Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/0e4e74ca-6f78-31f4-865e-0fbb2530b4a8.roa
File:                     0e4e74ca-6f78-31f4-865e-0fbb2530b4a8.roa (raw, json)
Hash identifier:          ikI3/2hiT5pw+y5NlesT+JjZTZSMEmLghrZtib66DO0=
Subject key identifier:   B6:3D:D2:41:2F:5E:2A:66:27:D5:C8:C8:F1:F8:4A:2A:97:42:97:AF
Certificate issuer:       /CN=10f98d2b-74bc-4c35-b3c4-6890c248ed4b
Certificate serial:       010D0C9F43285849BF3F654B7A0E5E5774EB8F00
Authority key identifier: 0F:70:4F:1D:6B:A6:7F:86:97:8E:0D:57:46:A5:13:CF:B7:20:5F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/0e4e74ca-6f78-31f4-865e-0fbb2530b4a8.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     401131
IP address blocks:        2602:f8a8:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:65:4b:7a:0e:5e:57:74:eb:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f98d2b-74bc-4c35-b3c4-6890c248ed4b
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=9488e732-72dc-40e5-8b4d-ec00b2ce71b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e6:f7:18:78:a8:2c:b9:f0:0d:d5:fe:2f:6a:
                    41:c3:1d:69:0e:1a:9f:b3:78:8d:72:cb:0e:dd:e2:
                    00:ef:ed:02:c0:ca:50:60:8a:d5:3a:15:af:8d:39:
                    14:c9:bf:98:5f:a1:f4:86:3d:5e:e5:85:7e:c7:8c:
                    de:33:55:d6:e0:a6:ae:41:3e:b6:fa:12:bb:e9:d4:
                    f5:7e:da:43:ba:9a:e4:3c:70:cf:bf:3e:9e:e8:d8:
                    12:50:7e:7c:52:6d:51:90:00:d7:97:b8:d5:57:37:
                    b2:a0:d8:4d:76:ad:d4:de:2f:48:eb:61:e0:20:67:
                    56:93:32:b5:b4:f7:ba:f3:7b:2a:c3:80:61:4c:2d:
                    ad:29:d1:c4:76:1e:19:67:5f:ef:d4:76:11:7d:da:
                    18:c0:e7:9e:97:9a:2a:fd:f1:9c:10:77:6d:b1:6b:
                    d5:4f:bf:b1:37:10:51:5f:20:45:af:06:a4:0b:88:
                    84:94:87:1c:9c:8a:81:0a:50:82:dd:a3:14:c7:41:
                    3d:36:43:ae:84:1d:44:4e:77:a4:2c:b1:67:9d:3f:
                    47:49:09:3a:ca:5f:64:c9:9c:7d:0d:81:03:c8:44:
                    1e:06:bf:4e:43:28:f5:a5:79:e0:5e:37:ac:74:6f:
                    df:fe:34:12:8c:9c:5b:c7:49:3b:53:4b:e3:f1:00:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3D:D2:41:2F:5E:2A:66:27:D5:C8:C8:F1:F8:4A:2A:97:42:97:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/0e4e74ca-6f78-31f4-865e-0fbb2530b4a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.crl

            X509v3 Authority Key Identifier:
                keyid:0F:70:4F:1D:6B:A6:7F:86:97:8E:0D:57:46:A5:13:CF:B7:20:5F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a8:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:14:bb:9d:4b:14:ca:a8:e2:c1:bb:4d:a5:10:ed:55:42:
         66:70:a4:c8:53:eb:b5:5d:0a:18:97:60:dd:d6:21:4f:84:0b:
         98:bc:82:30:30:eb:2f:95:52:ac:07:bb:d2:f2:6c:7b:87:25:
         18:fe:91:89:6f:f9:23:d9:d6:27:36:7f:47:65:c6:e1:26:89:
         0e:38:51:e0:4e:17:e5:5f:65:7a:e6:fb:4d:4b:81:01:6b:f9:
         c8:00:d7:95:18:46:ab:04:38:46:58:8c:8e:37:45:bd:db:8c:
         c1:d5:3f:4e:22:0c:58:a5:73:dc:df:dc:84:97:67:e5:ae:ff:
         87:c8:49:7d:71:93:aa:00:55:60:0f:ca:4f:b6:f1:85:d7:f5:
         1a:f0:ed:f1:ae:aa:07:f9:c5:ed:c8:87:fd:57:17:9a:72:de:
         1e:4c:d6:84:0e:83:76:f8:3c:bd:db:aa:f9:75:8d:55:34:f8:
         ec:db:c8:95:17:91:a0:09:67:b1:47:da:77:60:f4:3c:43:93:
         c3:e4:31:86:da:82:e8:e0:05:d5:82:06:37:ea:2a:54:87:1a:
         76:33:46:02:0a:79:86:2c:32:87:d8:a6:05:75:d5:91:55:0e:
         89:1f:05:b1:72:10:c6:20:26:8b:9e:c3:df:91:d1:0c:74:e5:
         40:7a:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:02:36 2025 by rpki-client