Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/dcfddeaf-43b7-3dee-9381-6d8d6c32e17d.roa
File:                     dcfddeaf-43b7-3dee-9381-6d8d6c32e17d.roa (raw, json)
Hash identifier:          F+TC7kEG9fx3VsMf7SQUpVI0wm8l0NRj2TBGF7ym+WM=
Subject key identifier:   D4:92:1E:EA:37:D6:89:61:7E:22:A3:B4:34:E3:79:60:9F:51:FC:88
Certificate issuer:       /CN=15756508-6a6f-4a84-9002-5dec8cf1467b
Certificate serial:       010D0C9F4328584A58CB0A68A79A5750D782FF00
Authority key identifier: 94:E8:81:09:DC:EE:69:B2:A4:EC:D0:2C:7C:AB:D2:98:9A:C3:1A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/dcfddeaf-43b7-3dee-9381-6d8d6c32e17d.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     36598
IP address blocks:        2602:ff2f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/15756508-6a6f-4a84-9002-5dec8cf1467b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/15756508-6a6f-4a84-9002-5dec8cf1467b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:0a:68:a7:9a:57:50:d7:82:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15756508-6a6f-4a84-9002-5dec8cf1467b
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=36273fc5-6aa7-43bb-a5ce-ae2083d71357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:f3:00:1a:22:61:2e:89:9f:be:6a:a3:4a:
                    37:41:7a:da:83:81:39:d8:da:5c:87:18:37:0a:8a:
                    97:9b:0c:c6:4c:59:b5:1e:4b:01:03:b3:86:33:b1:
                    8c:3a:cf:8c:c8:9b:a4:83:b2:b8:f0:0a:38:f9:9f:
                    60:5e:67:3f:66:ae:e4:c6:29:82:f2:16:63:12:98:
                    7f:f2:dc:7b:f9:ea:10:15:48:f1:78:b5:e9:4c:73:
                    d1:90:5e:71:73:85:e6:75:54:34:15:78:3b:49:f4:
                    74:43:aa:c2:a7:98:09:96:75:91:ae:25:2c:de:cc:
                    70:7a:cf:64:dd:f5:53:17:d3:c3:1c:59:2e:b7:0e:
                    9b:42:d2:4b:af:c3:6a:ed:d8:5d:97:f5:e5:04:62:
                    cf:5c:db:09:3a:0b:5a:aa:c7:89:b1:17:d9:fc:1f:
                    43:f1:74:c0:7f:39:e4:cc:0e:b8:ca:34:f4:d0:61:
                    cc:e6:bc:80:93:a0:15:4b:9a:79:34:96:eb:8f:d6:
                    69:7a:17:ce:16:f8:c9:c3:e7:14:e1:05:0d:ef:11:
                    b0:b9:7c:a0:2a:bb:6f:1c:13:ff:5c:fb:63:3a:71:
                    3c:a3:4f:4f:28:d5:98:b2:7f:31:5c:fe:df:96:e0:
                    bd:86:2f:1f:3b:5a:02:ff:2e:d9:b3:87:75:96:a1:
                    e2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:92:1E:EA:37:D6:89:61:7E:22:A3:B4:34:E3:79:60:9F:51:FC:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/dcfddeaf-43b7-3dee-9381-6d8d6c32e17d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b/15756508-6a6f-4a84-9002-5dec8cf1467b.crl

            X509v3 Authority Key Identifier:
                keyid:94:E8:81:09:DC:EE:69:B2:A4:EC:D0:2C:7C:AB:D2:98:9A:C3:1A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15756508-6a6f-4a84-9002-5dec8cf1467b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff2f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:df:6a:75:fa:24:94:73:4a:1a:5f:9d:29:ad:7c:4a:81:27:
         3a:24:9e:05:0e:ea:76:cc:4e:c4:22:d7:44:fe:42:e3:2a:f8:
         29:ed:2b:dd:d8:eb:b2:4b:82:af:00:d6:72:92:44:9c:10:01:
         ae:d9:1e:d6:02:43:ee:a2:0e:54:66:02:dc:2e:6c:11:b3:81:
         eb:28:6f:f3:f8:c9:7f:b5:c8:b5:5b:e0:2e:b1:91:62:42:a9:
         ab:9b:c6:b4:ac:89:64:c9:ff:40:c7:6b:28:c6:3e:17:40:48:
         c1:cd:a7:81:01:53:71:19:b4:dc:d6:62:41:35:3a:58:8c:01:
         81:f8:8e:ec:38:97:9f:53:01:ad:16:4e:98:b5:4e:ee:10:0e:
         6a:6f:50:fb:d9:73:b8:85:3d:b1:70:09:13:00:79:ab:78:f0:
         85:46:f0:85:cf:54:18:84:45:c9:0e:ea:bc:bd:9c:b1:40:40:
         27:5a:47:3d:c1:9e:6b:41:41:98:8a:3e:89:77:fb:04:fc:b4:
         a2:c0:6a:e2:2d:69:ec:16:db:be:cc:4a:8c:bf:73:e0:a2:ff:
         e8:79:f7:94:c5:42:00:e1:97:30:43:c0:bd:52:bf:d8:68:40:
         7f:52:bc:4d:86:34:0b:a5:74:a4:47:9a:4b:cd:f7:3c:e5:3d:
         de:45:08:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:22:07 2025 by rpki-client