Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/3e122352-e0b1-3594-935f-3d6dd5590f2e.roa
File:                     3e122352-e0b1-3594-935f-3d6dd5590f2e.roa (raw, json)
Hash identifier:          pqYmcZm/qnpZ9sh+5xe46J316rWcoxmVDXD+PsjTWfw=
Subject key identifier:   D4:6F:E8:D8:D5:22:B2:0A:8B:B0:75:B5:43:CF:F0:43:5C:98:BC:00
Certificate issuer:       /CN=f80afed8-630c-4446-a972-f7554ab8ece0
Certificate serial:       010D0C9F43285849C93F830F52AD3C65EABDE7D0
Authority key identifier: ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/3e122352-e0b1-3594-935f-3d6dd5590f2e.roa
Signing time:             Thu 08 May 2025 14:59:16 +0000
ROA not before:           Thu 08 May 2025 14:59:16 +0000
ROA not after:            Wed 06 Aug 2025 14:59:16 +0000
asID:                     22339
IP address blocks:        2602:f6ca::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:3f:83:0f:52:ad:3c:65:ea:bd:e7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80afed8-630c-4446-a972-f7554ab8ece0
        Validity
            Not Before: May  8 14:59:16 2025 GMT
            Not After : Aug  6 14:59:16 2025 GMT
        Subject: CN=26bef489-dcab-4e5d-855e-f8f54c450886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:ec:4e:7f:93:c7:00:81:f4:d6:86:a6:2f:
                    71:af:d1:75:76:6a:4c:08:ab:90:1d:98:0f:73:b3:
                    22:d5:58:e3:c9:3b:2a:04:67:6b:18:94:5e:b9:06:
                    97:69:85:f8:76:2b:f4:e0:fd:29:ef:58:b8:6e:64:
                    e1:b5:63:f0:b5:b7:84:b5:82:f5:60:65:f7:e3:cb:
                    3a:3d:b3:3c:12:a8:d5:a1:3e:9a:69:74:ec:dd:55:
                    51:f6:6b:29:97:24:89:aa:27:54:0f:a6:01:9a:47:
                    99:78:33:b2:0c:0e:c7:ad:03:ca:c3:02:74:50:d6:
                    ef:77:83:1b:3a:ac:bd:41:93:cc:e4:bc:55:22:d9:
                    bf:d9:de:9e:d4:84:1d:92:99:cf:f4:38:c8:ad:3d:
                    8d:92:b7:87:8c:2b:0f:27:1f:bf:68:8a:e8:ec:49:
                    31:07:f8:9b:7e:5f:72:77:b0:a3:5a:0b:5c:78:9f:
                    ef:a5:6c:7a:0a:07:8c:17:11:77:ee:48:d1:5a:6e:
                    f5:37:93:38:09:8d:0e:37:c4:70:08:c7:2a:3d:b8:
                    c5:e3:37:68:92:99:f9:8c:54:c7:01:e4:23:64:f3:
                    31:cb:e7:3e:56:ad:85:19:10:1a:9c:0a:48:0c:57:
                    5c:42:60:31:ba:56:c4:ab:ac:25:6b:64:af:fe:84:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6F:E8:D8:D5:22:B2:0A:8B:B0:75:B5:43:CF:F0:43:5C:98:BC:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/3e122352-e0b1-3594-935f-3d6dd5590f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0/f80afed8-630c-4446-a972-f7554ab8ece0.crl

            X509v3 Authority Key Identifier:
                keyid:ED:46:6B:37:0E:5E:93:E5:81:F9:D0:DA:B1:76:0B:BB:89:2E:4F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f80afed8-630c-4446-a972-f7554ab8ece0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6ca::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e2:50:c7:bb:64:90:45:9b:38:74:61:1a:7a:bf:4f:be:58:
         cd:83:c1:0b:40:70:51:74:b0:39:4c:b8:57:12:40:1a:c3:97:
         bd:7a:5b:bd:cf:b2:3b:37:6d:33:68:b6:8f:9c:5e:2c:34:dd:
         f7:6a:e2:49:b2:1a:7c:b0:bd:87:b4:e1:54:f8:cd:21:d0:81:
         e4:01:a4:bf:16:38:41:ca:68:d0:f8:7a:3f:24:90:c7:e9:24:
         c0:2f:aa:48:6c:00:16:66:f4:0f:91:49:4c:ab:ad:eb:a1:9e:
         75:65:64:18:18:28:9a:42:e9:2f:ec:51:95:ba:b7:a9:2d:38:
         2f:84:f8:e1:22:72:78:f7:82:5d:e1:2b:45:fd:08:1a:76:e1:
         ea:58:2f:b5:f0:55:26:a8:cd:a5:e2:0d:5f:c5:50:70:d0:38:
         22:3e:de:bb:1a:47:f8:33:30:7b:6a:7d:c5:91:58:92:57:95:
         03:9f:2e:6d:80:bb:66:57:5a:a0:ba:d6:b8:b8:d9:17:f7:a7:
         d7:47:05:f5:8c:db:a7:aa:db:86:69:ad:61:b7:a5:25:08:89:
         66:80:f6:fe:ed:f1:4e:f8:96:06:e3:63:f4:e1:af:6b:aa:ca:
         bc:0a:c0:92:a3:90:ae:f9:8f:b4:88:54:b9:ee:ea:55:45:4e:
         9e:ac:b3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:07:43 2025 by rpki-client