Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/acbe1679-f358-3f60-86a4-cb3c1cd9ccc9.roa
File:                     acbe1679-f358-3f60-86a4-cb3c1cd9ccc9.roa (raw, json)
Hash identifier:          9tqhvz4OOIbRrd/e6gEVIyKZPKNAXVfy9NPH/siS5so=
Subject key identifier:   F3:F3:4E:E3:64:0F:39:DA:F3:6A:D3:90:30:27:0D:06:1A:FA:13:6F
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584A146578D1E2E6C37AE3D7F980
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/acbe1679-f358-3f60-86a4-cb3c1cd9ccc9.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     399976
IP address blocks:        2602:80c:2043::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:78:d1:e2:e6:c3:7a:e3:d7:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=28ebc8e8-56be-43de-ac2b-3e63f19eee0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:38:ac:d4:2c:00:83:d0:2e:5b:f1:ce:9e:63:
                    16:4a:e4:72:82:9a:77:25:ab:b9:cd:69:a1:34:8d:
                    7a:73:ba:b3:b2:9b:98:30:6d:aa:4a:53:13:64:7a:
                    a2:71:76:61:f1:57:33:f2:2f:9e:68:1e:4f:3e:4c:
                    61:75:f0:a2:69:8f:09:1c:21:71:14:52:9a:bc:f6:
                    21:cd:ab:13:36:35:97:18:46:95:28:c4:0d:40:5f:
                    59:a8:75:33:e2:dd:a4:10:d7:f6:2e:bc:f8:06:fd:
                    27:b2:66:17:a9:8d:fe:03:91:73:1f:0c:fb:cb:09:
                    ed:6b:4a:cb:fa:98:15:1d:66:cb:cd:e6:48:1b:27:
                    dd:a7:a4:48:12:e0:ef:6e:e9:f4:5e:12:41:40:40:
                    3c:16:77:1a:c1:4e:bf:15:57:3e:3c:0a:7d:32:fa:
                    ee:38:1f:74:9c:ba:6c:7c:15:21:90:4d:a7:a0:35:
                    09:ba:13:10:ab:aa:4f:ff:40:6b:db:89:d0:88:ac:
                    aa:6f:9f:d2:fe:67:6c:45:4a:81:d6:08:5c:01:e2:
                    b1:ba:16:73:45:94:f3:71:60:61:1e:b8:c8:5d:7e:
                    0d:7a:5c:f6:d7:0a:7d:8a:68:06:88:c9:0c:f8:82:
                    61:e1:fc:8d:f6:01:b1:19:f6:8d:1d:ba:e8:52:2a:
                    01:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F3:4E:E3:64:0F:39:DA:F3:6A:D3:90:30:27:0D:06:1A:FA:13:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/acbe1679-f358-3f60-86a4-cb3c1cd9ccc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2043::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:5c:af:d1:56:ba:d7:4a:53:d4:2b:fa:ff:b5:71:19:23:18:
         41:83:70:03:b0:43:fc:9c:ae:04:04:40:f0:dd:2e:6f:12:87:
         06:f3:3b:31:f2:28:85:0c:03:2c:6f:42:24:31:87:c4:fa:1c:
         e1:36:a0:63:74:34:c6:bf:32:80:c8:b4:c7:5a:71:df:8b:d4:
         6a:aa:c0:07:a8:5c:bc:cf:44:70:92:4f:00:3a:e3:46:b8:45:
         5e:3c:e3:30:28:f1:49:5e:42:39:4f:28:8a:a8:42:47:91:06:
         a9:10:b4:50:fa:a9:6f:1c:d2:e2:91:39:07:47:90:bd:1b:57:
         c2:e7:96:12:59:f0:78:17:62:81:bf:12:17:4e:6e:33:ea:51:
         0f:2d:75:83:15:b0:16:83:b2:e5:c7:8a:61:c6:32:75:37:45:
         56:44:e8:87:b3:9e:2d:e0:8f:d5:cc:29:e8:15:4a:40:fc:c3:
         cb:24:10:bb:1c:2d:cd:97:35:fc:d4:f1:79:4b:d8:d1:12:64:
         54:fe:11:62:56:38:7c:79:60:08:3c:93:28:98:52:c5:23:22:
         79:1d:2d:07:4d:b5:d8:42:7e:93:33:a1:f7:d0:48:e6:30:29:
         88:4c:71:bf:df:3a:fd:86:69:2a:cc:e1:87:36:ee:4a:f1:b7:
         ba:15:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:47:30 2025 by rpki-client