Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/c4e6a5d6-57dc-34dd-b317-934395b218db.roa
File:                     c4e6a5d6-57dc-34dd-b317-934395b218db.roa (raw, json)
Hash identifier:          lnExQwI+e+rzBgdK7I09eDgkvO77CbYOsq8UPzubaDA=
Subject key identifier:   93:93:0D:5C:F2:AB:C6:E3:4D:D5:87:BB:6F:C8:A0:AA:43:21:53:1F
Certificate issuer:       /CN=4559e616-17ae-4214-9407-2e51c3be0fa4
Certificate serial:       010D0C9F43285849C0A4EC89684E73592BEF97E0
Authority key identifier: C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/c4e6a5d6-57dc-34dd-b317-934395b218db.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     1030
IP address blocks:        2602:f9d4::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ec:89:68:4e:73:59:2b:ef:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4559e616-17ae-4214-9407-2e51c3be0fa4
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=27141512-5046-4cd1-b082-e054254ca83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:95:3a:18:8e:8f:7c:ac:06:1d:c6:af:93:
                    de:cd:b9:31:1c:95:75:13:fc:10:9d:f6:cf:1c:61:
                    b6:c6:00:a3:87:74:9e:9a:c4:69:04:84:cf:5a:77:
                    a5:2b:05:fe:a8:65:3e:aa:dd:da:ae:db:06:fe:9a:
                    e6:f6:f1:94:a6:1d:75:7a:5c:fe:99:eb:bb:d7:84:
                    03:13:b3:cc:87:7c:53:27:11:47:f8:8b:8c:c0:3d:
                    7e:93:7a:85:d3:7f:de:7f:00:77:43:e4:d7:30:01:
                    78:db:42:42:85:a0:8c:e0:f0:c3:e7:f9:fa:9b:16:
                    6e:78:a8:74:e0:b8:89:d3:1e:9a:34:ff:63:da:ea:
                    cb:fa:df:84:e7:e8:6a:f6:02:f6:c4:b9:04:4b:c5:
                    5c:06:88:0e:5d:b9:d1:d4:f5:86:3b:35:6a:83:d9:
                    15:34:36:3f:60:c9:8d:b4:ae:a3:8d:34:45:d5:fc:
                    4f:ba:38:ee:47:54:b2:b2:03:32:e2:ee:91:a6:e8:
                    62:13:04:cd:61:f7:be:0a:64:51:67:08:99:a4:97:
                    c6:7b:9e:eb:40:e1:ff:49:c9:02:51:fe:2a:c6:64:
                    56:1a:7e:2d:da:db:22:14:98:20:89:36:b9:04:30:
                    a5:99:d3:a1:3f:4e:b1:5c:86:57:e3:85:21:a3:0d:
                    cc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:93:0D:5C:F2:AB:C6:E3:4D:D5:87:BB:6F:C8:A0:AA:43:21:53:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/c4e6a5d6-57dc-34dd-b317-934395b218db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9d4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d7:4a:f1:4b:4a:3c:41:6b:66:c7:9c:88:d9:5b:8e:cc:f9:
         91:9c:96:ed:04:19:f1:01:b2:52:be:fd:2c:05:46:8a:c3:b3:
         d6:74:b7:74:a7:75:7f:5c:a5:62:11:55:ef:25:4e:a6:17:14:
         ce:0a:54:7f:33:f8:9c:2c:0a:a5:64:f8:68:05:6f:30:d9:4c:
         96:4d:44:d8:bf:52:61:1d:0f:09:9d:68:49:80:83:77:c6:f0:
         dd:5e:40:9e:52:7f:b9:66:ab:3c:a7:fc:41:af:55:0b:4d:68:
         03:05:6d:73:59:0c:8c:16:84:b5:62:e0:59:2b:07:dc:d9:ac:
         92:11:f4:18:d7:a1:11:81:7e:bd:16:ea:9d:1c:a9:27:37:6f:
         8a:eb:49:ed:3e:61:3c:51:0e:4a:49:29:97:11:08:c2:e0:90:
         99:d6:e0:82:de:b7:15:f8:aa:30:12:6c:cb:45:4b:18:01:1b:
         46:87:c2:52:fb:ce:0e:9d:e2:33:93:f6:48:54:64:9d:35:db:
         ab:c2:70:b0:11:0e:73:40:93:5b:0c:6b:51:93:bd:b0:87:11:
         32:b2:70:d6:a0:f7:d5:cc:a2:de:34:ef:a2:7f:f5:f3:05:91:
         fc:20:cc:98:eb:1e:05:be:75:ed:b4:2a:71:08:55:6a:0d:13:
         21:5b:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:47:34 2025 by rpki-client