Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa
File:                     a0f2799f-a502-347f-bf84-3f5a6d253844.roa (raw, json)
Hash identifier:          //czCg6A1LlN+fEOtIgxldL2NWJK+AFYKtYm0tmhC7o=
Subject key identifier:   33:0C:98:63:13:7D:33:A3:0E:9F:6D:0A:DE:23:D4:EE:B6:5B:3C:0F
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F432858490155E273AF6F5DB9DB7DB504
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa
Signing time:             Wed 26 Feb 2025 00:22:41 +0000
ROA not before:           Wed 26 Feb 2025 00:22:41 +0000
ROA not after:            Mon 26 May 2025 23:22:41 +0000
asID:                     401395
IP address blocks:        2602:f7db::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:01:55:e2:73:af:6f:5d:b9:db:7d:b5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Feb 26 00:22:41 2025 GMT
            Not After : May 26 23:22:41 2025 GMT
        Subject: CN=cb1d6a36-6bfc-4b1d-ab62-189fbb6c540f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:c9:5b:6e:03:9f:d1:38:9b:d1:e0:ae:57:
                    a3:1a:44:61:0f:e8:88:e2:7e:70:2b:3e:7c:db:c8:
                    0d:6f:e9:8f:05:79:6b:84:5a:db:e4:0a:b5:24:d7:
                    af:6d:e5:45:76:d1:2f:97:1b:70:f4:b0:19:97:44:
                    c2:24:66:9b:d1:a3:95:76:ed:ab:e6:e1:55:3a:58:
                    2b:74:94:ac:43:8e:ae:18:e0:ee:45:e0:dc:48:08:
                    58:3a:3d:59:48:fa:c4:55:76:26:5a:93:a4:31:3a:
                    0a:99:4e:98:5a:0b:c3:83:cf:f4:6a:90:62:ad:00:
                    d6:eb:40:c6:6d:9a:d3:aa:a1:25:85:23:8f:c1:d3:
                    b7:47:9c:0f:d3:62:97:df:c6:20:0f:31:ed:59:31:
                    21:74:81:9a:80:21:7b:44:e1:34:2b:12:c1:e2:a8:
                    9d:ba:10:b9:45:41:8c:6d:ca:ca:f9:97:ae:9d:81:
                    31:59:d3:e7:eb:0b:88:d1:03:ff:c1:7b:98:51:9e:
                    6d:e1:14:5c:e6:54:2d:ad:f0:8a:9e:e4:0e:22:a7:
                    e0:80:b5:5f:c8:d7:d4:13:57:5c:1e:d6:4b:43:ba:
                    8c:9b:44:81:bf:bc:56:00:fb:ab:ef:bd:79:b0:7e:
                    24:72:3c:ba:87:89:49:5d:c6:a8:7e:b4:ec:32:97:
                    e5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0C:98:63:13:7D:33:A3:0E:9F:6D:0A:DE:23:D4:EE:B6:5B:3C:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/a0f2799f-a502-347f-bf84-3f5a6d253844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:03:59:3b:c1:92:69:01:ad:11:b6:ea:6d:f7:b2:98:aa:0a:
         31:fb:c4:86:02:60:26:3d:ea:05:7d:a6:c1:b9:f4:63:1c:98:
         43:9d:a3:24:70:7f:21:3d:69:ff:4f:e4:0e:45:c9:20:a4:36:
         f6:40:0c:b4:ab:4f:c9:c4:81:62:4b:dd:fd:a6:6d:d0:fe:e3:
         01:fd:c1:c3:f9:27:51:4b:a9:20:e6:65:8b:50:f4:23:53:bd:
         64:f7:cc:c4:df:22:98:64:70:3a:f4:44:f9:f8:99:e9:64:fb:
         0e:c5:61:92:2c:23:fa:3d:cf:c1:21:f1:9e:61:4a:8d:a2:c6:
         7d:66:12:d9:05:87:61:f0:1e:72:ec:b9:66:0b:07:f6:4b:13:
         ee:d8:fd:a0:3f:34:be:cd:13:e7:90:df:19:39:f3:c5:70:cc:
         e2:4f:4b:ab:f2:9a:90:4f:88:e7:78:68:11:7c:d0:73:79:13:
         9f:cb:d7:ee:2e:d5:89:e7:07:fb:bb:ea:c8:4b:4c:16:d8:95:
         3a:22:8a:80:d8:40:58:61:50:cb:f5:d5:86:d8:7d:ba:8a:aa:
         d2:49:04:83:96:9d:a5:23:87:f8:ee:a8:14:65:66:7a:32:ca:
         7e:69:bf:f8:f7:fb:55:6b:ca:2f:95:4b:a1:ec:3a:ae:fa:09:
         8e:8a:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:07:16 2025 by rpki-client