Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a433e7ab-5e99-3495-9719-fa80119b9f97.roa
File:                     a433e7ab-5e99-3495-9719-fa80119b9f97.roa (raw, json)
Hash identifier:          /s33HQfZzsqPYD6NwD8YnnaAB3T7WBOG1nPkJblbquE=
Subject key identifier:   0F:45:ED:F4:68:06:4B:9D:7C:35:ED:A5:CD:EF:E2:58:61:CF:0E:BE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584A146564D35C5FB2326A513000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a433e7ab-5e99-3495-9719-fa80119b9f97.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     10796
IP address blocks:        2602:107:6400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:64:d3:5c:5f:b2:32:6a:51:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=e6340ccd-2185-4fe2-b1a3-c0d5521ea5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:04:96:06:1e:6f:4f:fb:6e:45:ec:2c:49:3e:
                    41:0c:ad:55:6f:ab:44:f0:00:51:f9:cf:02:50:66:
                    29:32:d1:9a:6f:e4:f0:df:b6:8b:57:37:ce:67:c6:
                    80:79:b3:55:ed:56:0d:e5:c3:1f:07:42:1f:56:62:
                    9a:47:64:3d:70:25:77:aa:f3:c2:0f:94:00:9b:e3:
                    85:e5:16:38:51:f6:69:23:1c:83:17:aa:67:9e:53:
                    bf:13:8c:f4:1a:d5:b9:04:11:d1:14:f3:0b:a4:95:
                    cd:ad:bc:45:59:29:16:3b:74:9a:16:fb:55:38:8d:
                    ec:22:24:19:5b:d0:b1:69:5f:d6:06:46:cf:23:43:
                    c6:31:1f:10:d0:d7:e3:49:7a:c0:ce:7d:59:30:5a:
                    bd:b9:00:6e:1b:ff:88:ce:63:9b:f4:15:f5:bd:45:
                    54:9c:6e:29:5b:a1:36:81:44:16:9b:1b:b7:28:d2:
                    2a:b1:ec:fe:03:5e:84:8f:9e:a1:a6:72:5b:f3:eb:
                    ad:d0:c8:58:ac:00:dd:b0:0f:05:a5:a3:0d:58:fd:
                    8e:0e:6e:b7:c5:e2:0e:ae:8e:98:52:65:1b:b2:91:
                    ba:22:95:f5:68:e3:54:85:b3:05:82:6d:af:9c:0c:
                    ca:e9:0e:8b:b1:65:18:b6:f6:04:26:34:5f:91:0d:
                    a8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:45:ED:F4:68:06:4B:9D:7C:35:ED:A5:CD:EF:E2:58:61:CF:0E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a433e7ab-5e99-3495-9719-fa80119b9f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:6400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:5b:cc:5f:37:1b:94:32:f5:cf:33:79:2b:32:15:4b:5f:74:
         87:dd:7b:fc:16:94:23:5b:b1:3c:27:23:c1:a5:8b:0b:ba:d0:
         04:a8:b5:2a:02:f8:de:80:55:a8:fb:03:f9:c1:de:6a:62:1a:
         6b:67:ab:e7:42:47:9d:2a:71:63:1b:20:eb:60:8c:83:58:12:
         47:f7:81:a9:fb:95:a6:c5:ee:76:9a:a1:d9:b3:29:fc:6f:78:
         7e:6b:c6:9a:86:ae:d5:bb:30:b7:44:11:09:f1:89:59:0e:d0:
         8b:17:31:cc:18:7e:44:10:d7:1e:20:71:0d:95:3f:6e:3d:3c:
         1c:8b:c6:84:ef:e8:cf:e6:d2:08:0a:15:7d:2e:2b:78:84:00:
         e8:3a:2e:f6:7c:6a:e6:01:c7:dd:77:c8:c1:b0:cb:a9:39:9f:
         da:9d:b7:5d:cf:77:7e:01:75:a3:ca:8b:fa:30:4a:4c:c6:0f:
         13:44:fc:a9:52:24:ea:6e:d0:b2:e0:48:ad:79:79:16:56:45:
         17:3a:ed:a1:89:c8:60:87:49:13:72:3e:dc:67:bd:72:4b:37:
         af:6c:b1:b6:72:ee:b2:16:a9:6e:e7:84:b3:3a:70:19:e3:29:
         8a:e0:38:e9:0b:cb:c7:5d:45:f2:66:16:3b:cc:25:50:ce:56:
         59:bd:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:26:59 2025 by rpki-client