Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/0e6d8cc7-3d0e-33d5-8edb-30044030466f.roa
File:                     0e6d8cc7-3d0e-33d5-8edb-30044030466f.roa (raw, json)
Hash identifier:          ykEl+8oI593uCJxJg5WnffBJMrl4MyDMhIE/IDha42M=
Subject key identifier:   01:F6:E7:BF:98:59:5D:05:69:0F:55:EC:55:CD:29:68:EB:F8:EA:C2
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A14656DD2B982F6DB62FC8780
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/0e6d8cc7-3d0e-33d5-8edb-30044030466f.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:20c9::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:6d:d2:b9:82:f6:db:62:fc:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=a3c3f918-97ea-4332-b94d-bc3020d69b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:01:e3:4e:e5:e1:db:6b:01:98:55:83:a7:
                    44:c1:62:13:1a:8b:27:58:de:9f:a4:69:5f:12:9a:
                    6f:66:78:89:9d:ea:77:d8:4e:52:d7:b2:54:3d:a7:
                    b9:dd:fe:eb:07:b8:bc:67:0b:0c:66:cc:1d:fc:27:
                    7f:39:48:a0:57:c9:a7:b0:3b:1d:66:69:4e:86:21:
                    62:6a:28:e2:5d:35:ce:b5:9f:0e:5c:6a:03:f4:7d:
                    8e:48:39:aa:4a:7d:5d:a8:87:fe:de:d0:9c:99:64:
                    5d:83:05:8f:b5:5b:0f:25:3d:28:6f:0a:1d:a2:31:
                    05:e6:bf:a1:10:c8:06:78:3d:06:77:3c:fa:2a:d4:
                    d9:10:86:08:09:77:84:83:b5:81:7f:a6:f8:c6:e7:
                    68:b7:98:73:e9:3c:01:7f:49:a8:58:ff:9a:5b:4c:
                    09:3b:03:18:60:7a:e3:73:b7:97:41:05:ed:d5:02:
                    a7:a6:b8:0a:ae:76:e2:83:f3:7e:d6:96:6b:c3:45:
                    e8:b1:47:6b:59:95:9c:ba:44:fc:77:7e:39:01:da:
                    49:ac:7a:d1:d6:d5:8b:06:c0:bd:b9:6d:70:77:e2:
                    e9:c7:28:f3:a2:1c:b5:d8:f2:b0:ad:43:a9:74:f6:
                    b5:62:62:7c:38:79:d0:4b:af:97:e3:1d:1c:6e:ad:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F6:E7:BF:98:59:5D:05:69:0F:55:EC:55:CD:29:68:EB:F8:EA:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/0e6d8cc7-3d0e-33d5-8edb-30044030466f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20c9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:5c:31:9c:5d:5d:d0:62:05:30:b5:6f:5d:ac:4f:18:c4:92:
         c5:4b:1d:64:62:4f:7a:13:48:19:7e:07:b5:60:92:36:9c:79:
         d0:19:aa:4d:9b:99:50:9f:fe:44:a1:7f:08:3c:ae:d8:62:2b:
         fa:98:de:27:8d:eb:a1:d6:85:f4:bc:1c:1d:e2:c9:0f:2f:c0:
         ff:82:2e:69:56:0a:49:c9:82:ad:ad:99:06:0c:16:ce:01:69:
         4f:16:7d:39:0a:58:c5:e4:fc:16:fd:4b:21:ae:81:18:89:82:
         34:6e:e7:f7:7c:1b:62:98:8d:ec:d6:88:54:9c:ad:08:0b:f6:
         e6:d0:23:19:cc:56:96:fb:a4:d9:c8:f6:92:9b:b0:d7:4e:fa:
         1f:0f:77:cd:9d:3f:cc:12:f7:11:bd:66:b2:11:51:f8:44:5d:
         9a:2d:aa:86:55:f2:e7:23:9a:24:b2:44:9c:3d:60:c8:97:39:
         1e:f7:92:ff:e0:8c:87:59:f6:32:f9:2d:b6:a5:50:1b:ae:cd:
         eb:0f:51:ea:ba:a2:4f:98:96:82:44:c1:c2:80:06:7a:c2:2a:
         f3:27:63:f8:b2:09:3a:16:c2:a8:e2:39:07:c3:db:83:9f:8f:
         e3:fc:51:d6:81:29:36:4e:10:09:09:46:c7:c2:fb:68:b7:43:
         a5:b3:6f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:04:41 2025 by rpki-client