Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa
File:                     88777c11-cebf-398b-9cd2-dcb17df89b2d.roa (raw, json)
Hash identifier:          vZT/fyiVwuM9GDou8acZeYK6OMC1J5hyHI0a3hEoC2U=
Subject key identifier:   88:A6:40:F2:F2:EC:FD:1A:28:FD:AD:D1:06:A9:C4:6E:B4:04:9A:E5
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584A73509BF22D6CD874DE393F20
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     62711
IP address blocks:        2602:f921::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:9b:f2:2d:6c:d8:74:de:39:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=86058604-801d-47fa-97c7-e81785c4195c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:33:68:68:b1:61:e2:83:6a:d3:ba:b5:bf:
                    33:ae:b8:30:1c:3f:2c:2d:f5:fd:24:b9:1a:ad:93:
                    ce:d2:b0:98:a4:ee:ed:dc:53:58:50:bf:a6:ab:95:
                    28:03:dc:26:ca:6a:6c:39:cf:b2:2e:97:84:7a:c9:
                    63:d4:77:d6:a0:0c:d2:9d:5a:53:ed:d5:74:b6:df:
                    81:e8:af:11:78:c0:bd:9a:c7:d6:d3:b1:ff:c1:54:
                    ee:7e:b9:8b:b9:73:a8:96:a2:53:ec:13:cf:39:9a:
                    b3:9d:2c:0e:33:c5:c8:ef:1a:9f:2a:db:f9:18:42:
                    da:93:fa:ec:71:38:5f:ad:af:af:21:b6:04:19:bd:
                    c6:e2:38:0c:9f:a5:50:7d:a1:22:85:34:fa:3c:9c:
                    bf:2f:21:57:53:dc:8b:c2:83:70:bf:96:42:ba:7a:
                    f6:43:b6:f2:f2:96:ed:ec:f5:a2:64:07:74:20:23:
                    0d:06:6f:fc:88:cb:0e:37:9f:40:60:32:52:e4:4f:
                    0e:12:00:af:f6:3d:f0:18:db:c5:12:7a:ba:5a:f3:
                    d2:6b:e7:87:60:2c:63:39:bd:ca:f3:cb:07:24:d3:
                    d9:be:bc:4c:3e:81:35:a0:cb:08:45:bb:46:10:9b:
                    88:14:c2:0d:4d:bd:ee:17:69:8a:3b:f8:13:20:8a:
                    9e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A6:40:F2:F2:EC:FD:1A:28:FD:AD:D1:06:A9:C4:6E:B4:04:9A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/88777c11-cebf-398b-9cd2-dcb17df89b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f7:f7:aa:5f:f9:7d:61:fb:59:17:67:ad:19:ca:4e:e4:50:
         f5:79:b5:fe:bc:a5:cd:30:5e:4c:b0:2f:97:17:65:3d:b4:2a:
         d3:e9:55:4c:be:db:81:9c:24:de:0e:fe:48:d1:78:ed:e4:f8:
         16:82:1e:a0:74:a2:ff:e7:fa:40:77:11:3b:ed:1b:48:1b:cd:
         45:fd:b4:ce:aa:d0:24:72:3d:bd:29:f2:30:43:fd:b8:23:99:
         89:6f:1e:2f:d8:32:44:7a:2a:51:a9:cb:06:c5:97:f3:9c:b7:
         d3:eb:c7:2f:f3:e2:9f:26:c4:04:c9:e7:76:91:a0:57:0a:db:
         63:b7:76:f1:5d:6e:dc:2a:46:a5:74:f5:f0:b1:9e:43:de:23:
         a9:17:fb:aa:4c:67:cd:f9:31:20:eb:5f:46:3b:49:a8:57:e9:
         62:01:2d:fe:40:18:b0:47:a5:8c:1d:4b:0a:fe:1b:1b:a7:13:
         b2:1a:8d:81:f4:83:aa:14:b5:20:97:f6:ce:82:43:27:34:88:
         59:d0:14:63:e7:ad:33:8b:c4:7a:a1:b1:73:c4:77:a5:75:4b:
         98:85:7f:17:a4:cc:09:f8:79:eb:d1:f4:1f:68:f3:2f:40:5c:
         34:c9:24:39:51:54:2c:43:63:dd:27:37:ca:d5:af:f6:51:cf:
         a4:89:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:44:53 2025 by rpki-client