Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
File:                     62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa (raw, json)
Hash identifier:          tnCGLTV1IOS5KNB9jIwbzYGI02mCvXqIQhxFbBNlEBI=
Subject key identifier:   11:B2:22:52:D9:3E:86:9E:D3:75:A0:FC:F2:8B:F6:E2:F6:B8:1B:38
Certificate issuer:       /CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
Certificate serial:       010D0C9F43285849912F30FF72815C362ACAD0F0
Authority key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     399525
IP address blocks:        2602:fc9e::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:30:ff:72:81:5c:36:2a:ca:d0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=93fb6c91-88f6-4c64-99f9-fbea9b00f0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:fe:ec:a9:c2:fe:3a:51:9a:6f:80:04:20:
                    48:2f:70:64:59:7e:90:0e:6e:d9:71:4a:6a:43:c8:
                    fc:d5:0a:5a:18:4f:b6:b0:81:4d:98:a4:90:c7:eb:
                    05:aa:ec:f8:f3:af:35:27:22:6b:c2:d7:06:b4:4e:
                    4d:c2:75:8c:f6:b1:e3:46:6c:85:8d:be:38:0c:72:
                    2c:6f:a4:85:70:a4:2b:86:42:0c:2f:2f:d9:02:62:
                    a3:e7:99:5f:95:2e:24:07:df:6b:e6:33:47:b7:fd:
                    1b:f1:55:ba:0d:68:50:07:35:88:f6:be:97:50:f9:
                    50:d0:46:fe:be:62:9e:a4:6d:cb:92:3a:22:59:12:
                    54:15:49:af:0c:e9:38:c3:42:a1:57:10:2c:e4:a6:
                    e2:f0:84:20:ec:6a:0d:b4:a8:3a:45:b5:ed:0a:1f:
                    a2:09:0e:5d:20:d1:7b:a9:92:e1:79:83:ca:69:6a:
                    9b:d9:5a:cf:ca:69:2b:9d:01:1c:0c:5d:1b:21:5c:
                    05:1a:e1:8a:e2:81:ec:7f:89:bb:09:2b:e1:2e:fc:
                    de:08:95:46:1f:0e:30:c3:10:d3:27:90:10:88:22:
                    75:0b:71:77:6a:99:01:03:2d:a6:27:b5:f6:1d:0b:
                    7f:43:84:09:55:13:e8:86:cb:c5:df:d6:61:c3:2a:
                    49:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:22:52:D9:3E:86:9E:D3:75:A0:FC:F2:8B:F6:E2:F6:B8:1B:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/62ba1b80-1750-30cc-ae03-0ad2e1c4fff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.crl

            X509v3 Authority Key Identifier:
                keyid:FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc9e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:49:c4:f9:2d:43:f5:f5:e5:4b:2d:bb:36:78:f6:6a:3c:f6:
         35:a9:be:ba:06:67:1c:9d:4d:16:46:e8:36:3a:92:ea:53:e3:
         6d:98:a3:f2:aa:ec:10:0f:f1:24:ef:df:22:03:e6:86:29:66:
         fa:64:04:71:fa:73:95:71:af:1b:8a:a4:7e:ac:24:4e:09:80:
         8d:f4:59:b8:7c:a5:06:b8:00:45:1a:63:20:da:00:10:14:a4:
         67:20:07:de:87:a1:6b:ad:3d:1b:8b:e1:f2:36:64:59:e3:9e:
         74:0c:5c:e3:48:d3:a7:c4:4f:e0:ce:34:17:67:be:82:78:ca:
         b8:15:93:9c:bc:30:4e:e0:19:78:ff:4c:11:c4:ac:71:38:14:
         77:ff:57:0c:db:d3:a1:72:14:83:08:e1:9c:6d:1c:72:23:9d:
         9a:29:7c:f0:b0:f5:cb:f6:a3:d5:7f:15:d0:90:5c:1e:a4:9c:
         3e:ff:39:0c:db:6a:d9:bb:66:62:84:ee:4a:b2:64:f3:d3:4c:
         1e:b3:c6:99:19:18:61:79:54:f8:3b:2c:d8:ac:ec:37:76:7d:
         8f:e9:e3:ab:db:b7:71:6c:15:49:e1:1f:70:30:36:34:31:b4:
         3a:ea:84:0e:92:33:1c:4a:b4:d2:4e:63:4c:f3:ee:ef:e2:bf:
         9d:a5:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:33:42 2025 by rpki-client