Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa
File:                     72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa (raw, json)
Hash identifier:          oG0bhtSfk5vDgGNBbiBq7mdeYRLhv9L/p/MydjyaPRM=
Subject key identifier:   22:0C:93:4C:59:E5:36:65:57:2B:CE:5F:D4:F1:B6:99:79:B3:6F:43
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A1465788008EF129D2A698300
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:2000::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:78:80:08:ef:12:9d:2a:69:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=948462ed-dfa5-4e95-8699-e5be707a8256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:00:e8:a3:4d:13:e5:fe:f2:ca:be:f1:a6:
                    c4:6a:4a:b8:7e:4f:8f:a9:82:8b:9a:d6:56:ee:79:
                    c9:b8:6d:a6:20:4a:8f:82:4c:9f:67:f9:76:fe:d3:
                    85:2a:e2:b9:30:8b:ff:43:cb:10:22:9c:ab:29:d5:
                    b9:55:48:8a:12:dc:5e:77:2e:83:39:98:a9:23:7c:
                    00:34:84:0a:a6:f1:9e:89:e5:fc:fd:57:d1:f7:e3:
                    3e:0c:1a:2b:7d:87:d7:91:97:b5:09:f3:c2:61:aa:
                    df:db:75:0f:17:2e:45:8f:0a:2c:e8:ea:2b:40:65:
                    32:c6:67:f6:5c:dc:a1:94:f2:66:c8:3a:f5:61:1b:
                    36:6e:04:e2:fc:ff:55:3e:a7:39:ee:ed:a3:c4:b3:
                    d5:12:15:b6:66:73:44:13:40:34:b8:f5:a4:2b:ec:
                    59:cc:c7:88:64:4d:1f:ec:72:b3:f2:28:42:78:ad:
                    a6:97:ca:67:ab:98:41:2a:fa:c8:61:42:ab:dd:98:
                    cf:fe:97:8f:18:22:5e:3d:f5:ef:74:e3:76:74:5f:
                    8f:89:37:a4:fa:bf:8c:0b:f1:2c:9a:29:7c:53:bb:
                    2b:f9:c4:0d:68:37:78:ca:23:16:18:04:24:d5:63:
                    02:88:a1:76:ce:4e:27:9a:f9:a1:3b:70:b7:5b:ff:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0C:93:4C:59:E5:36:65:57:2B:CE:5F:D4:F1:B6:99:79:B3:6F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/72aadc42-a6b6-3f1e-a9b2-c3d46ec632da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:82:f4:ce:ce:4e:b0:e6:68:ae:ae:8a:a6:1e:ef:24:9a:ea:
         72:00:a8:d6:df:5c:b5:f8:da:78:4f:9c:a8:19:f6:08:7e:02:
         9a:8c:2f:31:c4:2a:21:c0:62:a5:b5:9a:a5:64:ce:eb:6e:30:
         5e:e6:58:ea:e0:1a:5c:7f:cd:8f:6e:24:42:a2:2f:64:f8:c6:
         71:3a:0b:09:bf:af:84:aa:45:9c:81:6e:b2:0c:e1:b1:41:c3:
         b2:f0:fd:4d:5d:72:f7:0e:b7:f8:9d:ec:04:70:2a:a1:8c:5f:
         ca:ac:aa:db:64:74:b3:5a:9b:74:2d:98:4a:c9:5e:2f:33:5b:
         9c:b0:f5:ba:92:c2:c0:6b:80:b4:d8:96:0d:14:35:44:eb:39:
         f6:38:02:61:08:2a:d2:dd:3d:a9:1f:c9:d1:57:91:11:3e:05:
         64:e0:2d:e1:78:d4:82:c5:23:24:28:81:5b:da:50:10:79:46:
         33:26:a7:9a:26:0f:e1:3e:8a:d4:de:e3:ae:a3:c9:86:21:00:
         eb:d4:a2:b0:ad:98:ee:d9:44:8d:45:ef:7e:bc:70:88:6d:11:
         c4:a4:36:c1:c8:8f:c8:be:c3:7a:0f:b6:99:73:0e:90:a3:41:
         30:08:c5:04:4e:f5:c5:7e:31:93:d4:2b:9b:a6:7e:91:fe:ba:
         93:c5:9d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:47:23 2025 by rpki-client