Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8343f259-06b0-382a-a667-79b10468b082.roa
File:                     8343f259-06b0-382a-a667-79b10468b082.roa (raw, json)
Hash identifier:          M1xI+BsK3KZdNYuNQBG1+lQQuJ8JMPxDodU4bjNEI2U=
Subject key identifier:   F4:24:C4:A4:2E:83:BD:D3:B3:5E:17:4C:E3:8C:3E:F3:26:BE:00:F4
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A14656986D346729ECAB0EB80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8343f259-06b0-382a-a667-79b10468b082.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:2025::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:69:86:d3:46:72:9e:ca:b0:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=084f28a3-baf0-4dea-9619-2ad317e8f673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:66:93:2d:3b:54:2a:0d:1d:43:6c:5f:e9:29:
                    3b:3a:ce:6f:a4:ca:c2:67:77:9d:48:12:78:ee:c7:
                    e0:77:4c:da:48:1f:c9:95:6d:97:7c:04:dd:ca:9f:
                    3c:92:89:09:d4:09:87:74:e6:2d:4d:6e:8f:21:f9:
                    e6:b2:09:5c:dd:b1:74:a7:b1:5d:e5:94:4d:34:23:
                    f3:b9:9f:46:ba:ff:d9:de:20:6b:e6:95:eb:7d:2e:
                    e8:1e:29:de:e8:37:8c:82:7c:5c:00:c6:42:9d:0d:
                    96:43:10:f7:79:ed:86:f1:98:94:67:23:99:30:0e:
                    23:2c:9f:e1:74:4b:14:b3:cc:8a:43:74:6a:47:a0:
                    58:61:b2:ac:bf:4a:07:8e:49:fe:a1:58:ef:1c:5c:
                    cc:56:1c:dc:63:89:d4:48:a3:33:76:0f:f2:51:ef:
                    2b:e0:e4:fb:5e:3b:c5:39:c2:7c:1e:95:3b:51:a8:
                    5e:95:6a:d7:e6:eb:57:1d:ff:ae:c7:cc:53:52:53:
                    52:52:b6:e7:64:7c:0f:6c:dd:25:21:ce:bc:f0:19:
                    d2:bc:7d:cd:62:16:b0:99:bc:5a:9b:fd:fc:b4:11:
                    21:d4:98:9c:32:ce:f4:e4:db:b3:bb:a4:18:ac:73:
                    88:9e:cc:29:8f:7a:2c:e7:a7:1f:9f:9f:8f:31:1e:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:C4:A4:2E:83:BD:D3:B3:5E:17:4C:E3:8C:3E:F3:26:BE:00:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8343f259-06b0-382a-a667-79b10468b082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:ff:1f:3a:e1:47:9d:be:eb:e5:e1:dd:fa:22:24:ef:84:
         ae:c9:28:c4:5b:78:f4:f0:d2:8b:ff:cf:28:09:1e:82:66:d4:
         1f:05:9d:c4:de:de:73:15:c7:7d:b0:e1:d9:eb:d5:76:83:a0:
         0d:ab:9b:96:ea:b7:02:80:fa:93:fc:3c:ee:d5:3c:dd:ce:66:
         27:1b:51:42:8c:ce:ee:fd:d0:17:c0:b2:b0:28:d2:ae:5b:68:
         d2:59:0f:91:ca:e3:84:f4:e6:42:4b:21:fa:2c:0b:a3:ab:9d:
         12:2a:81:2d:5e:41:c1:4a:dc:68:87:ab:58:4f:6a:b8:9a:46:
         80:bf:7b:b3:ac:dc:f9:34:5d:29:d3:c8:21:91:fd:de:8e:09:
         31:91:46:a2:c6:dd:6c:a7:7f:fe:27:73:2c:e4:51:a2:9d:c7:
         05:11:4e:7a:24:81:64:8a:e3:3b:7e:e9:1d:4d:cd:de:21:84:
         12:a7:71:e5:1b:58:7b:66:cb:a7:ee:8e:9a:3d:48:0a:62:92:
         bc:d4:13:f1:55:0c:b2:50:aa:58:7c:9a:d4:3d:f3:48:d2:29:
         93:d8:53:8a:9e:a7:08:15:c2:34:1f:1d:d4:92:6e:65:70:72:
         71:8a:29:c0:0d:7b:63:a3:a1:31:b1:7f:ca:7d:82:5d:d6:b3:
         ed:1b:37:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:48:04 2025 by rpki-client