Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
File:                     17c97364-2d34-322a-90a6-f80a73c7f5ac.roa (raw, json)
Hash identifier:          +yinbhSA0Zlyur7yDAjB0DamAc8GJqVPx29WWYIvZ4Y=
Subject key identifier:   F2:12:E5:C0:78:1E:94:42:54:FF:37:6D:D4:34:01:6B:81:5F:EB:C6
Certificate issuer:       /CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
Certificate serial:       010D0C9F4328584A3E45ACEB660A597D5401F500
Authority key identifier: 6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     397423
IP address blocks:        2602:f94c::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:ac:eb:66:0a:59:7d:54:01:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0845ba3b-9fc2-40fb-b74c-445ace8b4182
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=9a491e67-6f9b-49cd-9822-89c525845f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:62:f9:f9:88:d1:07:98:67:53:f0:f9:30:d4:
                    83:24:6a:6b:9b:ce:7f:dc:76:48:48:57:b7:df:92:
                    60:fb:d7:bb:df:b8:71:3b:36:1c:20:98:10:fd:45:
                    46:ea:a2:08:41:55:ab:cc:2d:07:f7:cc:d7:a1:8f:
                    d7:6c:5f:a3:4d:02:1b:9a:ee:2c:25:8a:82:0b:7b:
                    ea:01:58:06:6e:32:3e:a4:02:23:4c:e6:23:f8:8d:
                    9b:d2:16:30:8e:aa:cb:60:55:2b:c6:af:5a:e5:ce:
                    15:ed:9a:ee:f8:09:77:64:3c:26:1f:c7:3c:71:04:
                    ca:15:be:8d:79:c4:1e:5e:47:29:08:bd:91:57:b3:
                    8f:8a:d2:d3:9a:94:44:cb:54:a1:ec:51:ea:fc:46:
                    37:08:93:84:71:a5:b7:7d:4b:09:d8:e6:87:48:a1:
                    f7:75:93:14:72:e1:8b:6b:11:30:29:f5:bc:1b:3a:
                    e8:f0:1d:f4:43:bb:ad:ed:10:b0:2f:40:dd:cb:69:
                    6e:64:c5:28:39:c9:34:b6:73:2a:1d:a9:0d:84:e7:
                    a3:91:10:af:51:59:7f:22:dd:3e:1d:c5:8e:68:68:
                    cd:12:fd:99:93:ff:3f:ea:b7:04:9a:cb:01:b9:d1:
                    54:50:53:79:03:c4:a4:84:40:77:b9:63:6b:93:9d:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:12:E5:C0:78:1E:94:42:54:FF:37:6D:D4:34:01:6B:81:5F:EB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/17c97364-2d34-322a-90a6-f80a73c7f5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182/0845ba3b-9fc2-40fb-b74c-445ace8b4182.crl

            X509v3 Authority Key Identifier:
                keyid:6B:84:42:69:D7:70:DD:26:8A:F7:B3:53:16:F4:AE:16:1C:63:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0845ba3b-9fc2-40fb-b74c-445ace8b4182.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f94c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:fa:7f:26:a8:45:5e:a6:36:63:a0:26:f6:3b:4f:05:e6:
         d6:d2:c7:bb:d9:89:60:cd:d0:1c:e9:a1:e7:51:cc:3d:01:fc:
         4a:3e:4d:d3:b2:c6:7e:52:e1:82:33:f0:1b:af:31:18:85:a5:
         3d:a6:aa:06:8d:11:19:cd:b3:33:ed:3e:5c:6d:19:8d:13:9a:
         75:e5:80:74:da:1d:bd:00:05:a4:7a:ed:42:f0:e8:af:c9:a4:
         f2:76:81:60:e6:8b:c6:15:cc:71:4f:e5:b7:4f:7a:cd:d9:92:
         96:47:64:9d:0c:f3:29:83:29:fe:f4:e9:57:ee:56:6c:04:eb:
         e5:1a:6e:95:6c:d0:8e:97:d8:1c:c7:75:12:ad:d0:a2:f3:69:
         8d:46:2c:98:5f:8f:c0:50:79:0c:2e:ff:a2:a4:ec:51:e9:3f:
         fb:d9:e7:75:49:06:e8:2b:4b:35:40:0f:19:92:34:6d:68:7f:
         61:9d:f0:38:e5:b1:82:db:70:de:21:e8:62:1c:51:d2:0a:c8:
         8d:3d:c4:91:a2:4c:e6:dd:97:34:f1:ea:ae:41:08:fd:f1:4e:
         be:31:af:69:e9:1f:84:6f:2e:1b:32:d0:c5:61:35:3d:c6:31:
         81:96:b3:97:7b:82:d6:66:2f:4e:d1:7c:12:c4:b4:78:4b:46:
         3f:f4:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:31:05 2025 by rpki-client