Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/452787fd-3ff5-3491-acba-ea7bc99fc52c.roa
File:                     452787fd-3ff5-3491-acba-ea7bc99fc52c.roa (raw, json)
Hash identifier:          gihl5hGjZFQsa/HfN98LfcLtJr93jbXc3kGnf+ALjho=
Subject key identifier:   A3:60:F0:96:97:B7:1C:98:10:68:65:AA:D1:79:57:89:E4:50:C1:9D
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A14657A0AA35F60A486BB9060
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/452787fd-3ff5-3491-acba-ea7bc99fc52c.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:2055::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7a:0a:a3:5f:60:a4:86:bb:90:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=82700fc2-4e48-4ec7-afb2-f70ac5c40db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:ac:9a:c5:10:26:f6:35:94:cd:55:38:58:
                    6d:fa:aa:7e:80:fc:ba:dc:44:4b:9a:9c:a0:1a:13:
                    ea:94:02:77:2f:ac:f6:9e:6a:ec:f6:fe:5e:09:fd:
                    b6:27:0b:fa:3b:a6:80:b7:ed:b8:46:3f:16:90:56:
                    e3:69:cf:fc:39:5d:30:65:04:a7:27:30:f3:32:95:
                    93:f2:03:62:47:af:97:e6:b6:9a:9e:4c:ce:cc:dc:
                    5d:be:7d:d6:f4:88:de:da:79:51:7b:59:90:7a:93:
                    68:73:22:9d:f7:14:59:4e:c7:f2:8e:13:b7:de:92:
                    1a:f9:e5:c0:62:1d:f3:e0:98:65:d7:58:89:1f:da:
                    bc:e4:98:3d:d9:3a:8f:54:80:02:cb:0e:cc:9c:cd:
                    8d:5d:87:dc:18:ae:8d:b9:73:72:8f:e7:74:35:38:
                    2d:2c:e5:02:b0:1c:da:f6:44:00:46:da:ab:da:23:
                    9e:b0:e9:42:07:94:91:c8:df:2f:d7:9f:1a:79:71:
                    a7:af:84:80:ad:19:68:c3:b7:cb:60:15:a6:31:86:
                    8e:9d:08:bf:6e:95:53:91:64:6c:67:d2:03:5e:65:
                    2f:2f:83:93:d6:a5:b2:cd:21:d0:6e:ac:74:69:3c:
                    a9:05:2d:ba:2e:83:05:a4:00:5e:6d:88:05:7d:ac:
                    2a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:60:F0:96:97:B7:1C:98:10:68:65:AA:D1:79:57:89:E4:50:C1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/452787fd-3ff5-3491-acba-ea7bc99fc52c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2055::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0c:8a:99:75:b9:92:72:de:fb:ca:75:bc:fd:6c:79:fe:49:
         57:80:80:b0:df:c9:31:c5:0b:41:25:e9:f3:a0:88:47:85:13:
         19:aa:8e:ba:36:52:84:b3:76:7e:24:76:cd:6f:6a:a3:37:48:
         b9:49:95:a5:53:94:57:40:25:cd:88:08:13:2d:55:9e:76:68:
         af:85:d5:03:da:e1:16:37:8b:46:df:ad:b6:2f:c5:8a:ec:d8:
         68:86:a6:d1:1a:fa:be:62:fc:56:7c:17:a6:3f:67:3f:d6:48:
         d1:3d:ea:c6:8a:8b:14:80:9b:f4:a8:0d:20:e6:b7:76:ce:14:
         9c:62:e7:13:38:c5:eb:dd:4f:f2:c9:1f:35:5c:62:9f:b5:76:
         67:c0:f4:22:82:e6:12:a8:1d:f1:ae:a8:4f:23:db:bb:4d:4c:
         47:28:ec:39:19:09:49:31:93:bf:fb:82:3a:a3:26:ee:96:78:
         0a:50:e4:33:74:eb:0f:23:0c:05:8d:97:dd:5e:a6:37:b9:b8:
         93:92:98:09:1e:4e:51:58:19:80:1c:61:a0:96:e4:ef:89:5d:
         8f:4f:00:d2:50:48:55:0f:96:69:fe:96:09:63:41:17:ed:77:
         f4:73:2f:86:d1:b5:9b:40:08:46:f9:1e:8e:dc:34:17:ce:ea:
         28:9c:c5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:46:14 2025 by rpki-client