Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa
File:                     97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa (raw, json)
Hash identifier:          PwqhIRh/eNMMFu9tEFowoTKC6l4KCp/tE/xgIQdW8z4=
Subject key identifier:   F0:2A:06:4F:6D:60:AF:85:EF:81:F6:02:92:54:0D:6D:A4:F8:1B:59
Certificate issuer:       /CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
Certificate serial:       010D0C9F43285849C0A4D05BAF00F3A51B32F8C0
Authority key identifier: D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     400799
IP address blocks:        2602:fb07::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:d0:5b:af:00:f3:a5:1b:32:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a81691-3f92-4fe7-ac2c-d8d543fb85fc
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=982153a2-efc0-41e2-ad3b-622d5565e859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:bf:aa:6e:6a:9f:b7:54:f2:a8:e9:ed:51:
                    60:eb:6f:9b:1f:ce:e4:6e:6f:c1:dc:08:2c:c0:65:
                    af:f3:da:c9:21:15:18:dc:9e:de:a8:39:68:53:f6:
                    be:cb:6e:06:c5:3b:77:71:06:7a:52:59:5d:d7:21:
                    1b:f6:5f:c3:23:89:a1:ec:35:67:51:40:4c:e0:67:
                    41:dc:c9:cb:00:56:4b:31:07:a3:a6:87:b8:2c:04:
                    6f:04:a2:bc:6b:d4:a7:d5:9b:17:13:f5:f9:c2:bb:
                    c8:84:3c:05:c3:c8:f8:3a:2a:04:bc:62:46:47:72:
                    75:e1:39:7e:04:24:a3:a1:e9:49:a1:dd:e7:d0:61:
                    33:90:47:5a:47:70:b5:47:16:52:d9:17:90:ba:a9:
                    df:62:0b:83:4c:82:ce:db:18:c2:45:20:f5:9f:b6:
                    fd:37:34:45:7b:9b:3c:2d:e2:c8:9d:4e:3a:a2:f6:
                    a0:d0:e9:4e:4f:e7:ae:8e:65:06:18:23:7f:c0:42:
                    02:98:15:78:76:9a:05:f3:ea:2f:4c:63:28:bb:de:
                    3d:8f:d3:e3:50:9d:fb:09:74:c5:be:59:23:69:28:
                    ea:e2:c3:d0:3c:fc:b6:0a:1a:7e:52:c7:64:5b:8f:
                    63:db:4e:e8:60:c8:56:54:60:2a:2a:fa:d4:31:75:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2A:06:4F:6D:60:AF:85:EF:81:F6:02:92:54:0D:6D:A4:F8:1B:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/97d05414-7c9a-355a-a86b-67d1d5fa8eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.crl

            X509v3 Authority Key Identifier:
                keyid:D6:0D:D3:87:AF:E7:A5:4C:55:40:47:1A:16:7C:1C:52:F0:33:03:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58a81691-3f92-4fe7-ac2c-d8d543fb85fc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb07::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:30:4b:ec:38:23:dc:5d:8c:0c:97:27:eb:41:2f:7d:08:27:
         29:20:e2:dc:36:41:0c:2e:a9:c1:75:5d:6d:2e:f5:0e:94:0e:
         5e:4d:6f:2b:bf:d7:ee:96:11:5d:78:42:ef:a1:68:49:fc:ef:
         8d:c2:8d:b4:5b:a7:e0:0e:b7:8e:7f:a4:bd:df:f2:4b:85:13:
         44:82:0b:83:07:f4:6c:14:32:74:08:eb:95:81:11:1c:4b:a8:
         61:f7:a0:98:86:73:3b:e1:a7:90:3c:78:57:1b:c9:cc:23:c9:
         5c:99:14:43:7f:dc:d9:cd:3f:0c:11:97:a5:4f:83:80:4c:7d:
         3a:81:a7:95:72:bf:67:27:ae:06:ae:1c:4d:93:f9:6b:48:2f:
         e8:bc:53:cd:e1:c3:d9:05:1b:1f:96:9e:ae:fd:44:42:08:d3:
         63:25:02:17:79:85:70:e5:63:1d:3e:c9:fa:4a:da:00:4d:06:
         d5:47:86:bb:ff:b8:2e:65:70:28:df:48:8b:b9:1d:ae:3a:1f:
         5b:c6:c1:59:eb:18:9a:e7:2a:c3:64:10:16:f5:64:ad:2e:5b:
         61:5e:33:b8:00:76:6c:3a:93:a8:02:48:f0:d6:86:b5:c2:8e:
         86:01:74:71:48:e5:fa:63:ab:3e:e6:f0:7b:2a:78:2e:f3:a8:
         cf:8a:d7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:39:40 2025 by rpki-client