Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a872dc60-b0fd-32cc-a999-53e91767b69c.roa
File:                     a872dc60-b0fd-32cc-a999-53e91767b69c.roa (raw, json)
Hash identifier:          7WBs6SUMzByelHy1quOn0hRY3vkku173H1ejF+No0N8=
Subject key identifier:   92:0A:58:F1:7E:D7:64:1A:AE:45:B2:E6:38:56:EA:EF:E8:0D:18:5D
Certificate issuer:       /CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d
Certificate serial:       010D0C9F4328584A6DBB4431575536D8CA09AD80
Authority key identifier: 6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a872dc60-b0fd-32cc-a999-53e91767b69c.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        2602:f8d4::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:44:31:57:55:36:d8:ca:09:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b2ccef-7c30-4a40-90ca-ce1703a22a1d
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=a56fe00a-45be-4e62-9042-77a88a2091f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:32:cb:4f:76:f6:99:e2:2f:3d:2d:38:ee:
                    5d:6c:a5:81:f5:69:10:c0:26:42:c8:d2:39:e2:a2:
                    0c:63:9d:e7:94:2d:3b:0b:3a:2e:03:49:2a:61:4b:
                    0c:99:e4:5f:fa:e6:fc:52:cb:d6:ce:11:ba:af:e2:
                    37:a8:24:0b:dd:a1:aa:52:48:f1:11:3a:15:4f:d1:
                    9b:d5:0f:4f:88:34:66:db:bc:1b:33:ba:55:22:c1:
                    d3:0d:d6:99:bc:ff:d4:10:50:dd:74:e5:52:6c:c7:
                    fa:04:90:00:84:53:8e:08:72:62:f4:05:75:73:fc:
                    df:d3:2f:ee:b0:47:fc:70:63:f4:7a:01:cd:f3:28:
                    29:53:97:68:13:f7:df:1a:66:de:a4:60:55:97:a7:
                    67:c0:84:b3:3b:16:de:d4:7a:b1:31:35:1e:28:a6:
                    24:69:69:c4:7e:b6:de:aa:c4:7e:6d:6f:8f:76:1c:
                    27:2f:76:b3:51:c2:72:a5:6a:9e:82:08:0d:5e:92:
                    32:ca:09:fa:aa:b2:0e:a9:52:36:6d:34:02:e0:cb:
                    23:74:de:4e:20:7c:5c:f7:6a:de:62:f9:d5:5e:60:
                    47:ac:89:9a:9e:e4:8b:7e:8f:be:7a:d1:5c:15:af:
                    ef:75:36:8e:7d:be:77:0b:50:b9:8b:3e:1d:82:b9:
                    99:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0A:58:F1:7E:D7:64:1A:AE:45:B2:E6:38:56:EA:EF:E8:0D:18:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a872dc60-b0fd-32cc-a999-53e91767b69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:F3:A5:0D:A3:51:FB:B5:47:EB:8B:B8:3C:68:4F:B0:5C:64:1C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b2ccef-7c30-4a40-90ca-ce1703a22a1d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8d4::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:00:4d:5b:6b:e3:a5:6e:11:0b:3b:3f:ac:76:f2:2e:86:a1:
         52:e4:b0:10:a1:17:b7:80:6e:36:0b:3f:a2:a0:9c:d5:3c:b3:
         25:5a:fb:2b:ea:0f:98:bd:eb:28:80:68:95:89:b7:fc:80:b9:
         70:03:eb:37:14:f0:62:5b:1a:3f:35:ff:aa:19:d6:8d:5c:07:
         c0:fa:ae:d8:4e:13:2b:84:02:82:05:f8:e9:f9:77:4d:9a:24:
         d5:86:69:f2:6e:64:69:8f:a7:be:24:e5:2e:22:4c:91:b0:72:
         cf:9b:c3:76:43:77:c1:f8:34:4e:38:7f:d1:db:8f:80:78:ce:
         80:ea:54:c8:52:44:5a:5a:56:9f:2a:dc:dd:cc:aa:4c:53:55:
         8e:54:ec:6e:3e:db:35:44:0b:f0:ae:3a:a5:e3:c2:23:d8:eb:
         e0:08:15:37:de:de:c4:39:e1:8c:7d:9b:cb:6d:e8:40:9c:4a:
         6d:84:ed:f3:08:9b:16:d9:be:2f:1d:17:68:d5:41:66:ff:16:
         41:0f:a6:a1:c9:02:2f:18:a2:04:76:ce:b5:13:ee:19:77:fb:
         b7:5a:a2:2d:37:0c:81:62:c9:c7:d8:ca:0e:b4:b9:e0:b6:10:
         00:5a:6b:3d:24:53:1e:32:05:70:2e:f9:ee:de:da:b1:1a:85:
         99:31:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:33:25 2025 by rpki-client