81:51:47:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:97:F0:00:54:9A:8C:9E:B5:A1:9F:C4:2E:84:48:AD:57:19:94:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/2e1726e6-f1cf-3062-b6f5-c84851c6b2e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c/6cd3c550-5bde-4569-b35d-a3ea570cff1c.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FB:ED:3F:7D:04:AA:80:ED:9C:2E:51:A2:79:D6:32:62:7F:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6cd3c550-5bde-4569-b35d-a3ea570cff1c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78b:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d9:e8:7b:dd:96:46:b4:0b:cc:69:89:d0:50:00:a7:74:5d:
         25:b2:c4:bc:ee:f1:74:e4:2a:17:03:c4:67:f8:ed:6e:77:41:
         c6:65:bb:4c:8c:57:a4:d8:e8:58:e4:36:55:cc:a9:4a:30:25:
         22:f9:50:09:5f:08:96:7c:32:38:e3:36:8e:11:2a:ab:91:c2:
         5a:ad:16:3d:36:fb:b1:28:92:58:4d:37:ea:b5:3c:39:37:80:
         eb:19:43:11:b0:85:f1:22:3d:ec:d9:a8:90:28:fd:d5:28:04:
         20:a1:47:5a:5f:a0:c0:60:6c:e8:dc:60:39:99:fc:2a:b0:cf:
         13:70:ac:62:d2:6c:4b:c2:fe:53:09:e7:ee:3e:23:bc:29:03:
         ab:45:9c:34:4f:be:c9:86:13:44:cf:5d:92:ea:fc:a3:7d:9a:
         95:1b:c4:e3:9e:c7:e8:0b:f6:af:3b:99:37:95:63:03:de:83:
         b5:73:ed:99:8e:52:4b:98:c1:32:61:8b:f0:c6:00:53:3c:71:
         04:7f:9e:d5:2b:ec:84:b2:ce:50:3f:e4:dd:c7:07:f8:06:85:
         24:e3:42:4f:06:85:f5:ed:11:42:6c:0b:e3:21:b3:3c:ad:52:
         c5:4c:55:15:73:a1:e0:f9:cd:db:58:c5:89:37:e8:29:38:65:
         16:a9:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:27:27 2025 by rpki-client