Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/34d22573-0f93-38b3-a0f0-70b3fada07d6.roa
File:                     34d22573-0f93-38b3-a0f0-70b3fada07d6.roa (raw, json)
Hash identifier:          1U1QJ+yJLtkUepqMrrBYjxHmTMTknIQwylhcmcrcpys=
Subject key identifier:   D6:BB:83:40:56:3F:8C:8F:57:25:01:A2:AE:5E:4E:24:3D:02:D9:21
Certificate issuer:       /CN=5039f611-54f3-4a44-9153-55949e05704b
Certificate serial:       010D0C9F43285849EA8522339100D99D8BC8EB80
Authority key identifier: 9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/34d22573-0f93-38b3-a0f0-70b3fada07d6.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        2602:fa66::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:22:33:91:00:d9:9d:8b:c8:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5039f611-54f3-4a44-9153-55949e05704b
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=848c27e9-8c64-441a-b047-1a88707d6d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:c4:a8:b0:f5:ed:be:fd:50:70:fc:3d:7c:
                    96:dd:39:60:4c:fa:2e:f4:01:af:66:79:da:fd:93:
                    14:c7:e6:48:82:15:97:dc:43:00:12:c3:d9:67:8b:
                    60:03:03:f1:a8:86:24:01:00:e6:8f:41:33:34:57:
                    75:81:1b:d6:bf:27:e3:60:0f:b4:bd:c2:ee:3a:89:
                    e9:c8:22:af:e8:52:58:d6:96:33:b4:d3:06:91:61:
                    24:ee:90:1a:87:ab:a3:c5:ea:04:45:aa:bb:a4:dd:
                    24:27:58:4f:88:96:7a:e0:47:c3:c3:3f:01:56:4a:
                    20:7d:7f:bd:e9:82:a7:bd:bd:dc:21:9f:a4:c4:7e:
                    af:af:5d:00:70:bf:5e:e9:41:5c:f5:2c:c6:07:00:
                    56:16:ec:86:21:37:af:51:e6:04:73:a4:ad:87:6e:
                    c2:11:c4:dc:39:7c:59:5b:2f:08:6e:7d:67:7c:1c:
                    ac:5e:84:19:72:f1:6e:7f:6e:51:e5:ad:5c:76:b8:
                    e5:6a:3f:15:cc:d9:30:4c:bd:ca:f1:f9:fc:b0:85:
                    b1:b8:a1:19:2c:cd:79:af:75:85:1c:e9:56:6d:4a:
                    d3:1f:19:80:4b:5e:3b:38:61:f3:00:6d:1f:c8:d8:
                    21:29:60:52:41:f8:e8:69:df:f1:96:96:4d:07:02:
                    05:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BB:83:40:56:3F:8C:8F:57:25:01:A2:AE:5E:4E:24:3D:02:D9:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/34d22573-0f93-38b3-a0f0-70b3fada07d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl

            X509v3 Authority Key Identifier:
                keyid:9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa66::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:de:1a:9c:8d:91:fe:db:de:f5:ce:a4:94:80:ca:77:40:96:
         fd:f5:db:78:c6:c2:33:cb:e7:32:6a:ba:1a:02:67:3a:26:1c:
         80:40:c4:dc:87:f2:2d:fe:0a:d0:6e:ff:58:08:45:5b:65:23:
         ee:58:ba:b1:1a:13:92:0a:8e:ba:60:9c:e4:bc:cc:bb:d5:49:
         3b:f5:96:30:06:e3:9b:91:bb:02:56:58:1b:00:6e:71:c6:e7:
         e3:d4:f5:85:fc:52:f1:72:26:2e:ba:73:54:52:c7:f7:c9:56:
         02:b7:99:66:27:4e:9f:be:3f:16:24:26:06:4b:a5:66:80:92:
         6d:6b:60:ac:d9:5a:cf:93:4e:e1:c4:70:df:41:aa:dc:4f:3e:
         5d:0a:7e:6e:37:dd:9f:13:86:04:74:08:d6:27:9b:e3:3f:0d:
         9f:b2:0d:cf:b4:0a:bf:68:32:8b:1a:4a:fe:44:a3:0b:3f:90:
         a9:e3:5c:03:64:ab:a0:e9:42:c2:5f:4f:9b:0a:cb:fa:1c:fa:
         2b:00:26:18:0c:c2:bf:69:5b:66:ab:4d:e7:02:89:06:7c:44:
         e4:22:ab:a5:0d:d9:00:d8:9e:c7:dc:3d:98:99:f0:cb:07:10:
         57:23:d7:75:7c:c7:76:fc:fe:87:8d:36:7d:cc:c2:8a:f6:40:
         b0:8f:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:47:08 2025 by rpki-client