Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/035e5ad5-92a6-3d6b-876d-8ce7cd6ac007.roa
File:                     035e5ad5-92a6-3d6b-876d-8ce7cd6ac007.roa (raw, json)
Hash identifier:          MXIax2wBa7O618fYu4WIK8X0KfKiT74WcrlD6t/RXVU=
Subject key identifier:   AA:2B:EB:B9:58:A5:95:05:54:37:C8:8D:4F:D6:59:A7:6B:5C:31:6E
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A14657BC6A55149F48BE95480
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/035e5ad5-92a6-3d6b-876d-8ce7cd6ac007.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:20be::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7b:c6:a5:51:49:f4:8b:e9:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=f909bcb4-ea96-4bf3-aae3-9d8e7fa3d517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:46:38:95:4b:70:ea:c3:99:7f:a0:bc:67:
                    9a:65:77:35:17:a4:9a:63:1c:2b:04:01:ac:84:83:
                    df:72:de:15:36:15:3a:ff:0f:16:a9:06:59:bb:de:
                    39:a1:b1:92:b6:fd:87:cc:29:6f:ef:7e:40:b8:09:
                    6f:57:2c:79:8c:d7:0c:45:2d:59:a9:57:84:33:32:
                    bb:45:37:fa:00:10:c8:38:5b:0a:dd:5d:12:b0:95:
                    aa:96:cc:72:48:18:af:5e:ac:a9:fa:96:97:af:11:
                    4f:b0:45:aa:c3:07:3b:22:b8:73:a7:2c:a1:fc:58:
                    a5:f0:6c:1f:9e:d5:b1:a2:92:26:44:f2:a0:da:96:
                    24:59:ef:80:ac:81:c4:be:d4:f1:82:19:61:ef:69:
                    8d:45:b4:a5:d9:7a:b7:c8:37:d2:06:32:67:9d:df:
                    7f:95:09:df:14:c2:b0:7d:eb:2a:96:ba:5c:f5:75:
                    78:0e:24:33:41:4a:d7:05:2b:a0:82:2a:be:8d:91:
                    1c:da:52:4f:d7:49:6e:29:3d:cd:e7:98:1c:97:62:
                    4c:e1:63:4a:b0:e1:b5:64:95:9b:51:fa:bd:e8:50:
                    fc:22:1a:ff:83:0f:bc:53:63:d1:f2:34:a1:b3:f2:
                    59:f9:4b:1a:9a:6b:03:17:2d:3d:dc:13:ed:a9:89:
                    fa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2B:EB:B9:58:A5:95:05:54:37:C8:8D:4F:D6:59:A7:6B:5C:31:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/035e5ad5-92a6-3d6b-876d-8ce7cd6ac007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:88:09:27:9e:92:59:fe:27:05:51:c3:3c:b4:4d:27:91:91:
         4a:cf:14:05:49:18:19:89:e2:a3:9d:ab:2f:ff:38:a0:45:b1:
         c3:e1:16:14:ee:ad:2c:20:03:5b:4f:b0:14:77:ef:6b:b2:25:
         da:0b:13:22:2f:64:b1:4a:8c:86:b3:25:94:d3:04:8e:fa:d7:
         03:98:f2:67:e8:ce:37:1d:08:d6:07:8d:16:65:33:67:9c:14:
         ac:13:bd:8a:db:16:ba:46:f8:51:6a:32:6c:99:dc:aa:ae:e5:
         49:6b:9f:53:3d:34:39:a9:8a:45:92:74:c6:a3:ed:c7:a9:46:
         7f:47:e9:12:04:8a:8d:e9:97:97:83:ad:79:6d:39:07:69:e1:
         56:68:07:80:5b:7c:4c:bd:bd:ff:06:44:7e:be:ad:46:35:9b:
         1f:3e:7d:66:10:44:d7:31:ea:14:f7:70:f8:33:79:9d:a7:e1:
         62:5b:28:6f:75:64:55:10:de:be:84:9c:f9:40:b9:6c:cb:14:
         ad:f7:54:93:50:01:56:67:9f:4a:12:3e:1f:c1:43:d2:27:31:
         f9:e4:c7:ac:49:1a:9c:7d:9b:fc:ad:bf:7d:56:17:88:7e:a2:
         2c:2c:e4:e4:21:31:77:3d:77:26:4c:79:9e:97:cf:e6:3e:16:
         9e:60:2a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:47:23 2025 by rpki-client