Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/6f5e32ef-5894-3e04-a006-fc6e465d364b.roa
File:                     6f5e32ef-5894-3e04-a006-fc6e465d364b.roa (raw, json)
Hash identifier:          8vlmhCHYW8Q6uj/IsPc+b3nw7Pvg8LU65iLBRY1JJlk=
Subject key identifier:   96:97:E8:F1:29:78:FE:F0:0A:AB:FF:BC:D6:3A:C2:EF:1F:04:B4:56
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F4328584A31B567C5F495031EA8CFCB80
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/6f5e32ef-5894-3e04-a006-fc6e465d364b.roa
Signing time:             Sun 15 Jun 2025 01:00:49 +0000
ROA not before:           Sun 15 Jun 2025 01:00:49 +0000
ROA not after:            Sat 13 Sep 2025 01:00:49 +0000
asID:                     142382
IP address blocks:        2602:fbe8:f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:31:b5:67:c5:f4:95:03:1e:a8:cf:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Jun 15 01:00:49 2025 GMT
            Not After : Sep 13 01:00:49 2025 GMT
        Subject: CN=0a01e5d8-108a-4489-9f23-824900d5f6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:ee:e8:e7:2f:4a:ed:14:ae:76:9d:6a:7d:
                    c8:db:08:b5:5b:b7:d8:cf:b8:37:de:18:89:e7:83:
                    83:e2:87:b9:05:67:ee:cb:fa:71:ee:99:62:4b:ee:
                    40:e7:91:d7:dc:2e:80:69:71:a2:74:64:b6:5f:cc:
                    7f:a8:6b:b2:1f:50:c4:5b:3a:6d:8a:da:09:b4:d8:
                    9d:00:61:6f:37:4d:20:35:60:76:c9:2a:ed:13:4f:
                    a2:bb:74:48:c4:e1:15:73:af:f1:da:cb:d6:03:3f:
                    73:20:b3:5b:9b:e5:b1:cc:45:ac:cb:5a:d3:a8:8b:
                    5e:b7:95:0f:f5:c8:05:b6:9e:13:25:c1:3e:b3:f9:
                    be:ba:e6:ed:c1:45:94:ea:bf:cf:2c:12:ee:df:af:
                    be:34:59:b8:7a:29:b2:e8:e8:60:d9:1a:33:39:6a:
                    9e:d5:9a:50:9d:c2:8e:29:50:85:dc:61:a0:84:e9:
                    65:d6:ac:c8:8f:23:78:17:69:77:1e:ed:79:16:b3:
                    c1:63:91:ed:31:74:ef:0b:ae:fe:62:77:f5:30:fa:
                    fb:cf:42:58:c1:d0:d2:e6:82:e2:64:31:15:a6:82:
                    96:3a:30:2f:e6:26:5a:85:3b:26:d5:9a:38:99:8d:
                    f5:d2:26:9f:0a:d9:6a:f0:c2:2a:e7:45:68:e3:9b:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:97:E8:F1:29:78:FE:F0:0A:AB:FF:BC:D6:3A:C2:EF:1F:04:B4:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/6f5e32ef-5894-3e04-a006-fc6e465d364b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe8:f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4e:5f:69:02:7e:6d:a5:3e:54:2d:f4:8d:95:ae:1a:1b:71:
         b1:fe:69:de:6f:a1:d9:f4:22:b9:42:95:93:d3:9f:a1:82:b8:
         99:b1:7b:83:9a:84:dc:4f:e5:00:e0:25:1e:b2:a7:36:db:64:
         38:e6:3f:97:e7:34:fd:a5:1e:60:ae:95:9b:68:93:22:fa:18:
         8e:79:8d:a7:26:a9:11:b8:f5:04:c7:00:6d:8f:3c:a6:af:8e:
         8d:db:3f:6e:f1:aa:4c:8b:f2:9b:3d:f1:40:85:84:09:ec:7c:
         4a:b6:af:a1:51:51:c0:a1:ac:f1:4f:57:27:95:cb:62:89:47:
         f3:cf:b4:33:7e:a0:d3:87:0c:f7:db:48:ba:55:b7:9d:78:1c:
         59:76:44:eb:07:06:65:da:57:6a:e3:df:29:6a:80:43:a6:4f:
         ca:4a:b8:99:0e:8e:0a:3c:90:2c:5c:47:23:92:22:55:5f:9b:
         d7:15:ec:c0:92:c2:14:ca:ce:e6:52:c3:0b:5c:fc:13:87:79:
         2b:65:ce:0a:7f:a6:10:66:46:72:7a:09:0c:1b:53:e7:31:c7:
         f6:e0:5b:19:e8:60:66:c9:e2:d8:22:e7:43:21:44:bf:96:37:
         9a:78:cc:e5:3f:f9:b1:54:d2:3d:24:42:6c:ab:94:7e:5a:8c:
         99:0c:f9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:10 2025 by rpki-client