Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3365ed12-aaa6-34be-82d4-33f987b22502.roa
File:                     3365ed12-aaa6-34be-82d4-33f987b22502.roa (raw, json)
Hash identifier:          zsdqGs7aTsmxN/2YPBvhUhXxOaARxzgw6IDcT7NBNUs=
Subject key identifier:   C4:08:5A:2E:F0:95:1E:88:1A:64:19:FE:E5:90:9D:85:04:3B:51:C4
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F4328584A7BB0E50CBCD662E83D177CD0
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3365ed12-aaa6-34be-82d4-33f987b22502.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     214809
IP address blocks:        2602:f71e:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:e5:0c:bc:d6:62:e8:3d:17:7c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=bc180a3e-8855-4795-b979-0fcdcff7d204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:a7:61:e1:45:ac:0f:b1:bb:79:06:5b:b4:
                    ab:2e:c2:73:f5:33:48:6a:b4:75:da:30:ce:b6:45:
                    96:50:ca:13:fa:46:d3:f8:14:44:da:82:61:3a:11:
                    5f:3a:bf:77:4b:de:90:89:c2:ef:e8:4f:fb:a1:0a:
                    39:03:19:ef:8c:48:de:55:50:67:29:8e:bb:cc:27:
                    2b:c1:27:1f:9b:b0:bb:b4:bf:25:e5:17:81:90:4b:
                    ab:d6:ca:bf:f3:dc:e0:e5:1f:bb:e8:72:ad:f3:33:
                    7a:5f:3f:7c:ea:d1:e4:8a:85:0f:91:bf:2b:10:f6:
                    e8:0f:dc:6c:72:8b:a8:bf:d1:3f:df:ee:63:65:03:
                    a9:f4:a5:80:13:78:0c:28:02:2f:0b:b7:0c:6a:97:
                    07:25:0d:3a:48:eb:04:92:c1:03:38:d1:28:d1:9f:
                    b0:43:46:18:ec:e9:88:aa:9d:58:f3:8e:cc:cc:06:
                    43:54:31:41:f5:05:07:28:20:cb:0e:a4:0e:fb:97:
                    85:32:81:08:2c:1c:9c:8f:9d:16:36:ac:89:03:a2:
                    99:3b:ed:9d:00:73:76:36:f7:a0:48:7c:9b:ff:00:
                    d2:cd:fd:65:4b:12:41:e8:82:36:7a:df:5f:3f:2a:
                    f5:1a:19:7f:48:63:e2:39:75:72:53:91:1a:8d:d1:
                    72:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:08:5A:2E:F0:95:1E:88:1A:64:19:FE:E5:90:9D:85:04:3B:51:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/3365ed12-aaa6-34be-82d4-33f987b22502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71e:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:0e:fd:b2:91:df:f5:4f:d1:e0:ac:92:a1:7d:5a:92:9e:2b:
         fa:21:ab:cb:5a:97:30:6d:79:ca:b1:e9:d4:58:47:bb:35:2a:
         ea:94:0e:36:3c:b4:45:d9:fd:a2:2a:ab:4f:18:8b:83:49:54:
         0e:22:e4:87:d1:3a:2e:66:c9:79:d5:36:10:c2:eb:e8:2e:c8:
         77:f8:7b:28:24:68:02:ae:93:59:55:71:f3:78:67:49:19:53:
         db:8a:03:4b:d3:c7:72:82:93:e1:5a:3b:4b:35:cb:08:29:c5:
         d5:e3:f5:8d:26:b5:ec:cb:5c:d5:34:ab:72:ba:fc:bb:4b:84:
         9a:69:61:3a:61:ec:a0:5e:1b:62:72:0b:ec:d4:80:dc:eb:0c:
         5e:1b:32:97:75:8d:c1:33:62:4b:eb:e4:1b:b9:3f:4c:cf:ce:
         ae:f1:6e:10:95:52:81:dc:66:80:53:55:62:89:65:de:cd:e2:
         6a:ac:84:c8:25:c7:b2:78:29:d5:20:48:75:22:e9:3a:4f:aa:
         8c:05:39:e7:db:a3:77:be:3c:df:b7:74:fc:40:18:c0:1e:bd:
         41:82:db:89:79:f2:f5:d4:22:dc:45:4c:21:b3:fa:ee:b5:6d:
         c8:3b:17:f8:82:76:c7:55:37:85:ad:da:89:b7:2e:e6:95:f4:
         f8:ed:a6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 18:57:50 2025 by rpki-client