Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/620f85f5-a289-36c0-be53-d9310a3bf681.roa
File:                     620f85f5-a289-36c0-be53-d9310a3bf681.roa (raw, json)
Hash identifier:          qoB5s1MDn90gcO2pvwh0JGPW7F8h8ljkboA4Ch+SEFc=
Subject key identifier:   85:E9:DB:F0:6E:E3:41:E6:25:BA:36:9F:D7:FB:FD:48:6D:D6:08:BB
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A14657A85BE3E857E51E8D980
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/620f85f5-a289-36c0-be53-d9310a3bf681.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:205d::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:7a:85:be:3e:85:7e:51:e8:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=386545a7-fcca-4136-9567-5a5483c8d0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:47:88:3c:3c:94:99:07:ca:b2:68:31:54:
                    02:10:2f:03:81:d4:66:5d:bf:d7:a4:92:cb:f9:18:
                    7e:8a:53:7e:e6:3a:81:d6:52:17:a2:39:26:c3:53:
                    b2:46:d4:bf:4b:05:6e:01:12:75:28:94:55:69:35:
                    11:06:49:a6:da:6b:26:ec:2f:28:2a:0b:a4:64:35:
                    b8:a7:d3:b2:63:9e:10:b1:69:85:a9:af:2b:78:63:
                    26:ca:f5:f8:96:87:e5:b2:96:4a:96:57:b7:20:c2:
                    ff:d8:7a:b3:5e:68:0f:8b:b3:d1:3f:41:1e:51:38:
                    e6:5d:f8:96:f8:fe:72:d4:63:cb:85:4c:56:b6:8f:
                    fb:ab:f0:73:0d:08:54:00:d5:bc:5a:e3:27:9b:4a:
                    60:23:66:d2:50:71:77:7d:c2:92:8c:96:fb:99:b2:
                    f0:c1:8a:7d:c8:fe:f8:25:40:05:e2:52:e1:bc:46:
                    e6:b9:a2:d2:05:c0:26:b9:a0:b2:cb:fe:7b:81:25:
                    41:f8:41:6b:29:22:8e:56:1f:d7:45:ca:b0:62:64:
                    d4:11:c2:81:3c:c3:4c:2f:31:9f:80:24:6d:2a:8c:
                    93:cf:cb:8b:7f:a9:59:3a:96:07:20:b8:42:55:d3:
                    fb:f8:74:cc:e7:59:c1:18:08:7e:f9:42:f9:28:83:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E9:DB:F0:6E:E3:41:E6:25:BA:36:9F:D7:FB:FD:48:6D:D6:08:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/620f85f5-a289-36c0-be53-d9310a3bf681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:205d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:03:bb:50:59:e9:c9:ee:eb:65:20:d1:6f:b9:05:14:a1:3e:
         f8:59:b6:23:3a:b8:fd:9a:53:96:cd:8f:41:d7:bd:8b:7e:63:
         24:5a:cb:6b:42:c2:a6:f1:c7:8c:eb:37:fb:f7:c0:ea:58:2a:
         67:50:61:4c:1f:d6:a0:4c:31:4c:b6:06:78:05:8f:bf:fc:e8:
         4e:33:0f:61:18:0b:04:82:56:17:1a:70:21:9c:ea:62:49:bb:
         77:5c:41:e0:d9:a9:09:82:b5:0f:51:ad:e2:38:e5:64:83:aa:
         17:a0:47:bb:38:37:0d:52:6e:29:1e:2d:80:c3:95:a4:70:f6:
         c5:27:cf:30:53:20:81:44:9b:0a:5c:c9:63:ac:b8:86:06:d1:
         db:2b:25:e0:fe:37:cb:4f:7e:6b:43:37:ca:ea:e3:4d:34:54:
         8a:52:d4:53:f2:f6:56:41:de:4a:56:db:c7:bf:7b:d9:0d:05:
         9f:3a:8b:4d:91:3f:92:cb:c8:9b:ff:76:5a:de:a7:7b:a2:e0:
         d7:e1:38:5d:b9:4d:a9:00:a6:ee:ae:bc:1f:d4:f3:00:55:03:
         a3:7b:eb:84:d9:25:5e:3b:28:83:8c:3e:b2:46:83:d4:77:2f:
         7e:fe:a9:b0:86:c6:76:8d:40:70:e8:85:d1:e6:fa:58:b9:f9:
         c1:20:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:51:11 2025 by rpki-client