Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df/dc503af8-8310-37ce-b4b4-1f33cb86ea69.roa
File:                     dc503af8-8310-37ce-b4b4-1f33cb86ea69.roa (raw, json)
Hash identifier:          Q6SZZxZ8HjIhSWCwEGFU74ki5UwcoOO2BN01RkP2wl4=
Subject key identifier:   E5:5E:3A:BF:1A:C5:DE:39:A7:34:DA:A0:4E:45:29:76:CD:9C:EF:93
Certificate issuer:       /CN=f25f5e06-187d-4236-81cb-8e31d54075df
Certificate serial:       010D0C9F43285849CBEACD77723BB269B862CC80
Authority key identifier: 28:64:0C:12:6A:E8:06:99:75:CD:BF:BA:F9:51:8F:52:5B:62:1B:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df/dc503af8-8310-37ce-b4b4-1f33cb86ea69.roa
Signing time:             Fri 09 May 2025 13:56:01 +0000
ROA not before:           Fri 09 May 2025 13:56:01 +0000
ROA not after:            Thu 07 Aug 2025 13:56:01 +0000
asID:                     401186
IP address blocks:        2602:f654::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df/f25f5e06-187d-4236-81cb-8e31d54075df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df/f25f5e06-187d-4236-81cb-8e31d54075df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:ea:cd:77:72:3b:b2:69:b8:62:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25f5e06-187d-4236-81cb-8e31d54075df
        Validity
            Not Before: May  9 13:56:01 2025 GMT
            Not After : Aug  7 13:56:01 2025 GMT
        Subject: CN=72851d5a-9ca8-4fc8-a263-99807df818b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:ab:dc:f6:3c:3d:99:65:43:b8:5c:fd:a1:
                    39:32:75:33:16:88:1c:92:8a:e9:68:5b:7f:43:95:
                    d5:f2:f8:83:11:ee:d2:b4:65:6b:d2:99:9a:cd:68:
                    16:d5:05:2d:41:dd:c8:b5:44:01:ce:c5:b8:8a:09:
                    36:62:43:45:06:2b:2a:cc:84:c7:9a:33:06:e2:06:
                    df:17:e0:04:42:c4:64:d6:e4:c2:0d:25:2d:cf:48:
                    ef:94:3d:d3:01:1a:f9:bd:92:ec:a5:2b:7b:92:f3:
                    2b:6a:f1:12:4f:d3:9c:85:eb:3f:8b:61:be:8c:c1:
                    f8:f4:c7:b3:51:46:db:de:4f:0f:1d:1d:c7:71:35:
                    3a:d8:be:5a:59:b2:0f:fa:c0:c9:10:07:d9:ea:b3:
                    6d:78:fc:8d:5d:03:ea:cc:d8:92:f5:25:32:65:57:
                    4e:5a:1a:53:9a:52:e9:ae:a6:a6:a2:66:bc:3c:30:
                    d2:79:05:9a:38:79:0a:d5:db:95:bd:a3:33:3c:6b:
                    12:f1:89:45:ef:c2:ed:cf:b2:d4:7f:30:d3:64:64:
                    32:95:a9:f3:f9:72:f9:5f:d7:58:55:49:df:ea:7b:
                    64:81:9d:c2:69:26:f6:3d:b3:10:43:de:99:77:57:
                    13:ec:8a:c9:20:a5:2f:36:6f:0d:2c:96:7d:36:15:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5E:3A:BF:1A:C5:DE:39:A7:34:DA:A0:4E:45:29:76:CD:9C:EF:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df/dc503af8-8310-37ce-b4b4-1f33cb86ea69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df/f25f5e06-187d-4236-81cb-8e31d54075df.crl

            X509v3 Authority Key Identifier:
                keyid:28:64:0C:12:6A:E8:06:99:75:CD:BF:BA:F9:51:8F:52:5B:62:1B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f25f5e06-187d-4236-81cb-8e31d54075df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f654::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4d:6a:7c:17:5e:6b:f7:eb:c3:1a:f8:78:bc:2f:4d:c0:75:
         9e:e7:ec:87:79:a8:d7:b3:3a:ff:57:f3:7e:e4:ad:0e:c6:a6:
         01:bc:ed:af:ff:61:6d:7b:31:e5:71:c9:d6:86:df:85:93:88:
         43:5e:e4:2a:4c:97:e9:e7:1b:d2:af:5f:3e:1c:db:a7:83:ea:
         95:7e:a0:60:7b:8d:17:c6:0e:de:d6:e2:80:4a:1d:77:1c:94:
         15:12:fd:fe:a7:4f:ab:65:86:c9:42:fc:21:a1:46:fe:75:0f:
         7e:21:aa:1b:86:24:26:b3:33:11:57:74:21:ca:5a:08:f3:71:
         74:5b:ea:f9:95:6c:5a:32:4a:53:04:ad:e0:ee:6a:68:cd:fc:
         33:a4:c3:5d:37:b7:e0:9a:01:03:e9:4d:2b:8d:1d:55:cf:4f:
         46:d9:18:59:3f:f3:db:31:14:2d:ae:c1:f0:5f:b4:b3:06:48:
         91:bd:2b:7d:58:fd:b3:32:ab:71:bf:2e:04:8c:29:c4:e4:62:
         86:50:22:9f:61:76:e1:14:fb:e5:bc:ad:db:69:71:7c:47:3e:
         9e:f2:ce:42:a1:20:02:ad:05:c8:3e:08:a3:e8:13:70:c0:dc:
         f2:df:2f:5c:b4:0a:f1:e5:56:5a:94:fa:a4:cf:55:e8:24:ef:
         2d:44:c6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:09:22 2025 by rpki-client