Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa
File:                     34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa (raw, json)
Hash identifier:          sxA7iLGuMhalgntZEwoigBrMEZIjQ9xUzBEtH0dJF+Q=
Subject key identifier:   5C:BA:74:66:6D:21:C8:26:4C:52:84:24:10:43:DD:79:B3:AA:65:88
Certificate issuer:       /CN=371ab6b7-8872-4856-a33d-61dbefb13d34
Certificate serial:       010D0C9F43285849AE7F377CFCEB5E08DFF69480
Authority key identifier: 79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     11064
IP address blocks:        2602:f80b::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:37:7c:fc:eb:5e:08:df:f6:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ab6b7-8872-4856-a33d-61dbefb13d34
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=5cf63085-5669-4a43-b352-f65ff38c7e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:af:7b:47:2d:f7:a6:22:10:a7:a9:88:55:
                    ad:36:20:49:43:0c:cb:6b:79:9e:5e:f2:12:20:ad:
                    f1:c4:bf:7d:5a:6f:e3:a4:7d:ae:5a:b5:b5:4e:94:
                    2f:43:f2:88:0b:35:23:f3:d8:73:98:55:b6:27:a2:
                    50:9e:d2:0d:37:91:a8:17:bf:c2:3b:88:41:a0:45:
                    0d:93:3d:2c:0c:e8:cf:ef:1c:1d:bf:ec:5b:7b:2a:
                    d8:b6:fe:17:12:34:5f:a4:df:62:5c:43:9f:45:ac:
                    3c:29:01:0f:3a:46:36:fe:26:53:3d:1d:dd:c6:e5:
                    66:7b:33:6c:20:19:fb:7d:c2:5a:b3:b4:d9:40:8b:
                    70:96:17:b6:02:2e:35:25:fb:14:20:7f:3a:e9:b3:
                    0a:9d:46:19:8a:67:4b:60:32:5a:6b:08:93:3e:c2:
                    22:50:88:f1:4b:26:37:22:5a:6f:6d:af:57:39:0a:
                    6f:ad:66:5b:ce:2a:60:ca:43:96:3b:f9:51:ad:cc:
                    2a:e7:49:1e:69:f6:0e:4f:64:b3:5a:00:06:4d:01:
                    d2:81:b5:51:76:37:4b:49:f7:bb:b0:fe:1a:7f:76:
                    af:ad:9b:b6:35:44:81:ef:1b:fd:3a:82:60:61:47:
                    d1:a4:22:8d:60:62:f9:5f:34:82:0c:6d:78:15:38:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BA:74:66:6D:21:C8:26:4C:52:84:24:10:43:DD:79:B3:AA:65:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/34f27922-6d5c-3d6f-93d7-fa8d483961ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl

            X509v3 Authority Key Identifier:
                keyid:79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f80b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:eb:73:4b:b6:6e:2a:4f:9b:86:f7:07:49:46:9a:7c:20:6d:
         1f:65:2a:02:94:a9:13:62:6a:17:16:fa:bd:c3:54:f7:9c:7a:
         14:94:52:cc:b8:20:04:5b:e4:bb:c0:05:35:86:91:c9:c0:35:
         05:e4:4c:91:e1:ff:10:20:91:c1:ee:f7:df:f5:28:b3:26:69:
         a1:5a:be:bf:30:b4:88:b0:15:bb:1f:1b:9c:11:f0:f7:75:4b:
         cd:49:ac:c6:25:06:ba:ee:14:0a:67:8d:f0:c1:18:39:cf:e9:
         38:90:a5:95:8b:a7:21:d0:e9:ce:fa:ea:1a:4c:fc:b6:2d:58:
         58:4e:4e:86:50:72:b9:98:b9:31:e7:ae:45:57:70:cd:50:90:
         19:f5:29:9b:ed:0f:f3:97:00:d4:b0:03:ea:92:d6:2c:8a:cb:
         9f:f0:a9:3d:d1:7d:ef:b6:c1:8d:d0:54:40:3b:ba:7b:1b:16:
         e9:e8:06:5d:45:df:2e:cd:3f:e0:ad:d5:63:8a:48:7c:91:a4:
         bd:8f:61:55:ea:6a:f7:8c:1a:2b:c5:29:68:1c:8f:85:21:94:
         56:b4:d4:49:51:06:34:ae:0d:79:65:20:79:8e:d9:ba:01:b3:
         b1:4c:a7:ad:dd:03:ad:55:4f:80:58:95:c6:8f:30:8d:fa:62:
         df:27:62:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:16:37 2025 by rpki-client