Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/62cac302-3527-3ef3-beab-cc5a3b35a766.roa
File:                     62cac302-3527-3ef3-beab-cc5a3b35a766.roa (raw, json)
Hash identifier:          LO79kQgAGtUS0KGkn1Qmg19VmcOU6ejH4uqToyV10FA=
Subject key identifier:   6E:32:57:31:E3:EE:49:2E:A6:2E:E6:D9:B9:1D:FC:AF:B1:01:F5:D3
Certificate issuer:       /CN=940078fb-65b7-4c74-922c-09f44f222b6e
Certificate serial:       010D0C9F432858499C1E226C3E2155427B514000
Authority key identifier: 45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/62cac302-3527-3ef3-beab-cc5a3b35a766.roa
Signing time:             Tue 22 Apr 2025 11:00:39 +0000
ROA not before:           Tue 22 Apr 2025 11:00:39 +0000
ROA not after:            Mon 21 Jul 2025 11:00:39 +0000
asID:                     20317
IP address blocks:        2602:f8a2::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:1e:22:6c:3e:21:55:42:7b:51:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940078fb-65b7-4c74-922c-09f44f222b6e
        Validity
            Not Before: Apr 22 11:00:39 2025 GMT
            Not After : Jul 21 11:00:39 2025 GMT
        Subject: CN=d1e64d34-fcf8-492b-98fa-c7790ff7b72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:20:a9:08:20:84:c7:c7:12:0f:62:02:61:
                    16:84:b6:03:86:0c:cb:07:a1:b0:6c:06:ec:1e:d8:
                    e9:be:45:6c:16:80:7e:2d:42:e6:9e:9b:25:96:cd:
                    49:df:4b:51:58:8f:ae:95:55:d8:e7:1f:52:10:6a:
                    06:62:97:29:03:c8:18:b4:aa:81:a1:e3:31:99:46:
                    da:ac:4e:91:19:bf:b9:a3:1c:eb:15:b4:b8:89:d2:
                    55:b4:d2:2a:74:e5:ee:38:b3:82:8b:1b:a4:a5:c2:
                    e5:93:05:e8:69:c5:5e:a4:6d:6f:c4:c1:b3:e8:d3:
                    0b:93:da:c7:b5:37:4c:30:1b:59:0d:f9:97:a9:79:
                    03:b5:b0:64:9d:8e:f8:16:28:f6:bf:fa:2d:d1:ce:
                    fd:e2:b7:3b:04:d1:e8:dc:51:83:e1:4b:54:9b:2f:
                    be:25:b0:5a:0c:10:2e:08:0c:11:82:c6:3f:10:86:
                    8d:a3:bf:40:a5:55:a0:90:13:c7:b7:3f:f6:00:de:
                    34:62:2f:04:30:e8:30:9a:9d:10:85:1c:11:e2:29:
                    fc:22:2c:f9:4f:d7:00:ed:ea:3f:3a:1e:d1:81:4f:
                    b2:bb:a1:73:8a:6f:53:cd:dc:6b:78:29:1c:42:68:
                    78:5e:85:d1:0c:0a:48:19:36:29:e5:30:69:22:cb:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:32:57:31:E3:EE:49:2E:A6:2E:E6:D9:B9:1D:FC:AF:B1:01:F5:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/62cac302-3527-3ef3-beab-cc5a3b35a766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e/940078fb-65b7-4c74-922c-09f44f222b6e.crl

            X509v3 Authority Key Identifier:
                keyid:45:F5:D6:A8:D8:00:E9:0D:69:24:18:70:88:48:D7:BF:CE:DE:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/940078fb-65b7-4c74-922c-09f44f222b6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:6c:33:06:fa:d0:37:29:5d:35:5e:c6:15:03:bf:63:1e:
         e7:e7:5b:60:ed:11:d9:4e:8e:28:12:b3:4e:c9:f7:1f:9e:21:
         d4:3e:ad:48:85:e4:da:24:56:28:cf:26:20:e2:2d:d4:47:c9:
         ff:c9:f6:90:b9:38:81:c6:44:f9:73:c4:da:ab:75:19:46:b2:
         69:b0:85:8d:85:87:bd:2b:a7:12:86:59:b1:86:70:9a:c9:ab:
         b4:24:38:b8:1b:c6:c8:6a:fe:ca:41:27:6e:36:a5:5e:cb:bf:
         df:b7:dc:03:18:c8:20:24:f9:ab:5b:2f:41:bc:f9:e1:da:50:
         3e:fb:db:d2:e8:70:96:58:ac:09:09:11:c0:77:24:1d:4c:2c:
         b7:f8:3f:5d:cd:84:6f:be:b2:76:13:87:83:fb:70:7a:82:6f:
         26:99:83:87:20:5f:10:1c:c9:c1:0e:56:ee:a7:86:c6:92:f9:
         5b:55:26:ee:97:37:75:93:f1:31:b3:cd:ba:af:e6:f4:c2:76:
         2d:40:b2:31:04:dc:23:4a:97:90:f0:01:cc:79:95:36:19:cb:
         f9:43:5f:ae:69:41:53:ea:0f:1e:b7:c7:00:4f:1b:0f:62:b0:
         a3:07:01:8b:8c:51:4e:45:1a:7b:91:6a:b4:fd:ec:fb:9a:03:
         2d:ac:55:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:35:47 2025 by rpki-client