Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/db502f7a-4376-3a05-80a6-28dc07021356.roa
File:                     db502f7a-4376-3a05-80a6-28dc07021356.roa (raw, json)
Hash identifier:          yZv0NLjbWBQZlesoaDwdEQES8EB7PR3ilKWVwskDuS8=
Subject key identifier:   13:1C:A5:F7:DA:8B:9A:EE:F7:6D:4C:13:3E:80:71:7C:6E:18:59:A9
Certificate issuer:       /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Certificate serial:       010D0C9F4328584A43DAF8EA7E995684C3FBC400
Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/db502f7a-4376-3a05-80a6-28dc07021356.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     14333
IP address blocks:        2602:ff99::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:f8:ea:7e:99:56:84:c3:fb:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=8c57538a-e60d-4934-b5d0-4c1eef258a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:21:65:c3:80:87:38:a8:1e:26:1f:57:26:
                    26:db:7d:be:49:cd:c5:bf:81:2b:0e:a2:ca:32:10:
                    12:d2:0c:95:b5:02:0b:da:0e:e1:b9:53:69:8c:7a:
                    29:77:5b:e8:c4:75:19:c8:cc:ec:6f:1c:f1:8a:80:
                    aa:e1:d0:c5:58:90:d0:a6:88:6d:14:b0:00:0f:aa:
                    24:9d:39:15:5d:98:7a:d7:67:14:6c:bd:dc:f0:1e:
                    92:69:4a:98:eb:ca:2b:93:5b:62:33:be:33:5a:d9:
                    a4:34:e8:41:d1:03:32:01:d1:a1:c4:22:cd:25:3d:
                    10:86:37:33:0b:8b:ec:b6:92:fe:3c:da:11:bb:42:
                    31:b6:f6:a6:57:b7:46:23:3e:79:ff:a1:a5:45:eb:
                    40:05:a8:31:3e:11:84:47:cf:d4:45:dd:b3:ce:b2:
                    35:60:d0:0f:68:d5:0b:0a:d5:ff:a9:7c:48:51:04:
                    a3:26:d2:c7:b2:3d:ae:e2:d7:8d:ae:5f:4e:1f:3c:
                    ad:2d:22:4d:41:e6:d4:69:ed:a3:c7:67:de:cd:4f:
                    34:99:8e:9f:fc:4c:b1:45:98:47:28:ca:9b:f5:16:
                    95:7a:53:f1:2e:17:58:5f:4e:75:af:3d:d1:bc:2d:
                    80:87:6f:04:9a:36:7e:a5:b7:22:b9:de:18:f2:dc:
                    ff:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1C:A5:F7:DA:8B:9A:EE:F7:6D:4C:13:3E:80:71:7C:6E:18:59:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/db502f7a-4376-3a05-80a6-28dc07021356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl

            X509v3 Authority Key Identifier:
                keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff99::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:c1:27:41:26:43:a8:2f:8e:f9:89:70:3d:cb:24:73:f4:
         d5:60:02:b4:e8:a7:80:14:b8:73:24:67:59:1e:01:3d:d3:59:
         8f:ce:ee:44:bd:5c:19:5f:9a:33:09:5b:02:b7:16:0c:0b:91:
         98:67:35:05:c6:2a:f1:3f:4f:07:1c:62:bc:17:38:ba:31:35:
         80:77:f9:2a:a9:b1:70:35:d8:1c:94:df:6e:52:17:00:bb:f7:
         f7:2d:66:f4:ff:85:0b:7b:cb:da:bb:24:2e:10:20:b9:7b:a6:
         7c:2a:29:f4:d7:06:43:2f:b2:c8:1a:10:d5:af:b5:12:26:c0:
         6f:7b:a0:f8:d7:54:18:89:65:ae:a8:23:c6:4e:54:3d:c3:58:
         c7:68:c5:68:50:99:f1:83:ea:6a:d1:f3:d5:05:a9:a2:d5:ec:
         71:8a:9e:cd:2d:f8:24:a7:17:5c:2e:3b:e2:c7:1f:33:80:ed:
         ec:e4:ed:57:03:d8:38:c1:80:95:b9:e3:d0:17:ff:c1:3e:8d:
         28:1e:cf:95:6c:c3:7a:f6:d9:19:3f:40:85:c1:e7:31:ba:d6:
         9f:20:ea:27:bb:ce:df:78:6b:2c:ba:dc:50:b0:40:89:88:e4:
         65:18:51:ff:a3:b8:07:93:7f:83:da:e4:35:6c:9c:5c:cb:42:
         57:c3:49:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:54:39 2025 by rpki-client