Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa
File:                     689b6d84-5481-319d-a444-836935fcee29.roa (raw, json)
Hash identifier:          zRupSHd9vcHDEJiqs1Vh3H+Z+s+23dTYlP3tE1t3gok=
Subject key identifier:   27:41:F0:CE:24:F3:57:4E:C8:1C:89:07:7E:50:84:A6:F4:E3:28:EB
Certificate issuer:       /CN=17624d03-2126-49cd-8e8c-c3d5089ac686
Certificate serial:       010D0C9F43285849C904F2FB2E936C7F987814A0
Authority key identifier: 32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     14923
IP address blocks:        2602:f92b::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f2:fb:2e:93:6c:7f:98:78:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17624d03-2126-49cd-8e8c-c3d5089ac686
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=ddb1df2e-a5f5-47f5-86d9-6fd37860835a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0c:97:bc:1f:4e:71:59:ff:cc:26:6c:ce:71:
                    b0:04:4d:1d:e8:c6:be:6b:42:39:71:80:3c:84:00:
                    24:10:8b:17:84:23:cb:ec:61:0e:20:9b:7e:6d:b2:
                    8b:80:2d:9a:70:db:09:9e:a5:e7:24:1d:9e:6e:33:
                    c2:83:43:24:a6:0d:8b:f1:b9:35:22:32:cd:a8:9f:
                    68:c5:b3:a9:93:11:fc:0f:d3:10:7d:30:92:c8:33:
                    b3:ba:d4:ee:3c:d8:ad:ab:86:b4:d4:f4:ca:7b:2b:
                    25:fb:8b:37:60:68:0e:5a:d2:b1:4b:de:74:aa:8c:
                    2a:4e:a0:bf:6c:e0:6e:ba:32:e7:81:1d:f5:d6:f1:
                    3a:11:c0:6f:85:8f:10:88:64:4c:e8:27:c1:0c:5a:
                    24:94:b0:25:ab:be:2d:9a:86:0b:63:34:8b:ea:38:
                    da:80:70:17:84:5c:11:d7:05:44:a0:f2:07:22:7a:
                    d2:a4:3a:2b:b5:00:9f:4e:43:99:35:73:f1:55:1b:
                    e9:7a:e7:7d:14:ea:bd:5c:61:fa:bf:06:74:f7:7b:
                    dd:28:95:5b:79:41:2b:99:e3:8a:8e:df:ff:20:02:
                    b9:af:ef:42:b8:31:2a:54:11:1d:0e:af:2b:19:77:
                    74:81:be:ea:59:07:35:da:46:9d:38:83:7c:91:1f:
                    1a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:41:F0:CE:24:F3:57:4E:C8:1C:89:07:7E:50:84:A6:F4:E3:28:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/689b6d84-5481-319d-a444-836935fcee29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686/17624d03-2126-49cd-8e8c-c3d5089ac686.crl

            X509v3 Authority Key Identifier:
                keyid:32:7C:86:31:15:EB:0A:82:29:D2:0E:0B:64:46:E7:84:0F:73:57:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17624d03-2126-49cd-8e8c-c3d5089ac686.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:1f:1b:04:39:8c:49:01:a9:24:72:6c:6a:f7:c1:a2:b6:a4:
         dd:b4:a6:bc:3f:b4:88:5b:75:aa:bd:e9:5a:2f:35:0a:c8:7e:
         3a:61:06:39:b4:fe:3a:a4:a7:58:26:9d:ea:be:6f:9e:59:fe:
         7b:69:64:ee:2a:46:2d:0c:8a:45:5f:6e:25:1c:24:74:ba:41:
         1b:b2:d4:9d:dd:0c:ae:4e:39:a8:90:d0:39:65:a0:92:d8:51:
         ac:23:79:ad:83:50:ec:eb:99:2d:67:fc:fa:d2:5e:68:03:b5:
         02:3c:15:e2:6f:91:78:72:b6:43:9b:f5:33:7e:df:ad:20:f4:
         f2:53:26:45:92:cd:35:a0:34:eb:37:6e:c5:58:38:52:b3:5d:
         ce:44:88:0d:3f:90:d8:e7:2e:fb:4d:9d:7c:79:bf:f7:47:8b:
         2b:a2:67:95:05:d8:24:81:30:08:51:a2:e2:e5:98:47:b6:fc:
         33:ab:1d:df:ad:25:41:0e:04:a0:f7:f3:d3:cb:32:29:18:15:
         70:40:cd:f9:2b:da:f8:9b:17:e2:ed:c1:27:80:bc:e9:66:b4:
         28:53:52:9f:ee:de:32:ee:64:52:31:f9:15:2a:b5:f5:43:97:
         fe:d7:63:c0:f6:25:5b:d6:90:d5:a8:67:a6:2a:6b:83:cd:8d:
         c9:85:da:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:14:54 2025 by rpki-client