Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/308f91f3-f160-3e8b-bc6e-f6437accfeac.roa
File:                     308f91f3-f160-3e8b-bc6e-f6437accfeac.roa (raw, json)
Hash identifier:          Nw4JA4wj+LQj4Y9DmUfZPhMnn0cUDhUo7KcP+evRxF0=
Subject key identifier:   9A:73:A2:4F:B8:74:32:8B:62:9A:BF:48:95:82:3D:BA:FB:48:AA:54
Certificate issuer:       /CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
Certificate serial:       010D0C9F43285849B14A042D4A1CD2D0D1262900
Authority key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/308f91f3-f160-3e8b-bc6e-f6437accfeac.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     6145
IP address blocks:        2602:fc8a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:04:2d:4a:1c:d2:d0:d1:26:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=9176d9a4-cfe7-4c3c-af99-3057edb25fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:67:b8:1d:8e:df:d7:ea:8c:b4:4d:82:71:40:
                    7e:d1:1e:07:ac:cc:c1:34:43:9a:17:90:94:c7:45:
                    08:58:ee:20:9a:21:bb:02:4d:71:8a:5b:37:5f:88:
                    75:a2:f8:6c:fb:f5:49:f3:27:5a:60:4c:65:a4:21:
                    82:46:4a:40:3b:dc:37:d9:2d:0c:ca:84:92:eb:8a:
                    8c:82:dd:a7:a9:30:02:cf:49:59:69:f6:51:ff:73:
                    7c:a6:7c:9b:ff:e4:af:59:c6:ba:42:cc:3f:ce:e8:
                    ad:14:15:7c:9e:3b:90:02:ec:1f:11:eb:79:48:01:
                    07:0c:b3:19:31:48:70:c0:a3:d1:0d:f1:09:57:2a:
                    83:21:73:77:eb:f4:66:56:8c:e5:76:f7:e0:db:b4:
                    f8:a5:97:90:ec:76:4c:6f:8b:ee:d8:3a:06:c4:dc:
                    41:6a:0a:b4:38:82:55:75:9d:84:48:bc:75:d0:61:
                    1e:ca:ff:9d:6e:23:9d:d0:84:ec:ff:f1:00:d0:c9:
                    52:f9:4d:8e:cd:4e:5a:bd:56:97:b1:b3:d6:a5:9a:
                    3e:9b:16:b4:21:db:cb:fe:4c:d3:96:25:c3:eb:ee:
                    53:64:b6:db:74:e6:e8:54:f5:10:86:c4:a1:a7:8b:
                    b6:00:f0:0a:27:f7:5a:94:7f:af:cb:f9:cc:ce:08:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:73:A2:4F:B8:74:32:8B:62:9A:BF:48:95:82:3D:BA:FB:48:AA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/308f91f3-f160-3e8b-bc6e-f6437accfeac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc8a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b4:3f:40:1f:17:cf:b1:99:8f:8a:85:4d:76:28:43:fa:5f:
         c0:c4:f0:c1:3d:45:be:03:81:cc:18:5a:5f:d1:04:5b:03:6f:
         26:23:d1:fc:56:8f:98:a8:1d:57:9d:57:ce:1f:92:2f:e7:71:
         36:42:c4:4a:81:19:77:13:28:f9:1b:58:8b:21:32:7a:17:e8:
         43:df:c9:72:94:78:d5:52:b1:2e:d3:11:98:68:7c:2b:42:e9:
         5b:ee:6c:af:9e:48:61:8b:09:c5:49:c3:a1:a9:55:e5:b7:a1:
         aa:6a:ba:60:bb:ab:d1:02:b7:5e:1e:02:9d:05:83:c1:c3:1f:
         ee:2f:ad:d7:71:fc:95:74:46:9d:50:59:78:81:a8:df:29:2f:
         b8:67:1c:34:75:e2:1b:5f:0a:be:66:bb:bf:8a:c4:4b:d0:c7:
         7c:e9:98:39:c8:3c:0d:8a:bc:dc:40:f1:1d:13:f0:47:0d:2a:
         3f:51:1e:eb:cb:7b:a8:3f:9d:88:cc:9c:ff:74:de:4c:ad:d3:
         46:91:e2:74:88:9b:5d:d6:82:29:00:bf:f0:ad:1f:57:ec:e2:
         86:da:79:54:26:09:35:b1:f5:b7:0b:5e:bf:00:2d:61:69:fc:
         1f:e6:bd:1e:a1:e9:d2:4e:81:f3:19:23:4f:17:43:de:e9:02:
         b0:9e:2e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:07:47 2025 by rpki-client